Privacy policy of the e-services register
Udated 2024/2/7
Delipap Oy is committed to protecting the privacy of its customers and other visitors to our websites. This Register and Privacy Policy (hereinafter referred to as “Register Policy”) describes how Delipap Ltd processes personal data in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). The Privacy Policy applies to all Delipap Oy websites that collect personal data or have a link to the Privacy Policy or where the Privacy Policy is visible.
It is important to us that you know what personal data we collect and that you know your rights in relation to your personal data. This notice therefore explains the purposes for which we collect and use personal data and how we have ensured that you have adequate control over the use of your personal data.
1. DATA CONTROLLER
Delipap Oy
Business ID: 0251325-6
Teollisuustie 19, 02880 Veikkola, Finland
2. CONTACT PERSON FOR MATTERS CONCERNING THE REGISTERS
Data Protection Officer, Johanna Tiainen
E-mail: johanna.tiainen@delipap.fi
Phone 09-260 620
3. THE NAME OF THE REGISTRY
Delipap Oy’s personal register of electronic services
4. THE PURPOSE AND BASIS OF THE PROCESSING OF PERSONAL DATA
The primary basis for the processing of personal data is the customer relationship between Delipap Oy and the customer, the customer’s consent or other legal basis or material connection in accordance with the GDPR.
The personal data may be processed for the following purposes: the management of the customer relationship and the management and implementation of related communications, the delivery, processing and archiving of orders, the prevention of abuse, the provision of better customer service, the management of customer feedback and other consumer surveys, marketing purposes and the management of other online services and the management and implementation of related communications and marketing.
5. THE CONTENT OF THE REGISTER
Information about the data subject may include: name, customer number, address, telephone number and e-mail address, language, other information relating to the customer relationship and the services ordered, such as direct marketing authorisations and prohibitions, and other necessary contact information.
6. THE RETENTION PERIOD OF PERSONAL DATA
The company keeps personal data in the customer register until the customer relationship between the data subject and Delipap Oy can be considered to have ended. The expiry date is determined from the last service contact or contact of the data subject, plus 10 years. For legal reasons, some data may need to be kept longer than this.
7. REGULAR SOURCES OF INFORMATION
The main sources of information are:
The data subject and events related to the data subject’s customer relationship, use of services, communications and transactions. Delipap oy registers the information about the user of the websites that the user himself provides when using the website. The data is obtained, for example, from messages sent via web forms, e-mail, telephone, social media services and other situations in which the user himself provides his data.
In addition to the information provided by the data subject and events relating to the data subject’s customer relationship, use of services, communications and transactions (Log Data)
8. REGULAR DISCLOSURES AND TRANSFERS OF DATA OUTSIDE THE EU OR THE EUROPEAN ECONOMIC AREA
Customer information is not disclosed outside Delipap Oy. However, necessary information about deliveries may be disclosed to Budbee AB to guarantee the delivery of orders. Data may be published only to the extent agreed with the user. Customer data will not be transferred outside the European Economic Area.
9. A DESCRIPTION OF THE PRINCIPLES OF THE PROTECTION OF THE REGISTER
The data in the user register of Delipap Oy’s websites is stored in the controller’s system, which is protected by appropriate physical and digital security of the hardware. Such means include the use of firewalls, secure equipment rooms, controlled granting of access rights and monitoring of their use, training of personnel involved in data processing and the use of the required encryption techniques. Access to the system requires a username and password and the data contained in the register is located in locked and secured premises.
The register is handled carefully and properly. The controller shall ensure that stored data and server access rights and other data critical to the security of personal data and server access rights are treated confidentially and only by employees whose job description includes this. Access to digital material shall be limited to the personal user name and password of the authorised employee.
Paper material is kept in a locked room, accessible only to authorised staff.
10. PROFILE
Delipap Oy does not perform any profiling related to customer data.
11. THE DATA SUBJECT’S RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA AND DIRECT MARKETING (RIGHT TO OBJECT)
The data subject has the right to object, on grounds relating to his or her particular situation, to processing operations that Delipap Oy carries out on the data subject’s personal data where the processing is based on a customer relationship between Delipap Oy and the data subject. The data subject may object to the processing of his or her data in accordance with point 13 of this Privacy Policy. The data subject must specify the specific situation on the basis of which he or she objects to the processing. Delipap Ltd may refuse to execute the objection request on the grounds provided for by law.
12. OTHER RIGHTS OF THE DATA SUBJECT IN RELATION TO THE PROCESSING OF PERSONAL DATA
12.1. The data subject’s right of access (right of inspection)
The data subject has the right to inspect the data concerning him/her that has been stored in Delipap Oy’s customer register. The request for inspection must be made in accordance with section 13 of this Privacy Policy. The right of access may be refused on the grounds provided for by law. In principle, the exercise of the right of access is free of charge.
12.2. Right of the data subject to request rectification, erasure or restriction of processing
The data subject may request the rectification, erasure or restriction of processing of inaccurate, unnecessary, incomplete or outdated data. The request for rectification should be made in accordance with point 13 of this Privacy Notice. The data subject also has the right to require the controller to restrict the processing of his or her personal data, for example, when the data subject is awaiting Delipap Ltd’s response to a request for rectification or erasure.
12.3. The data subject’s right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with the competent supervisory authority if the controller has not complied with the applicable data protection regulation.
12.4. Other rights
Where personal data are processed on the basis of the data subject’s consent, the data subject has the right to withdraw his or her consent by notifying Delipap Ltd in accordance with point 13 of this Privacy Policy.
13. CONTACT INFORMATION
The data subject should contact Delipap Oy in all matters relating to the processing of personal data and the exercise of his or her rights.
- By email: johanna.tiainen@delipap.fi
- By post to: Teollisuustie 19, 02880 Veikkola
If necessary, Delipap Oy may ask the data subject to specify his or her request in writing and the identity of the data subject may be verified, if necessary, before taking any other action.
14. THE COOKIES WE USE
Cookies are small text files that are automatically stored on your computer / terminal device when you visit different websites. We use cookies to make our service as user-friendly as possible. If you do not want the web service to receive information through cookies, please accept only the necessary cookies.
This software stores information such as which page you visit, how long you stay on the site, how you arrived on the site and which links you click on. We may also use cookies to improve our services and website, to analyse website usage, and to target and optimise marketing. By tracking website traffic, we improve our website to make it better and provide a better user experience.
