Privacy policy
This is a declaration of personal data processing in accordance with the EU General Data Protection Regulation (GDPR) (679/2016).
Data Controller
Jenna Rautén
Contacts for Data Protection Matters
Jenna Rautén
Tel: +358 40 0807973
Email: jennarauten@gmail.com
In all questions related to the processing of personal data and in situations related to the exercise of one’s rights, the data subject is advised to contact the aforementioned contact person.
Name of the Personal Data File
Customer Register
Legal Basis and Purpose of Processing Personal Data
The legal basis for processing personal data is the consent given by the data subject for the processing of their personal data.
The purpose of processing personal data is the backup and archiving of contacts sent through the contact form. The goal of processing is to ensure that all contacts are reliably and securely stored and processed, so that we can respond to the questions, feedback, or provide the requested services presented in them. Personal data, such as name, email address, and phone number, are used for individual processing of contacts and delivering an appropriate response.
Personal Data Processed
The data controller collects from the data subjects only such personal data that are essential and necessary for the purposes described in this privacy statement.
The following information is processed about the data subjects:
- Name
- Phone Number
Protection of Personal Data
The data controller processes personal data in a manner that aims to ensure the proper security of personal data, including protection against unauthorized processing as well as accidental loss, destruction, or damage.
The data controller uses appropriate technical and organizational measures to achieve this goal, including the use of firewalls, encryption technologies, and secure facility access, proper access control, careful management of user IDs in information systems, and instruction of staff involved in processing personal data.
All employees handling personal data have a duty of confidentiality about the processing of personal data of the data subjects, based on the Employment Contracts Act (55/2001) and the supplementary confidentiality agreements.
Data Retention Period
The data controller processes personal data for 4 years. After this period, the data controller will delete or anonymize the data within 1 year in accordance with their deletion processes. The data controller may have an obligation to process some of the personal data in the register for longer than stated above to comply with legislation or regulatory requirements.
Rights of the Data Subject
Right to Access Personal Data
The data subject has the right to receive confirmation on whether their personal data is being processed and, if so, the right to receive a copy of their personal data.
Right to Rectification
The data subject has the right to request the correction of inaccurate and incorrect personal data concerning them. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to Erasure
The data subject has the right to request the deletion of their personal data if a. the personal data is no longer needed for the purposes for which it was collected; b. the data subject withdraws consent on which the processing is based, and there is no other legal ground for the processing; or c. the personal data has been unlawfully processed.
Right to Restriction of Processing
The data subject has the right to restrict the processing of their personal data if a. the data subject contests the accuracy of their personal data; b. the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; or c. the data controller no longer needs the personal data for the original purposes of the processing, but the data subject requires them for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent
The data subject has the right to withdraw their consent to the processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability
The data subject has the right to receive their personal data, which they have provided to the data controller, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another data controller.
Right to Lodge a Complaint with a Supervisory Authority
The national supervisory authority for personal data matters is the Office of the Data Protection Ombudsman, which operates in connection with the Ministry of Justice. You have the right to bring your case before the supervisory authority if you believe that the processing of your personal data violates applicable legislation.
Changes to Privacy Practices
The data controller continuously develops its operations and, as a result, may need to change and update its privacy practices as needed. Changes may also be based on changes in data protection legislation.
If the changes involve new purposes for processing personal data or otherwise significantly change, the data controller will announce them in advance and request consent if necessary.