(updated 10 .7.2014)
Nosh Company Oy (Business ID: 2288372-1) PL 110, 13101 Hämeenlinna.
NOSH Customer Service +358 (0)40 4131660 or firstname.lastname@example.org
NAME OF THE REGISTER
Nosh.fi customer register.
PURPOSE OF THE REGISTER AND PERSONAL DATA PROCESSING, AND THE BASIS FOR MAINTAINING THE REGISTER
In Finnish law, processing of personal data is based on the Personal Data Act, section 8, subsection 1(1), (2), (5), and (7).
The data controller or its authorized partner uses the personal data of customers or potential customers, in accordance with the Finnish Personal Data Act, for the following purposes: • customer relationship management and development • offering and delivering products and services • payments, payment monitoring, and payment collection • marketing and distance selling of the data controller’s products and services, and • developing the data controller’s business and associated customer service.
The main purpose of the register is the maintenance of the Nosh.fi customer database, as well as the filing and processing of customer orders. The register is also used in tracing lost packages. Information can be used in relation to the development of Nosh.fi activities and for statistical purposes. Personal data is processed within the limits allowed and required by the Finnish Personal Data Act.
Information from the register can be used in Nosh.fi registers to target advertising, without passing personal data to outside parties. Nosh.fi may use partners for the maintenance of customer and service relations. Some of the data in the register may be transferred to a partner’s servers, owing to technical requirements. The data is processed only via technical interfaces for the maintenance of Nosh.fi customer relationships.
INFORMATION HELD IN THE REGISTER
The personal data file contains the following information: • First and last name • E-mail address • Postal address • Phone number • Information about processed orders • Order tracking information
REGULAR SOURCES OF INFORMATION
Nosh.fi has the right to publish information from its customer register, as an electronic or written list, unless the customer expressly forbids this. By list is meant, for instance, mailing labels for direct mail advertising. The customer has the right to forbid the publication of information by notifying Nosh.fi customer service, email email@example.com, or the keeper of the register.
Information on existing and potential customers is obtained e.g. from quotation requests, newsletter subscriptions, product orders, participation in competitions, and other contacts, as well as from data saved or stored when customers use services or products. Customer information is also gathered, for instance, in connection with sales. Of that data, only material relating to potential customers who have given marketing or contact authorization is saved.
Personal data may also be collected, stored and updated from the Finnish Population Register Centre, Suomen Asiakastieto Oy, and the registers of other data controllers offering address, updating, and similar services.
REGULAR DISCLOSURE AND TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION OR THE EUROPEAN ECONOMIC AREA
Data is not disclosed outwith Nosh Company Oy. Personal data will not be transferred outside the European Union unless it is necessary to ensure the technical implementation of Nosh.fi or its partners. Information may be released to authorities as required by current Finnish legislation.
THE PRINCIPLES BY WHICH THE REGISTER IS SECURED
The register will not be disclosed to third parties. The registry data is collected in databases, which are protected by firewalls, passwords, and other technical means. This information is for use only by persons employed by Nosh Company Oy or by its authorized agents, who need the information in their work. Nosh Company Oy requires a commitment to client confidentiality from its employees and partners. They have user names and passwords. Data in manual form is kept on locked and controlled premises used by Nosh Company Oy.
RIGHTS OF INSPECTION, REFUSAL, AND RECTIFICATION
In Finnish law, section 26 of the Personal Data Act gives customers the right to inspect information held about them and to demand that erroneous information in the register be corrected. Customers with a My NOSH user account can themselves inspect and change their contact information by logging into their personal account. Opening a My NOSH user account does not require making a purchase.
A person whose data is recorded has the right to refuse its use in direct marketing, distance selling, or opinion polls.
This description of the personal data file may be examined on the premises of Nosh Company Oy at PL 110, 13101 Hämeenlinna.