Privacy Policy

1. Data Controller:

Aavalevi Oy

Business ID: 3238533-9
Address: Yläpykälä 3 as. 1
99130 SIRKKA

Contact Person for Register Matters

Jens Pitkänen
jens.pitkanen@aavalevi.fi
+358 44 345 6001

2. Data Subjects:

Customers, potential customers, staff, and event participants.

3. Purpose of Personal Data Use:

Basis for Maintaining the Register:

  • Personal data is processed based on the data subject’s customer relationship.
  • Personal data is processed based on consent (e.g., for lotteries and event registrations where consent has been requested).

Purpose of Processing Personal Data and Use of the Register

Personal data is processed solely for predefined purposes, which are:

  • Managing customer relationships
  • Providing information about our services

4. Personal Data Stored in the Register:

The customer register contains the following information:

Contact Information

  • Name
  • Address
  • Email
  • Phone number

Customer Information:

  • Information about purchased products/services

5. Rights of the Data Subject:

The data subject has the following rights, which must be requested by contacting email@address.com.

Right to Access

The data subject can check the personal data we have stored.

Right to Rectification

The data subject can request the correction of incorrect or incomplete information.

Right to Object

The data subject can object to the processing of their personal data if they believe it has been processed unlawfully.

Right to Prohibit Direct Marketing

The data subject has the right to prohibit the use of their data for direct marketing purposes.

Right to Erasure

The data subject has the right to request the deletion of their data if the processing is no longer necessary. We will process the request and either delete the data or provide a justified reason why the data cannot be deleted. It should be noted that the data controller may have a legal or other obligation to retain the requested data. The data controller is required to retain accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). For this reason, materials related to accounting cannot be deleted before the expiration of the retention period.

Right to Withdraw Consent

If the processing of personal data is based solely on consent and not, for example, on a customer relationship or membership, the data subject may withdraw their consent.

Right to Lodge a Complaint with the Data Protection Ombudsman

The data subject has the right to demand the restriction of processing disputed data until the matter is resolved.

Right to File a Complaint

The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe that we have violated applicable data protection legislation in processing their personal data.
Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular Data Sources:

Customer Information is Regularly Collected From:

  • The customer themselves when the customer relationship is established.
  • The customer themselves through online forms.

7. Regular Disclosures of Data:

No data will be disclosed for marketing purposes outside Company Oy. We have ensured that all our service providers comply with data protection laws.

8. Duration of Processing:

  • Personal data is generally processed for as long as the customer relationship is valid.
  • The data subject can unsubscribe from our marketing list through the link provided in each marketing email we send.

9. Processors of Personal Data:

The data controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data is processed in accordance with applicable data protection laws and otherwise appropriately.

10. Transfer of Data Outside the EU:

Data may be transferred outside the EU or EEA if the software used to maintain the customer relationship, where the data is stored, changes.

11. Automated Decision-Making and Profiling:

We do not use data for automated decision-making or profiling.