Registry and Privacy Statement
Registry and Privacy Statement
This is the Registry and Privacy Statement of the Company in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on 31.08.2020.
Registrar
MediTerveys Oy
Luodontie 372
21500 Piikkiö
Other contact details:
+358443439681
info@na2rel.fi
www.na2rel.fi
Registry No. 2945889-1
Contact person responsible for the register
Elina Selin, info@na2rel.fi, +358443439681
Name of register
Na2rel.fi customer register
Purpose of register
The purpose of the register is to maintain and archive na2rel.fi customer relations. The data can be used for operational development and statistical purposes. Personal data is processed within the limits permitted and required by the Personal Data Act.
Information in the register
- First and last name of the person
- Email address
- Postal address
- Phone number
- Information on processed and pending orders
Other information that can be collected about you:
- Observed and analytically derived information on the use of services
- Purchase history, e.g. ordered products and their price information
- Possible product reviews written by you
- Online store usage and browsing information and also terminal identification details
- Information and tags used for targeted content
- Automatically collected information about your session on our site, including: IP address, location, Internet browser used, browsing information on our site, keywords used to reach our site, and referenced sites from which you reached our site
- We receive automatically collected data through the following technologies: cookies that the browser stores either on your device or your computer
- Tag and “pixel” files that collect information about how you use our site (including what site you visit, at what time and on what day, from what IP address you visit our site)
Disclosure, confidentiality and use of information
- Customer service administration
- Order processing, delivery and archiving
- Development of Online store services and improvement of customer experience
- Analytics
- Targeted content and marketing
- Prevention of misuse
- Improvement of customer service
- Development of our business
Your data can be disclosed to the following parties:
We only share your information with third parties who comply with data protection regulations and law. Among other, your information is shared with the following parties:
We provide information to enable our service partners in the IT, payment, transportation and accounting industries to provide the service. Such situations include, for example, when ordering payment or logistics services or other services of the Online store provided by third parties that are ordered through our website or service. Any such communication to third parties in connection with the provision of the service is mentioned separately in connection with the ordering of the service.
We may also disclose information as required to fulfill our contractual obligations or as required by law or a competent authority. We may also disclose your information if we are involved in a business transaction or acquisition.
Other places where your information can be used:
- Google Analytics - we use Google Analytics service to analyze user data and traffic (more information about how Google is using personal information: https://www.google.com/intl/en... or you can also opt out of Google Analytics tracking here: https://tools.google.com/dlpag... )
- We may also share your information with Facebook to promote targeted content on Facebook to you (you can opt out of targeted Facebook marketing here: https://www.facebook.com/setti... )
- Google AdWords can be used for keyword advertising (you can opt out of targeted AdWords marketing here: https://www.google.com/setting... )
The information is not disclosed outside the EU or the EEA.
How long personal data is retained?
We retain your personal data only as long as is necessary for its purpose or as required by contract or law.
We strive to update information as well as delete unnecessary information on a regular basis. In general we delete data that has not been used for more than two years, provided that there is no other reason to retain the data, for example to ensure the security of our services, or a legal basis.
Please note that, for example, the Finnish Accounting Act requires the accounting records to be kept for at least six (6) years from the end of the financial year.
Registry security principles
Your information is kept on the servers of our service providers, which are protected in accordance with general industry practices. We ensure that the processing complies with the requirements of applicable law and safety measures designed to prevent the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or unauthorized access to personal data.
The personal data we collect and process is kept confidential and access to it is restricted to those who need the information in the course of their work. We also undertake not to provide or disclose personal information to non-employees or other persons (including any subcontractors) who need to know the information for the agreed purpose and who are required by service or other agreements or legally required to keep the information confidential. Access to your personal information is protected by user-specific IDs, passwords and access rights.
Right of inspection and right to request correction of data
Any person in the register has the right to check the information kept in the register and to request the correction of any incorrect data or the completion of incomplete information. If a person wishes to check the personal data kept or request a correction thereof, the request must be sent in writing to the registrar. If necessary, the registrar may ask the applicant to prove his or her identity. The registrar responds to the customer within the timeframe established by the EU Data Protection Regulation (generally within one month).
Other rights related to processing of personal data
Any person in the register has the right to request the removal of his or her personal data from the register ("the right to be forgotten"). Any data subject also has other rights according to the EU general data protection regulation, such as restrictions on the processing of personal data in certain situations. Requests must be sent in writing to the registrar. If necessary, the registrar may ask the applicant to prove his or her identity. The registrar responds to the customer within the timeframe established by the EU Data Protection Regulation (generally within one month).
Right of inspection and right to request correction of data
Any person in the register has the right to check the information kept in the register and to request the correction of any incorrect data or the completion of incomplete information. If a person wishes to check the personal data kept or request a correction thereof, the request must be sent in writing to the registrar. If necessary, the registrar may ask the applicant to prove his or her identity. The registrar responds to the customer within the timeframe established by the EU Data Protection Regulation (generally within one month).
Other rights related to processing of personal data
Any person in the register has the right to request the removal of his or her personal data from the register ("the right to be forgotten"). Any data subject also has other rights according to the EU general data protection regulation, such as restrictions on the processing of personal data in certain situations. Requests must be sent in writing to the registrar. If necessary, the registrar may ask the applicant to prove his or her identity. The registrar responds to the customer within the timeframe established by the EU Data Protection Regulation (generally within one month).