Privacy policy
Kouvolan Lakritsi Oy is committed to complying with the EU's General Data Protection Regulation (GDPR), which applies from 25.5.2018 in all EU member states.
DATA CONTROLLER
Kouvolan Lakritsi Oy
Business ID: 0911055-6
Hietamäentie 6
45200 Kouvola
+358 5 321 3002
PERSON IN CHARGE OF THE REGISTER
Virve Ekroth/Sanna Inkala
Kouvolan Lakritsi Oy
Phone +358 5 321 3002
Email myynti@kouvolanlakritsi.fi
NAME OF REGISTER
Kouvolan Lakritsi Oy's customer register
LEGAL BASIS AND PURPOSE OF THE PROCESSING OF PERSONAL DATA
The legal basis for processing personal data under the EU General Data Protection Regulation is
-the consent of the individual (documented, freely given, specific, informed and unambiguous)
-a contract to which the data subject is a party
-the law
-a legitimate interest of the controller (e.g. customer relationship, employment relationship, membership
The purpose of the register is to maintain the customer register of Kouvolan Lakritsi Oy and to archive and process customer orders and customer relations. The register is also used to track lost packages. The data may be used to develop Kouvolan Lakritsi Oy's operations, for statistical purposes and to produce more personalised targeted content in our online services. Personal data is processed within the limits allowed and required by the Personal Data Act. The data in the register may be used in Kouvolan Lakritsi Oy's own registers for targeting advertising without disclosing personal data to third parties.
Kouvolan Lakritsi Oy may use partners to maintain customer and service relationships. Some of the register data may be transferred to the partner's servers due to technical requirements.
In connection with the delivery of products, customer data may be disclosed to the third party responsible for the delivery (for example, Posti or Matkahuolto), and the same applies to online payments (payment service provider Paytrail Oyj.).
The customer has the right to prevent the publication of information by notifying Kouvolan Lakritsi Oy's customer service, by e-mail myynti@kouvolanlakritsi.fi.
INFORMATION CONTAINED IN THE REGISTER
The personal data register contains the following information:
The person's first and last name
Email address
Postal address
Telephone number
Details of processed orders
Posti tracking information for orders
REGULAR DATA SOURCES
The information contained in the register is based on the data entered by the customer in the online service (web form). In addition, information is obtained from the customer via email, telephone, social media services, contracts, customer meetings and other situations where the customer provides his/her data.
At the customer's request, personal data concerning them may be deleted from Kouvolan Lakritsi Oy's systems.
We will retain personal data only for the time necessary to fulfil the purposes of use described in this notice. For some data, the law imposes obligations to store the data for longer periods, including for the following purposes:
-The Accounting Act prescribes longer retention periods for data, whether or not the data contains personal data.
-Taking permanent backups of databases and systems to secure data, correct errors and ensure data security and continuity.
HOW WE CHECK AND HANDLE REVIEWS
We collect, acquire, process and display reviews on our website using Loox, a web-based online review and marketing application. We publish all reviews collected, posted or imported on Loox.
We may temporarily or permanently hide or remove published reviews if they are deemed to contain illegal language, obscene or violent language, or to be fake.
Through Loox, we automatically send review requests to customers who we know have purchased products directly from our website. This allows us to verify the trustworthiness of the reviewer through technical means, such as the customer's email address. Reviews sent directly through these requests are marked with the text "Verified Purchase" and the following statement is displayed on the source that publishes the review: "This review was received from a verified customer who purchased this product.".
If a customer submits a review directly from our website, the review will not be marked as verified and the following statement will be displayed in the source that publishes the review: 'This review was written by a visitor to the site'. Reviews can also be imported into Loox from an external source. For imported reviews, the following statement will be displayed in the interface that publishes the review: 'This review has been imported from an external source'.
We may verify reviews sent directly from and imported from our website using reasonable and proportionate methods, such as requesting valid proof that the customer has actually used or purchased the product. In these cases, if a review is marked as "Verified Purchase", the following statement will be displayed on the interface that posts the review: "This review has been marked as verified by the shop owner".
Customers can rate products by giving scores from 1 to 5. The average of the ratings is calculated using a simple mathematical average, rounded to half or full stars using standard rounding rules. The average review score includes reviews for which customers have received discounts on future purchases by adding a picture or video to the review.
DISCLOSURE AND TRANSFER OF DATA OUTSIDE THE EU OR ETA
The information in the customer register is used only by Kouvolan Lakritsi Oy, except when Kouvolan Lakritsi Oy uses an external service provider either to provide a value-added service or to support a credit decision. However, the data will not be disclosed outside Kouvolan Lakritsi Oy or for the use of its partners, except in matters related to credit application, collection or billing, and when required by law. For example, an auditor has access to the system containing personal data on the occasion of an audit.
Personal data will not be transferred outside the European Union or the European Economic Area, unless it is necessary to ensure the technical implementation of Kouvolan Lakritsi Oy or its partner. The personal data of the data subject will be deleted at the request of the user, unless legislation, open invoices or collection measures prevent the deletion of the data.
PROTECTION OF THE REGISTER
The register will not be disclosed to third parties. Access to the register requires user rights for Kouvolan Lakritsi Oy's internal network. The register is located on Kouvolan Lakritsi Oy's password-protected server.
All access to personal data is controlled in accordance with good practice. The data is technically protected by a firewall.
THE RIGHT OF INSPECTION AND THE RIGHT TO REQUEST THAT INFORMATION BE CORRECTED
Every person in the register has the right to check the information stored in the register and to request that any inaccurate or incomplete information be corrected or completed. If a person wishes to check or request a correction of the data recorded about him or her, the request should be sent by e-mail to the controller at myynti@kouvolanlakritsi.fi. If necessary, the controller may ask the applicant to prove his/her identity, for example, in situations where the request comes from a different e-mail address than the one recorded in the Kouvolan Lakritsi Oy register as the person's e-mail address. The controller will respond to the customer within the time limit set by the EU General Data Protection Regulation (as a rule, within one month).
OTHER RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA
A person in the register has the right to request the erasure of personal data concerning him or her from the register ("right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of processing of personal data in certain circumstances. The request should be sent by e-mail to the controller at myynti@kouvolanlakritsi.fi. The controller may, if necessary, ask the requester to prove his/her identity, for example, in situations where the request comes from a different e-mail address than the one recorded in the Kouvolan Lakritsi Oy register as the person's e-mail address. The controller will respond to the customer within the time limit set by the EU General Data Protection Regulation (as a rule, within one month).
RIGHT TO AMEND THE PRIVACY STATEMENT
We reserve the right to change this Privacy Policy due to developments in services and changes in legislation. Significant changes to the Privacy Policy will be notified to registered customers when the Terms are updated.
CONTACT DETAILS
If you have any questions about privacy, data processing and the Privacy Policy, you can contact us by email: myynti@kouvolanlakritsi.fi.