Privacy policy
JOY BY M & V CUSTOMER REGISTER PRIVACY STATEMENT
1 Registrar
The registrar of the register is JOY by M & V (Mulari & Virtanen Oy) (business ID 2829690-7)
The contact person for registry matters is: Jaana Mulari
JOY by M & V
Address:
JOY by M & V
Mulari & Virtanen Oy
Raatimiehenkatu 33A
28120 Pori
Email: info@joybymv.com
2 Register name
The name of the register is JOY by M & V online store customer register.
3 Purpose of personal data processing
Personal data is processed for purposes related to managing, managing and developing customer relationships, providing and delivering services, and developing and invoicing services. Personal data is also processed for the purposes required to settle possible complaints and other claims.
Furthermore, personal data is processed in communications aimed at customers, such as for information and news purposes, as well as in marketing, as part of which personal data is also processed for purposes related to direct marketing and electronic direct marketing.
The customer has the right to refuse direct marketing aimed at him.
The registrar processes the data itself and uses subcontractors acting on behalf and on behalf of the registrar in the processing of personal data.
4 Legal grounds for processing
The legal bases for the processing of personal data are the following bases according to the EU General Data Protection Regulation (hereinafter also "GDPR"):
- the data subject has given his consent to the processing of his personal data for one or more specific purposes (GDPR 6 art. 1.a);
- the processing is necessary for the implementation of an agreement to which the data subject is a party, or for the implementation of measures prior to the conclusion of the agreement at the request of the data subject (GDPR 6 art. 1.b);
- the processing is necessary to fulfill the legitimate interests of the controller or a third party (GDPR 6 art. 1.f).
The legitimate interest of the data controller mentioned above is based on a meaningful and appropriate relationship between the data subject and the data controller, which is a consequence of the fact that the data subject is a customer of the data controller, and when the processing takes place for purposes that the data subject could reasonably have expected at the time of the collection of personal data and in connection with the relevant relationship .
5 Information content of the register (groups of personal data to be processed)
The register basically contains the following personal information about all registered persons:
- person's basic information and contact information: first name, last name, address, phone number, e-mail address;
- information related to the person's company or other organization and the person's position or job title. in a company or organization;
- person's direct marketing permissions and prohibitions.
6 Regular data sources
Personal data is collected from the registered person himself.
Personal data is also collected and updated within the limits of the applicable legislation from generally available sources, which are related to the implementation of the customer relationship between the controller and the registered person and with which the controller fulfills its obligations related to maintaining customer relationships.
7 Personal data retention period
Information collected in the register is stored only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal information was collected
The need to store personal data is evaluated every five years; and in any case, the data concerning the registered person will be deleted from the register five years after the customer relationship of that registered person with the controller has ended, and the obligations and actions related to the customer relationship have been completed. For example, accounting documents are kept for five years after the end of the accounting period.
The registrar evaluates the necessity of storing data regularly in accordance with its internal code of conduct. In addition, the controller takes all possible reasonable measures to ensure that inaccurate, incorrect or outdated personal data in relation to the purposes of the processing is deleted or corrected without delay.
8 Recipients of personal data (recipient groups) and regular transfers of data
We hand over personal data to the necessary extent to logistics and payment service partners, to enable the operation of our online store.
9 Data transfer outside the EU or EEA Personal data included in the register will not be transferred outside the EU or EEA. 10 Principles of registry protection Materials containing personal data are stored in locked rooms, to which access is only available to designated and authorized persons due to their duties. The database containing personal data is on a server that is kept in a locked state, to which only designated and authorized persons have access due to their duties. The server is protected with an appropriate firewall and technical protection. Databases and systems can only be accessed with separately issued personal usernames and passwords. The registrar has limited access rights and authorizations to information systems and other storage platforms in such a way that the data can be viewed and processed only by the persons necessary for their legal processing. In addition, database and system usage events are registered in the log data of the controller's IT system. Employees and other persons of the registrar are committed to observe the duty of confidentiality and to keep secret the information they receive in connection with the processing of personal data. 11 Rights of the registrant The registrant has the following rights according to the EU General Data Protection Regulation: Requests regarding the exercise of the data subject's rights are addressed to the controller's contact person mentioned in point 1. 12 Web Analytics The services below collect anonymized information about website visits without personal information. - Google Analytics 13 Targeted marketing Based on the visit to the pages, we may do targeted advertising in the following services - Facebook