1. Data Controller:
Piako Oy
Business ID: 2352124-7
Linnatie 10
76850 NAARAJÄRVI
Contact Person for Registry Matters
Sara Winter
sara.winter@piako.fi
+358 44 262 8389
2. Data Subjects:
Customers, potential customers, personnel, event participants.
3. Purpose of Processing Personal Data:
Basis for maintaining the registry:
- Personal data is processed based on the data subject’s customer relationship.
- Personal data is processed based on consent (lotteries and event registrations where consent has been requested).
Purpose of Processing Personal Data and the Registry
Personal data is processed only for predetermined purposes, which are as follows:
- Managing customer relationships
- Providing information about our services
4. Personal Data Stored in the Registry:
The customer registry contains the following information:
Contact Information
- Name
- Address
- Email address
- Phone number
Customer Information:
- Information about purchased products/services
5. Rights of the Data Subject:
The data subject has the following rights, and requests to exercise them should be sent to sara.winter@piako.fi.
Right of Access
The data subject can check the personal data we have stored.
Right to Rectification
The data subject can request the rectification of incorrect or incomplete data concerning them.
Right to Object
The data subject can object to the processing of personal data if they feel that the personal data has been processed unlawfully.
Right to Prohibit Direct Marketing
The data subject has the right to prohibit the use of data for direct marketing.
Right to Erasure (Right to be Forgotten)
The data subject has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request and then either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the data controller may have a legal or other right not to delete the requested data. The data controller is obliged to retain accounting materials for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting-related materials cannot be deleted before the expiration of the deadline.
Withdrawal of Consent
If the processing of personal data concerning the data subject is based solely on consent, and not, for example, on a customer relationship or membership, the data subject can withdraw their consent.
The Data Subject Can Complain About the Decision to the Data Protection Ombudsman
The data subject has the right to demand that we restrict the processing of disputed data until the matter is resolved.
Right to Complain
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel that we are violating applicable data protection laws when processing personal data. Â
Data Protection Ombudsman’s contact information: www.tietosuoja.fi/en/index/contact-information.html
6. Regular Sources of Information:
Customer information is regularly obtained:
- From the customer themselves when the customer relationship is established.
- From the customer themselves via a web form.
7. Regular Disclosures of Information:
Information is not disclosed for marketing purposes outside Piako Oy.
We have ensured that all our service providers comply with data protection legislation.
8. Duration of Processing:
- Personal data is generally processed as long as the customer relationship is valid.
- The data subject can remove themselves from our marketing list via the link in each marketing email we send.
9. Processors of Personal Data:
The data controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.
10. Transfer of Data Outside the EU:
Data may also be transferred by the data controller outside the EU or EEA if the software used to maintain the customer relationship, where the data is stored, changes.
11. Automated Decision-Making and Profiling:
We do not use data for automated decision-making or profiling.