PRIVACY POLICY

Data protection policy for Porvoo Tours Oy’s customer register

The registrar is obligated to inform the data subjects in a clear way. This conclusion fulfills the information obligation.

1. Registrar information

Porvoo Tours Oy

Contact information:
Adlercreutzinkatu 17
06100 Porvoo
FINLAND

Contact information in matters concerning the register

Sussi Eriksson
Adlercreutzinkatu 17
06100 Porvoo
FINLAND
+358 19 574 2200

sussi.eriksson@porvootours.fi

Contact information for the data protection ombudsman

Sussi Eriksson
Adlercreutzinkatu 17
06100 Porvoo
FINLAND
+358 19 574 2200

sussi.eriksson@porvootours.fi

2. The data subjects

Customers and potential customers

3. The foundation for maintaining the register and its purpose of use

- Personal data is processed based on the customer relationship to the data subject

- Personal data is processed with the permission of the data subject

4. The purpose of handling personal data and the register

Personal data is handled only for on beforehand decided purposes, which are:

  • Marketing and newsletters per e-mail
  • Broschure sent per post

5. Personal data content retained in the register

The customer register contains the following data:

Contact information

  • name
  • post address
  • e-mail address
  • telephone number

 

Customer data

  • information about purchased products/services

6. The rights of the registered

The registered has the following rights, requests concerning the usage of them are to be sent to sussi.eriksson@porvootours.fi

The right to inspect

The registered has the right to inspect personal data about themselves, that we store in our customer register.

The right to correction

The registered has the right to request correction of inaccurate or incomplete data.

The right to object

The registered has the right to object to the processing of their personal data, should they believe, that their data has not been processed in accordance with applicable data protection legislation.

Opting out of direct marketing

The registered has the right to object to the processing of their personal data for direct marketing.

The right to request deletion

The registered has the right to request deletion of the data, should the processing of it not be necessary. We process the request for deletion and then delete the data, or present a motivated reason to why the data could not be deleted.

It should be taken in consideration, that the registrar could have a legally required or other obligation not to delete the required data. The registrar is obligated by the Accounting Act (chapter 2, 10 §) to store accounting material for a stated period of time (10 years). Due to this fact, material concerning the accounting, can’t be deleted before the expiration of the stated time.

Withdrawal of permission

If the processing of the personal data is based solely on the permission of the registered, and not on a customer relationship or membership, the permission can be withdrawn.

The registered can appeal to the data protection ombudsman

The registered has the right to demand that the processing of controversial data is limited until the matter is solved.

The right to appeal

The registered has the right to appeal to the data protection ombudsman, should they believe, that we are not processing personal data in accordance with applicable data protection legislation.

Contact information for the data protection ombudsman: https://tietosuoja.fi/en/contact-information

7. Regular sources of information

Customer data is mainly collected in the following way:

  • during exhibitions
  • from the customer personally when the customer relationship is started

8. Regular transfer of data

Data is not transferred for marketing purposes outside of Porvoo Tours Oy, they stay with the registrar.

We have made sure, that all our service providers follow the data protection legislation. We usually use the following service providers:

  • Lyyti oy
  • MailChimp

9. The data retention time

- The registered can unsubscribe from our marketing register through the link in every marketing e-mail we send.

10. The processors of personal data

The customer register is processed by the employees of Porvoo Tours Oy.

The registrar and its employees process the personal data. We might also outsource the processing of personal data to a third party, guaranteeing by contract arrangement, that the personal data is processed in accordance with applicable data protection legislation and otherwise in an appropriate way.

11. Transfer of data outside the EU

Personal data will not be transferred outside the European Union or the European Economic Area

12. Automatic decision making and profiling

The data will not be used for automatic decision making or profiling.