Keeper of the register
Huolto Vuorio Oy, Lukkosepänkatu 4, 21280, Turku
(02) 233 0440
Huolto Vuorio Oy e-commerce customer register
Legal basis and purpose of the processing of personal data
Huolto Vuorio Oy collects personal data for the purpose of managing the customer relationship. The legal basis for processing personal data is the contract between the customer and Huolto Vuorio Oy. In addition, the legal basis is also mandatory legislation. The provision of personal data is a prerequisite for the conclusion of a contract. In other words – you cannot order goods from our online shop if you do not provide your personal data.
We also collect personal data for marketing purposes. The legal basis for processing personal data is consent or legitimate interest.
The personal data in the customer register is processed in connection with orders, invoicing, mailing, customer contact, service development, reporting, marketing and other activities related to customer relationship management. The purchase and transaction data processed in the register may also be used for profiling and to target offers, benefits and other marketing activities and customer communications to the data subject. Personal data in the customer register of newsletter subscribers is processed in connection with the sending of the newsletter and participation in competitions and prize draws or other marketing activities.
Data content of the register
Customer register: customer first and last name, address, telephone number, email address, purchase transaction and transaction information, feedback information, username and password, alternative delivery addresses.
Customer register of newsletter subscribers: name, email address, information on marketing permissions and prohibitions, information related to participation in marketing campaigns (e.g. sweepstakes) and newsletter subscription.
NOTE! Huolto Vuorio Oy does not collect or store customers’ bank details or credit card information.
Regulatory sources of information
The information stored in the register is obtained from the customer through, for example, messages sent via web forms, email, telephone, social media services, contracts, customer meetings and other situations where the customer discloses their information.
Information on contact persons of businesses and other organisations may also be collected from public sources such as websites, directory services and other businesses.
Regular disclosures and transfers of data outside the EU or EEA
The information in the customer registers will not be disclosed outside Huolto Vuorio Oy, except where required by law and to subcontractors involved in the organisation of direct marketing, the maintenance of information systems or the management of the customer’s order, such as the mailing or payment of products. Personal data will not be transferred outside the EU or EEA.
Principles for the protection of the register
The information in the company’s customer records is confidential. The registers are stored electronically and properly protected from external access by firewalls and other technical protection measures. Only designated persons are authorised to access and maintain password-protected registers. Users are bound by confidentiality obligations.
Personal and payment information is always processed over an encrypted SSL connection. Payment information (personal identification number, online banking, credit card) is processed in an external secure and encrypted system, and the payer’s personal identification number or payment and credit card numbers, etc., are not stored in the online shop.
Right of inspection and right to request correction of information
Every person in the register has the right to check the information stored in the register and to request that any inaccurate or incomplete information be corrected or completed. If a person wishes to check or request a correction to the data stored about him or her, the request must be sent in writing and signed to the company’s customer service. The controller may, if necessary, ask the person making the request to prove his or her identity. The controller will respond to the customer within the time limits set by the EU Data Protection Regulation.
Other rights related to the processing of personal data
A person in the register has the right to request the erasure of personal data concerning him or her from the register (“right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of processing of personal data in certain circumstances. Requests should be sent in writing and signed to the company’s customer service. The controller may, if necessary, ask the requester to prove his/her identity. The controller will respond to the customer within the time limits set by the EU GDPR (as a general rule, within one month).