Privacy Policy of Olavi Collection Oy

Data Controller

Olavi Collection Oy, Kirkkopuistikko 7, 65100 Vaasa

Contact Person for the Register

Vesa Hänninen, info[at]olavicollection.com, +35840040061

Name of the Register

Olavi Collection Oy’s Marketing and Customer Register

Legal Basis and Purpose of Processing Personal Data

Personal data is processed based on the customer relationship and contract between the customer and Olavi Collection Oy, the use of the www.olavicollection.com website, the customer’s explicit consent, or legal obligations. The purpose of processing is to manage the customer relationship, fulfill the rights and obligations of the customer and Olavi Collection Oy, and process personal data in accordance with the Personal Data Act for online services, research activities, and direct marketing targeted at customers through Olavi Collection Oy’s communication channels and services. Personal data is not disclosed to third parties for marketing purposes.

The legal basis for processing personal data under the EU General Data Protection Regulation is:

• Company/organization name, business ID, contact information, and industry
• Individual’s name, position/title, area of responsibility, email address, and phone number
• Information related to managing the customer relationship and communication
• Information about ordered products and services and their changes
• Billing information
• Delivery information with the recipient’s contact details
• Other information related to the customer relationship, such as the personal identity number provided by an individual during the ordering process
• Information related to online behavior on the www.olavicollection.com website and services
• Technical information and cookies sent to the registered browser and related information
• Identifiers/profiles in social media services
• Information related to marketing and sales promotion, such as marketing activities targeted at registered individuals and their participation

Content of the Register

The following information is stored in the register: individual’s name, position, company/organization, contact details (phone number, email address, address), website addresses, IP address of the network connection, identifiers/profiles in social media services, information about ordered services and their changes, billing information, and other information related to the customer relationship and ordered services. Olavi Collection Oy retains the information for at least the duration of the customer relationship. The information can be removed at the customer’s request.

Regular Sources of Information

The information stored in the register is obtained from the customer through, for example, messages sent via online forms, email, phone, social media services, contracts, customer meetings, and other situations where the customer provides the information.

Regular Disclosures and Transfer of Data Outside the EU or ETA

Olavi Collection Oy does not disclose customers’ personal data to other parties. Information may be published to the extent agreed upon with the customer. The information is stored only within the EU/ETA area.

Principles of Register Protection

The register is processed with care, and the information processed using data systems is protected appropriately. When register data is stored on internet servers, the physical and digital security of the hardware is ensured appropriately. Olavi Collection Oy ensures that stored information, server usage rights, and other critical personal data are handled confidentially and only by employees whose job description includes such tasks.

Right to Inspect and Request Correction

Every individual in the register has the right to inspect the information stored about them and request the correction of any incorrect or incomplete information. If an individual wishes to inspect the information stored about them or request corrections, the request must be sent in writing to the data controller. Olavi Collection Oy may ask the requester to prove their identity if necessary. The data controller will respond to the customer within the timeframe specified in the EU Data Protection Regulation (usually within one month).

Other Rights Related to the Processing of Personal Data

Individuals in the register have the right to request the removal of their personal data from the register (“right to be forgotten”). They also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be sent in writing to the data controller. The data controller may ask the requester to prove their identity if necessary. The data controller will respond to the customer within the timeframe specified in the EU Data Protection Regulation (usually within one month).