Privacy policy
Personal data act 1050/2018, Regulation (EU) 2016/679 of the European Parliament and of the Council
Controller and contact person
Chuck & Co Oy, Business ID: 3275786-8
Piispanristintie 1, 20760 Piispanristi
info@chuck.fi
Purpose and criteria for processing personal data
The purpose of processing the personal data is managing customer relationships and other cooperation relationships, administration, marketing and distance selling, as well as planning and developing the business activities of Chuck & Co Oy. Criterion is controller’s legitimate interest.
Information stored in the register
The register may include following information:
- Contact information: first and last name, address, phone number, email address
- Customer information: order history, billing and debt information
- Customer feedback
- Information on the marketing permissions and bans
- Any other information necessary for the purpose of the register
Regular sources of data
Personal information is mainly collected from the people whose data is being registered. Data can also be collected and updated from public and commercial registers.
Regular data extraditions and transfers outside EU / EEA
Where possible, Chuck & Co Oy stores personal data in a selected and secure data centre located in Europe. Some of the service providers may use backup servers located outside the EU/EEA.
Principles for the protection of data files
Only persons whose job assignments require managing the data in the register have access to it. The register is protected with personal user identifiers and passwords.
The data is collected in databases protected by firewalls, passwords, and other technical measures.
Personal data is retained for as long as necessary for the purpose of its use, taking into account the retention periods required by laws such as consumer protection, accounting, and tax prepayment legislation.
Rights of the data subject
The data subject has a right to review and request for fixing or deleting any data relating to him/her that is stored in the register. The request for such has to be made in written form to the controller as stated above. The request has to be signed.