1. Data Controller
Publishing House Koivuniemi (later "Koivuniemi")
Business ID: 1540000-7
Tel. +358 9 888 2800
2. Contact person for matters concerning the data register
Tel. +358 9 888 2800
3. The name of the register
Koivuniemi customer and contact information register.
4. The purpose for using and processing personal data
The customer register (and its subregisters) contain data collected from the contact, feedback and order forms of the company website as well as other customer and contact information. Data is collected on the basis of the person contacting Koivuniemi or making an order, or the person making an agreement with Koivuniemi as a representative for his/her company, or for the purpose of making marketing communications. The data is processed for the purposes of communicating, providing services, delivering products and services to the customers, improving services, invoicing and (direct) marketing. Processing personal data is based on the legitimate interest of Koivuniemi, so that communication and marketing activities can be directed correctly.
5. Data content in the customer and contact information register
The register contains e.g. the following information depending on what data has been given or has been otherwise available:
- Company name
- First name, last name
- Telephone number(s)
- E-mail address
- Bans on direct marketing
- Communication history
6. Lawful data sources
Data given by the person himself/herself, public websites of companies, publicly available registers, participant lists at fairs and events, communications by customers themselves and the personal data received when performing services or service maintenance.
7. Lawful disclosure of data
Koivuniemi will not disclose the data in the register to third parties.
8. Data transfers outside the EU or EEA
Data will not be transferred outside the EU or EEA.
9. Time of retaining personal data
Personal data related to agreements and orders is retained as long as the agreement is in effect or as long as the data is necessary for e.g. invoicing and other lawful activities. Other personal data is kept as long as necessary for purposes related to communication, marketing or statistics.
10. The principles of protecting the register
All the people who process the register have been given the right to use the data in the register by the data controller, and they all are under obligation of confidentiality. The forms on the website where personal data can be entered are protected with SSL encryption.
11. The rights of the data subjects in register
The data subjects have the right to receive information on what personal data the register contains for a reasonable fee. They also have the right to request that their inaccurate data be corrected within three (3) months. The data subjects have the right to require that the processing of their data be limited or their data be removed and the right to object to the processing of their personal data by contacting the contact person of the register in writing. The data subjects have the right to make a complaint to the data protection ombudsman, if they think their personal data is processed unlawfully.
The data subjects have the right to ban direct marketing directed to them. In this case, the register will contain the ban and the essential contact information related to the ban, so that the ban can be verified during marketing activities carried out after the ban has been given.
12. Automatic decisions and profiling
Automatic decisions and profiling will not be done on the basis of the register.
13. Cookies and visitor tracking
Our site utilizes Google Analytics tool that saves data about the use of our website in cookies. This data is used to analyze a user’s browsing of our website and to make reports about our website activity. These third party cookies can be refused in the browser settings if the user wishes so.