Privacy policy
Register and Privacy Statement
This is a register and privacy statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on October 27, 2020.
Register Controller
Suomen Unikaverit Oy, Koskelantie 5, 00610 Helsinki
Other Contact Information
Contact Person Responsible for the Register
Aleksi Kukkola, unikaveritoy@gmail.com
Name of the Register
Order Register of the Kaluste Duo Online Store
Legal Basis and Purpose of Processing Personal Data
The purpose of processing personal data is to deliver products and communicate with customers of the online store. Personal data is used for the following purposes:
- Maintenance of customer relationships
- Offering products from Suomen Unikaverit Oy
- Handling of possible warranty issues and refunds
- Processing, delivery, and archiving of orders
- Improving customer and purchasing experiences and customer relationships
- Producing targeted content and marketing
- Preventing misuse, crimes, and fraud
The data will not be used for automated decision-making or profiling.
Contents of the Register
The data stored in the register includes: the person's name, contact information (phone number, email address, delivery address), and information about the ordered products.
Regular Data Sources
Data recorded in the register is obtained from the customer during the order process in the online store.
Regular Transfers of Data and Transfer of Data Outside the EU or EEA
Data will not be disclosed to third parties.
Principles of Register Protection
In the processing of the register, care will be taken, and the information processed using information systems is adequately protected. When register data is stored on internet servers, the physical and digital security of the hardware is appropriately maintained. The register controller ensures that stored information, as well as server access rights and other data critical to the security of personal data, is handled confidentially and only by those employees for whom it is part of their job description.
Right of Inspection and Right to Request Correction of Information
Every person in the register has the right to check their stored information and request correction of any incorrect information or completion of incomplete information. If a person wishes to check the information stored about them or request corrections, the request must be sent via email to the register controller. The register controller may request the requester to prove their identity if necessary. The register controller will respond to the customer within the time stipulated in the EU data protection regulation (generally within one month).
Other Rights Related to the Processing of Personal Data
Individuals in the register have the right to request the deletion of their personal data from the register ("right to be forgotten"). Registered individuals also have other rights under the EU General Data Protection Regulation, such as the restriction of processing personal data in certain situations. Requests should be sent via email to the register controller. The register controller may request the requester to prove their identity if necessary. The register controller will respond to the customer within the time stipulated in the EU data protection regulation (generally within one month).
