Controller: Suomen Vitamiinikeskus Oy
Person in charge: Henri Tauriainen, 045 2775200, email@example.com
Storage location / system: WooCommerce
Data classification: Confidential / Highly confidential
The main purpose of the register is to manage, take care of and maintain customer relationships and receive work applications. The personal information contained in the register is used to produce and implement services for customers, customer communications, the billing of services, the collection of payments from customers, and the targeting of advertising and / or direct marketing.
The basis for the maintenance of the register and the processing of personal data is the fulfillment of the rights and obligations of the customer and the register controller.
The register may contain, for example, the following information: the person’s name, email address, mobile and / or other phone number, purchase history, payment card information, contracts, invoices, deliveries, contact logs, other information provided and reported by the registered user, such as social media profiles on the part of job seekers. The register may also include personal identifiers sent by the jobseeker themselves. For non-private customers, the register records the organization’s name, the name and position of the contact person, the organization ID or equivalent, and the organization’s address information.
The register also includes recorded calls for training and quality control purposes.
The data is stored and processed in accordance with the “confidential” rating, except for the “highly confidential” rating for payment cards.
The data will be collected from the registered person themselves in connection with the establishment of a customer relationship, and, as far as the organizational data is concerned, possibly from the enterprise and association information system of the Finnish Patent and Registration Office.
No separate consent from the data subject is required for the processing of personal data as the basis for the maintenance of the register and the processing of personal data is the implementation of the rights and obligations of the register controller and the register controller’s partner.
The data subject has the opportunity to view and inspect data about themselves, whilst data can be corrected, if necessary. The data subject has the right to limit the use of his / her data for marketing communications.
The data controller shall not disclose personal data contained in the register to any third parties, except in the exercise of the rights and obligations of the data subject and of the data controller, or if the Finnish authorities so require. The data controller shall not transfer personal data contained in the register outside the EU or the EEA, unless the rights and obligations of the registered and the controller are fulfilled, or if the Finnish authorities so require.
Data will be deleted and the data subject may demand the deletion of information about themselves after the end of any co-operation, following the rights and obligations of all data subjects, register controller and register controller partners. Data may already be recorded as archived / inactive before this time. Longer-term archiving requires the anonymization or pseudonymization of personal data. The register is regularly checked for outdated information.
Improper access to data and devices containing data and materials is prevented through various technical and administrative procedures.