Data protection policy for Porvoo Tours Oy’s customer register
The registrar is obligated to inform the data subjects in a clear way. This conclusion fulfills the information obligation.
1. Registrar information
Porvoo Tours Oy
Contact information in matters concerning the register
+358 19 574 2200
Contact information for the data protection ombudsman
+358 19 574 2200
2. The data subjects
Customers and potential customers
3. The foundation for maintaining the register and its purpose of use
- Personal data is processed based on the customer relationship to the data subject
- Personal data is processed with the permission of the data subject
4. The purpose of handling personal data and the register
Personal data is handled only for on beforehand decided purposes, which are:
- Marketing and newsletters per e-mail
- Broschure sent per post
5. Personal data content retained in the register
The customer register contains the following data:
- post address
- e-mail address
- telephone number
- information about purchased products/services
6. The rights of the registered
The registered has the following rights, requests concerning the usage of them are to be sent to firstname.lastname@example.org
The right to inspect
The registered has the right to inspect personal data about themselves, that we store in our customer register.
The right to correction
The registered has the right to request correction of inaccurate or incomplete data.
The right to object
The registered has the right to object to the processing of their personal data, should they believe, that their data has not been processed in accordance with applicable data protection legislation.
Opting out of direct marketing
The registered has the right to object to the processing of their personal data for direct marketing.
The right to request deletion
The registered has the right to request deletion of the data, should the processing of it not be necessary. We process the request for deletion and then delete the data, or present a motivated reason to why the data could not be deleted.
It should be taken in consideration, that the registrar could have a legally required or other obligation not to delete the required data. The registrar is obligated by the Accounting Act (chapter 2, 10 §) to store accounting material for a stated period of time (10 years). Due to this fact, material concerning the accounting, can’t be deleted before the expiration of the stated time.
Withdrawal of permission
If the processing of the personal data is based solely on the permission of the registered, and not on a customer relationship or membership, the permission can be withdrawn.
The registered can appeal to the data protection ombudsman
The registered has the right to demand that the processing of controversial data is limited until the matter is solved.
The right to appeal
The registered has the right to appeal to the data protection ombudsman, should they believe, that we are not processing personal data in accordance with applicable data protection legislation.
Contact information for the data protection ombudsman: https://tietosuoja.fi/en/contact-information
7. Regular sources of information
Customer data is mainly collected in the following way:
- during exhibitions
- from the customer personally when the customer relationship is started
8. Regular transfer of data
Data is not transferred for marketing purposes outside of Porvoo Tours Oy, they stay with the registrar.
We have made sure, that all our service providers follow the data protection legislation. We usually use the following service providers:
- Lyyti oy
9. The data retention time
- The registered can unsubscribe from our marketing register through the link in every marketing e-mail we send.
10. The processors of personal data
The customer register is processed by the employees of Porvoo Tours Oy.
The registrar and its employees process the personal data. We might also outsource the processing of personal data to a third party, guaranteeing by contract arrangement, that the personal data is processed in accordance with applicable data protection legislation and otherwise in an appropriate way.
11. Transfer of data outside the EU
Personal data will not be transferred outside the European Union or the European Economic Area
12. Automatic decision making and profiling
The data will not be used for automatic decision making or profiling.