Privacy Policy
1. Register controller
PAULA KORUT
Y: 3146554-8
Ristiretkeläistenkatu 2 A 28
00710 Helsinki
bypaulamarja@gmail.com
2. Contact person for registry matters
Paula Johansson
bypaulamarja@gmail.com
3. Name of the registry
Company registry
4. Purpose of processing personal data
Personal data is collected for managing customer relations within the Paula Korut online store, delivering products purchased through the online store, arranging payments, and for marketing purposes.
5. Information content of the registry
The information stored in the registry includes: the person's name, email address, phone number, address, details of the ordered products, and payment information.
6. Regular sources of information
The information stored in the registry is obtained directly from the customer via the online store's order form.
7. Regular disclosures of information and transfer of data outside the EU or EEAietojen siirto EU:n tai ETA:n ulkopuolelle
Information is not regularly disclosed to third parties. We only disclose necessary customer information to Posti (the Finnish postal service) in connection with shipping and delivery.
8. Principles of registry protection
The customer registry is handled confidentially. The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are processed only by employees whose job description requires it.
9. Right of access and right to request correction of information
Every person in the registry has the right to check their stored personal data and demand the correction of any incorrect information or the completion of incomplete information. If a person wishes to check their stored data or request a correction, the request must be sent in writing and signed to the data controller. If necessary, the data controller may request the person making the request to prove their identity. The data controller will respond to the customer within the timeframe stipulated in the EU General Data Protection Regulation.
10. Other rights related to the processing of personal data
A person in the registry has the right to request that their personal data be removed from the registry. Data subjects also have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests must be sent in writing to the data controller. If necessary, the data controller may request the person making the request to prove their identity. The data controller will respond to the customer within the timeframe stipulated in the EU General Data Protection Regulation (generally within one month). EU:n yleisen tietosuoja-asetuksen mukaiset oikeudet, kuten henkilötietojen rajoittaminen tietyissä tilanteissa. Pyynnöt tulee lähettää kirjallisesti rekisterinpitäjälle. Rekisterinpitäjä voi pyytää tarvittaessa pyynnön esittäjää todistamaan henkilöllisyytensä. Rekisterinpitäjä vastaa asiakkaalle EU:n tietosuoja-asetuksessa säädetyssä ajassa (pääsääntöisesti kuukauden kuluessa).