PRIVACY POLICY
1. Data controller and contact information
Mestarikalustajat Oy
Kylmäniementie 8
90540 Oulu
Finland
Business ID 2955036-4
2. Data subjects
Customers of the Cazo online store.
3. Basis and purpose of use for processing personal data
Personal data are processed on the basis of a registered customer relationship. Customer relationship is formed upon placing an order in the Cazo online store.
Personal data are processed only for predefined purposes, which include the following:
- to maintain customer relationships
- to inform about our services
4. Personal data recorded in the register
The customer register contains the following personal data:
- name
- address
- phone number
- details about purchased products / services
5. Rights of the data subject
The data subject has the following rights, requests for the exercise of which should be sent to the address:
Mestarikalustajat Oy
Kylmäniementie 8
90540 Oulu, Finland
Or via e-mail
Right to inspect
The data subject has the right to inspect their personal data in our records.
Right to rectification
The data subject has the right to request the rectification of inaccurate or inaccurate personal data concerning them.
Right to object
The data subject has the right to object to the processing of their personal data, if they feel their personal data have been processed against the law.
Restriction on direct marketing
The data subject has the right to object to the processing of their personal data for the purposes of direct marketing.
Right to erasure
The data subject has the right to request the erasure of their data, if the processing of this data is not necessary. We will process the request for erasure, after which we will either erase the data or notify the data subject of a legitimate cause why the data cannot be erased.
It is noteworthy that the data controller may have a statutory or other right to not erase the requested data. The data controller is obliged to keep accounting records for the period of time (10 years) defined by the Accounting Act (chapter 2, section 10). Therefore, any data related to accounting cannot be deleted before the termination of that period.
Right to withdraw consent
If processing of the data subject’s personal data is solely based on consent, as opposed to things such as customer relationship or membership, the data subject has the right to withdraw that consent.
The data subject has the right to appeal a decision to the Data Protection Ombudsman.
The data subject has the right to request us to restrict the processing of any disputed data for a period needed for solving the dispute.
Right to complain
The data subject has the right to make a complaint to the Data Protection Ombudsman, if they find that we are processing their personal data in breach of current data protection legislation.
Contact details for the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Regular data sources
As a rule, customer data are received from the customer themself as a result of a newly formed customer relationship.
7. Regular transfers of data
No personal data are released outside Cazo for marketing purposes.
We have ensured that all our service providers are acting in accordance with data protection legislation.
Our regular service providers include the following:
- Lucci Oy
- VismaPay
- Shipit Oy Ab
8. Duration of data processing
As a rule, personal data are processed for the duration of the customer relationship.
9. Who are processing your personal data
Your personal data are processed by the data controller and their employees. We may also outsource the processing of personal data to a third party, in which case we will guarantee with contractual agreements that the data are processed in accordance with current data protection legislation and otherwise appropriately.
10. Transferring data outside the EU
No personal data are transferred outside the EU or European Economic Area.
11. Automated decision-making and profiling
We do not use personal data for automated decision-making or profiling.