1. Data controller and contact information

Mestarikalustajat Oy
Kylmäniementie 8
90540 Oulu

Business ID 2955036-4

2. Data subjects

Customers of the Cazo online store.

3. Basis and purpose of use for processing personal data

Personal data are processed on the basis of a registered customer relationship. Customer relationship is formed upon placing an order in the Cazo online store.

Personal data are processed only for predefined purposes, which include the following:

  • to maintain customer relationships
  • to inform about our services

4. Personal data recorded in the register

The customer register contains the following personal data:

  • name
  • address
  • e-mail
  • phone number
  • details about purchased products / services

5. Rights of the data subject

The data subject has the following rights, requests for the exercise of which should be sent to the address:

Mestarikalustajat Oy
Kylmäniementie 8
90540 Oulu, Finland

Or via e-mail

Right to inspect

The data subject has the right to inspect their personal data in our records.

Right to rectification

The data subject has the right to request the rectification of inaccurate or inaccurate personal data concerning them.

Right to object

The data subject has the right to object to the processing of their personal data, if they feel their personal data have been processed against the law.

Restriction on direct marketing

The data subject has the right to object to the processing of their personal data for the purposes of direct marketing.

Right to erasure

The data subject has the right to request the erasure of their data, if the processing of this data is not necessary. We will process the request for erasure, after which we will either erase the data or notify the data subject of a legitimate cause why the data cannot be erased.

It is noteworthy that the data controller may have a statutory or other right to not erase the requested data. The data controller is obliged to keep accounting records for the period of time (10 years) defined by the Accounting Act (chapter 2, section 10). Therefore, any data related to accounting cannot be deleted before the termination of that period.

Right to withdraw consent

If processing of the data subject’s personal data is solely based on consent, as opposed to things such as customer relationship or membership, the data subject has the right to withdraw that consent.

The data subject has the right to appeal a decision to the Data Protection Ombudsman.

The data subject has the right to request us to restrict the processing of any disputed data for a period needed for solving the dispute.

Right to complain

The data subject has the right to make a complaint to the Data Protection Ombudsman, if they find that we are processing their personal data in breach of current data protection legislation.

Contact details for the Data Protection Ombudsman:

6. Regular data sources

As a rule, customer data are received from the customer themself as a result of a newly formed customer relationship.

7. Regular transfers of data

No personal data are released outside Cazo for marketing purposes.

We have ensured that all our service providers are acting in accordance with data protection legislation.

Our regular service providers include the following:

  • Lucci Oy
  • VismaPay
  • Shipit Oy Ab

8. Duration of data processing

As a rule, personal data are processed for the duration of the customer relationship.

9. Who are processing your personal data

Your personal data are processed by the data controller and their employees. We may also outsource the processing of personal data to a third party, in which case we will guarantee with contractual agreements that the data are processed in accordance with current data protection legislation and otherwise appropriately.

10. Transferring data outside the EU

No personal data are transferred outside the EU or European Economic Area.

11. Automated decision-making and profiling

We do not use personal data for automated decision-making or profiling.