Privacy Policy

Data protection policy

 

Keeper of the register:

Lappajärven Värjäämö (Business ID: 0307849-5, VAT FI0,078495)

Address: Kankaantie 6, 62600 Lappajärvi, Finland

Tel: +358 (0)408385449

 

Person responsible for the register:

Tiina Kujala

 

The purpose of the register:

The purpose of the register is to ensure smooth operation for order processing, order tracking and other customer service. The address stored in the register can also be used for sending important business or administrative announcements.

Electronic marketing communication is only used if the customer has specifically ordered our electronic newsletter.  A customer can at any time cancel the newsletter by clicking a link given at the end of each newsletter. A registered customer can also cancel the newsletter by logging in our online store and changing the settings of their user account.

Data stored in the register:

Last name, first name, street address, post code, contact number(s), email address, customer group and its subgroup, default payment method, and order history (including delivery and billing addresses).

Input sources of the register:

Information given by the customer itself, through our online store or otherwise (via phone or email). Orders made by the customer create the order and payment history. Customers may update the information on their user account in the online store.

Handing over the data stored in the register:

The data stored in the register is handed over to third parties only in the following situations, when necessary: for credit companies to make a decision over credit; handing over address details to logistic companies for dispatch notes.

Protection of the register:

The customer registers are stored on servers situated at data centres. Both the online store and the customer register require a username and a password for access. The customer register is only accessed by the employees who process the orders. The servers are protected with firewalls and are only accessed through protected sessions.

Lappajärven Värjäämö complies with the principle that all personal data must be handled appropriately, in compliance with the law, and transparently. Personal data is only collected for a specific, lawful purpose and it cannot be used for any other purpose. Only the necessary information is collected. We strive to keep the personal data collected accurate and up to date. Personal data is only stored as long as it is necessary to meet the purpose the data was collected for. All dated personal data is removed.

The legal foundations for processing personal data

The legal foundations for processing personal data can be found in the General Data Protection Regulation (later GDPR) given by the EU:

  1. the data subject has given consent to the processing of his or her personal data for one or more specific purposes (GDPR 6 art. 1.a);
  2. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR 6 art. 1.b;
  3. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (GDPR 6 art. 1.f).

The aforementioned legitimate interests are based on the meaningful and appropriate relationship between the data subject and the data controller, following that the data subject is the customer of the data controller, and when data collection happens for purposes which the data subject can within reasonable circumstances expect at the time of the collection of the data.  

Rights of the data subject

The data subject has certain rights concerning their personal data, given by the EU’s General Data Protection Regulation (GDPR), see GDPR art 15, 7, 16, 17, 18, 20, and 77. These rights include the right of access, the right to rectification, and the right to erasure.

Use of cookies

Cookies are small text files stored on the user’s computer. Cookies are used to follow the site traffic and to make our service better, etc. For example, Lappajärven Värjäämö uses cookies to store products in the shopping basket. This is how the items you have placed in the basket stay in the basket when you go back to browse the site. Additionally, Lappajärven Värjäämö uses cookies to analyse and improve the service. Cookies can be used to determine how often individual pages within the site are accessed. This can show that some pages may be difficult to find, therefore we need to better the accessibility. Cookies can be used to follow the number of visits on the site and the impact of advertising. We manage our cookies through Google Analytics. Cookies are never used to identify individual users, their name or any other personal data. Cookies are never harmful to the user’s computer and they expire after a certain time.

We use our own cookies, which are placed to ensure that the Lappajärven Värjäämö site and online store function correctly. Additionally, we use cookies placed by a third party, such as Google Analytics, and Facebook. These third parties may place cookies on the user’s computer when the user accesses the Lappajärven Värjäämö site, to collect information on visitor numbers or to offer targeted advertising. Learn more from the privacy principles of Google Analytics: http://www.google.com/analytics/learn/privacy.html or Facebook: https://www.facebook.com/about/privacy/update

You can disable the use of cookies in the settings of your browser. Please note that the Lappajärven Värjäämö site may not function correctly without cookies.