Kouvolan Lakritsi Oy is committed to complying with the EU's General Data Protection Regulation (GDPR), which will apply in all EU member states as of 25 May 2018.
Kouvolan Lakritsi Oy
+358 5 321 3002
PERSON RESPONSIBLE FOR REGISTRATION
Virve Ekroth/Sanna Inkala
Kouvolan Lakritsi Oy
Puhelin +358 5 321 3002
NAME OF THE REGISTER
Kouvolan Lakritsi Oy:n asiakasrekisteri
LEGAL BASIS AND PURPOSE OF THE PROCESSING OF PERSONAL DATA
The legal basis for the processing of personal data under the EU General Data Protection Regulation is
-consent consent (documented, voluntary, individualized, informed and unambiguous)
agreement to which the data subject is a party
- legitimate interest of the registrar (eg customer relationship, employment relationship, membership)
The purpose of the register is to maintain Kouvolan Lakritsi Oy's customer register and to archive and process customer orders and manage the customer relationship. The registry is also used to track lost packets. The information can be used to develop Kouvolan Lakritsi Oy's operations, for statistical purposes and to produce more personalized targeted content in our online services. Personal data is processed within the limits permitted and required by the Personal Data Act. The information in the register can be used in Kouvolan Lakritsi Oy's own registers to target advertising without disclosing personal data to third parties.
Kouvolan Lakritsi Oy may use partners to maintain the customer and service relationship. Some registry information may be transferred to partner servers due to technical requirements.
In connection with the delivery of the products, the customer's information may be disclosed to a third party responsible for the delivery (for example, Posti or Matkahuolto), the same applies to the transmission of online payments (payment service provider Paytrail Oyj.)
The customer has the right to refuse to publish the information by notifying Kouvolan Lakritsi Oy's customer service by e-mail email@example.com.
INFORMATION CONTAINED IN THE REGISTER
The personal register contains the following information:
The person's first and last name
Information on processed orders
Order Tracking Information for Orders
REGULAR SOURCES OF INFORMATION
The information contained in the register is based on the information entered by the customer in the online service (web form). In addition, information is obtained from the customer via email, telephone, social media services, contracts, customer meetings and other situations in which the customer discloses their information.
At the customer's request, personal data concerning him or her may be deleted from Kouvolan Lakritsi Oy's systems.
We will only retain personal information for the time necessary to fulfill the purposes described in this leaflet. Legislation imposes obligations on some data for longer-term storage of data, e.g. for the following purposes:
-The Accounting Act defines longer retention periods for information, regardless of whether the material contains personal data or not.
-Make adequate backups of databases and systems to secure data, correct errors, and ensure data security and continuity.
HOW WE VERIFY AND PROCESS REVIEWS
We use Loox, a web-based application that provides an online reviews and marketing solution, to collect, source, process and display reviews on our website. We publish all reviews collected, submitted or imported to Loox.
We may temporarily or permanently hide or delete reviews after they were published, if they are found to contain unlawful speech, vulgar or violent language or are fake.
We automatically send review requests through Loox to customers for whom we have a record that they purchased products directly from our website. This allows us to verify the review’s reliability through technical means, such as the customer’s email address. Reviews that are submitted directly through such requests are marked as "Verified purchase" and the following statement will be displayed on the interface on which the review is published: "This review was collected from a verified customer who purchased this item”.
If a customer submits a review directly through our website, the review will not be marked as verified, and the following statement will be displayed on the interface where the review is published: “This review was written by a site visitor”.
Reviews may also be imported into Loox from an external source. For imported reviews, the following statement will be displayed on the interface on which the review is published: "This review was imported from an external source".
We may verify reviews submitted directly through our website and imported reviews using reasonable and proportionate methods, such as by requesting valid proof that the customer had actually used or purchased the product. In these cases, if we mark a review as "Verified purchase", the following statement will be displayed on the interface on which the review is published: "This review was marked as verified by the store owner".
Customers can choose how to rate the reviewed products based on a number between 1 and 5. The reviews’ average score is calculated using a simple mathematical average, which is then rounded to a half or full star rating using standard rounding rules. The reviews’ average score includes reviews for which customers received future purchase discounts for adding a photo or a video to their review.
TRANSFER OF DATA AND TRANSFER OF DATA OUTSIDE THE EU OR THE EEA
The information in the customer register is only used by Kouvolan Lakritsi Oy, except when Kouvolan Lakritsi Oy uses an external service provider either to provide a value-added service or to support a credit decision. However, the information will not be disclosed outside Kouvolan Lakritsi Oy or for the personal use of its partners, except in matters related to credit applications, collection or invoicing, and when required by law. For example, the auditor has access to a system containing personal data at the time of the audit.
Personal data will not be transferred outside the European Union or the European Economic Area unless it is necessary to ensure the technical implementation of Kouvolan Lakritsi Oy or its partner. The data subject's personal data will be destroyed at the request of the user, unless legislation, open invoices or collection measures prevent the data from being deleted.
PROTECTION OF THE REGISTER
The register will not be disclosed to third parties. The right to use the register requires the user rights of Kouvolan Lakritsi Oy's internal network. The register is located on Kouvolan Lakritsi Oy's password-protected server.
All access to personal information is controlled in accordance with good practice. The data is technically protected by a firewall.
RIGHT OF INSPECTION AND RIGHT TO REQUEST CORRECTION OF INFORMATION
Jokaisella rekisterissä olevalla henkilöllä on oikeus tarkistaa rekisteriin tallennetut tietonsa ja vaatia mahdollisen virheellisen tiedon korjaamista tai puutteellisen tiedon täydentämistä. Mikäli henkilö haluaa tarkistaa hänestä tallennetut tiedot tai vaatia niihin oikaisua, pyyntö tulee lähettää sähköpostitse rekisterinpitäjälle osoitteeseen firstname.lastname@example.org. Rekisterinpitäjä voi pyytää tarvittaessa pyynnön esittäjää todistamaan henkilöllisyytensä esimerkiksi sellaisissa tilanteissa, että pyyntö tulee eri sähköpostiosoitteesta kuin mikä Kouvolan Lakritsi Oy:n rekisterissä on merkitty henkilön sähköpostiosoitteeksi. Rekisterinpitäjä vastaa asiakkaalle EU:n tietosuoja-asetuksessa säädetyssä ajassa (pääsääntöisesti kuukauden kuluessa).
OTHER RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA
A person in the register has the right to request the removal of his or her personal data from the register (“right to be forgotten”). Data subjects also have other rights under the EU's general data protection regulation, such as restrictions on the processing of personal data in certain situations. The request must be sent by e-mail to the registrar at email@example.com. If necessary, the registrar may ask the applicant to prove his or her identity, for example in situations where the request comes from a different e-mail address than that entered in Kouvolan Lakritsi Oy's register as the person's e-mail address. The controller will respond to the customer within the time limit set by the EU Data Protection Regulation (generally within one month).
RIGHT TO AMEND THE PRIVACY STATEMENT
Due to the development of the services and changes in legislation, we reserve the right to change the privacy statement. Significant changes to the privacy statement will be notified to registered customers when the terms are updated.
If you have any questions regarding privacy, data processing and the data protection statement, please contact us by e-mail: firstname.lastname@example.org.