Privacy Notice
1
Data Controller
Kohomelo Oy / OXA Innovations
Business ID: 2055331-5
Contact Information:
Contact Person for Data Protection Matters:
Kari Saikkonen
Phone: +358 44 989 4360
Email: kari@oxainnovations.com
2
Rekisteröidyt
Customers who have placed an order.
3
Purpose of Processing Personal Data
-
Personal data is processed on the following grounds:
-
Based on a customer relationship.
-
Based on consent (e.g. potential customer list collected at trade fairs or consent obtained via a form for marketing purposes).
Purpose of the Register and Data Processing
Personal data is processed only for pre-defined purposes, such as:
-
Managing and maintaining the customer relationship.
4
Data Stored in the Register
The customer register contains the following information:
Contact Information:
-
Name
-
Address
-
Email address
-
Phone number
Customer Information:
-
Details of purchased products or services
5
Rights of the Data Subject
The data subject has the following rights.
All requests regarding these rights should be sent to info@oxainnovations.com.
-
Right of Access
The data subject has the right to access the personal data we hold about them.
-
Right to Rectification
The data subject has the right to request correction of inaccurate or incomplete personal data.
-
Right to Object
The data subject has the right to object to the processing of their personal data if they believe it has been processed unlawfully.
-
Right to Restrict Direct Marketing
The data subject has the right to prohibit the use of their data for direct marketing purposes.
-
Right to Erasure (“Right to be Forgotten”)
The data subject has the right to request deletion of their data if its processing is no longer necessary. We will process the deletion request and either remove the data or provide a justified reason why it cannot be deleted.
Please note that the controller may have a legal or other obligation to retain certain data. For example, under the Finnish Accounting Act (Chapter 2, Section 10), bookkeeping material must be retained for 10 years, and therefore related data cannot be deleted before that period has expired.
-
Right to Withdraw Consent
If the processing of personal data is based solely on consent (and not, for example, on a customer relationship or membership), the data subject may withdraw their consent at any time.
-
Right to Lodge a Complaint
The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe that their personal data has been processed in violation of applicable data protection laws.
Contact details: www.tietosuoja.fi/en/index/contactus.html
6
Regular Sources of Data
Customer data is obtained primarily from:
-
The customer themselves when placing an order through our online store.
The customer themselves when submitting information via an online form.
6
Regular Sources of Data
Customer data is obtained primarily from:
-
The customer themselves when placing an order through our online store.
-
The customer themselves when submitting information via an online form.
7
Regular Disclosures of Data
Personal data will not be disclosed for marketing purposes outside OXA innovations.
We ensure that all our service providers comply with applicable data protection legislation
8
Duration of Processing
-
Personal data is processed mainly for as long as the customer relationship is active.
9
Processors of Personal Data
-
The customer register is processed by the employees of OXA innovations.
-
The controller and its employees process personal data. Processing may also be partially outsourced to third parties, in which case we ensure through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and appropriately.
10
Transfer of Data Outside the EU or EEA
-
Personal data is not transferred outside the European Union (EU) or the European Economic Area (EEA).
11
Automated Decision-Making and Profiling
-
Personal data is not used for automated decision-making or profiling.