1. Register Description
Date of preparation 23.3.2023
1.1. Register holder
1.2. Person responsible for registry matters
1.3. Register name
Kangapalatsi.fi user register for online store.
1.4. Purpose of processing personal data (the purpose of the register)
Personal data stored in the Kangaspalatsi.fi online store user register is used for managing customer relationships, handling contacts, marketing purposes, and other purposes related to online services.
1.5. Contents of the register
1.6. Regular sources of information
The register holder registers the information about the Kangaspalatsi online store user that the user provides when using the website.
1.7. Regular disclosures of data and transfers of data outside the EU or the European Economic Area
Our online store uses Hostdime service to maintain the website, which implements privacy protection in accordance with GDPR. You can read about Hostdime's commitment to GDPR compliance here. Payments are processed by Stripe and Klarna. You can read about Stripe's commitment to GDPR compliance here. The information about Klarna's privacy settings can be found here.
1.8. Principles of register protection
The information of Kangaspalatsi's online store user register is stored in a database maintained by Hostdime and in Kangaspalatsi's system, which is protected by the operating system's security software. Access to the system requires the input of a username and password. The system is also protected by firewalls and other technical means. Only certain pre-defined employees of the register holder are authorized to access the information contained in the register. The information in the register is located in locked premises. In addition to this, purchase receipts are stored as paper copies in an accounting firm and in locked premises at our company's home office for the statutory period after which the receipts are destroyed.
We use the services of Posti, Pakettikauppa, and other shipping companies for the delivery of online store orders, in which case your personal information regarding deliveries can also be found in the registers of these operators and selected shipping companies. This includes, among other things, your name, address, phone number, and email address. Please note that if you order a product as a gift for someone else, their information will also be transferred to these registers, depending on which delivery service you are using. In payment transactions, your information is transferred to the registers of Stripe or Klarna, depending on which payment service you are using.
1.9. Right to prohibit processing of personal data
The data subject has the right to prohibit the register holder from processing data related to them for direct marketing, distance selling, and other direct marketing purposes, as well as for market and opinion research, as well as for personal registers and genealogy purposes. The prohibition must be made in writing and addressed to the persons responsible for register matters.
1.10. Right to inspect personal data
The data subject has the right to inspect the personal data stored in the register and to receive copies of them. The inspection request must be made in writing and addressed to the persons responsible for register matters.
1.11. Correction of data
The data controller corrects, deletes, or completes the personal data in the register, which is incorrect, unnecessary, incomplete, or outdated from the processing purpose on their own initiative or at the request of the data subject. The data subject must contact the person in charge of registry affairs at the data controller to correct the information.
1.2. Privacy Statement
Privacy Statement 23.3.2023
We collect personal data for the purpose of managing customer relationships. The legal basis for the processing of personal data is the contract between us and the statutory obligations arising from it. Providing personal data is a requirement for entering into the contract. In other words, you cannot order goods from our online store if you do not provide your personal data.
We also collect personal data for marketing purposes. The legal basis for the processing of personal data is consent.
We do not make profiling or automatic decisions about you.
In order to offer you Klarna payment methods, we may pass on your personal data in the form of contact and order information to Klarna during the purchase transaction, so that Klarna can assess whether you are eligible for their payment methods and customize these payment methods for you. The personal data transferred is processed according to Klarna's own privacy notice.