Privacy Policy Page

CUSTOMER REGISTER PRIVACY POLICY

1. Data Controller
Puutarhauska 42300 Jämsänkoski Finland
sinitsa17@gmail.com
0405751972

2. Register Name

Name of the register — Flower Shop Customer Register.

3. Purpose of personal data processing

The collected personal data are used:

customer identification and access rights management
for invoicing
for order delivery
for maintaining customer relationships
development of customer relationships
for marketing (if consent has been given)
​​
4. Contents of the register data (processed groups of personal data)

The register contains the following personal data, in principle, of all registered persons:
first and last name
delivery and billing address
telephone number
e-mail address
permissions and prohibitions for direct marketing of the person

5. Regular sources of information
Personal data are collected from the registered person themselves.
Personal data are also collected and updated within the framework of applicable law from publicly available sources that are related to the implementation of the customer relationship between the controller and the data subject and enable the controller to fulfill its obligations related to the maintenance of the customer relationship.

6. Duration of storage of personal data
Personal data are stored as long as necessary for the implementation of the contract with the customer or for the development of customer service. However, for at least six years from the end of the financial year.

7. Recipients of personal data (recipient groups) and regular disclosure of data
Personal data are not passed on to third parties.

8. Transfer of data outside the EU or EEA
Information is not generally disclosed outside the company. Some external service or software providers used by the company may store data outside the EU or the European Economic Area.

9. Cookies
We use so-called cookies on our website. Cookie function. A cookie is a small text file sent to and stored on the user’s computer that enables the website operator to identify repeat visitors, make it easier for visitors to log in to the website and ensure that aggregated information about visitors is collected. This feedback helps us to continually improve the content of our pages. Cookies do not harm the computers or files of users. We use them to provide our customers with information and services tailored to their individual needs.
If a user visiting our website does not want us to receive the above information via cookies, most browser programs allow you to disable the cookie function. This is usually done via the browser settings.
It should be noted, however, that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we offer.

10. Registry protection principles
Data is transmitted via a secure SSL connection.
Electronic data is protected by a firewall, user names and passwords.
Only those persons who work for the controller and who need this information to perform their duties have access to the data.

11. Rights of the data subject

The data subject has the right to inspect what information about him or her is stored in the personal data register. A written request for inspection must be sent and signed by the person responsible for the registry. The right of inspection is free of charge and can be exercised no more than once a year.

The data subject has the right to request that incorrect or outdated data be corrected or deleted, or that data be transferred from one system to another. The right to erasure does not apply to personal data that we are obliged to retain for administrative or legal reasons.

The data subject also has the right to restrict or object to the processing of his or her data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.

The data subject has the right to revoke consent previously given to the processing of data or to lodge a complaint with a supervisory authority regarding issues related to the processing of his or her personal data.

The data subject also has the right to prohibit the use of his or her information for marketing purposes.