Registry and Privacy Policy

This is a register and privacy statement in accordance with the Personal Data Act for Järvi-Suomen Tilausristeilyt (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Created 2/26/2020.                                       Last modified 29/12/2020.

1. General provisions
Registrar: Järvi-Suomen Tilausristeilyt, Rajakatu 3 apt. 4, 78300 Varkaus, Finland                                                                  Contact person: Rico Paukkonen, rico.paukkonen@outlook.com, +358442586591                                                                     Personal information is any information relating to an identified or identifiable natural person.

2. Legal basis and purpose of the processing of personal data

The legal basis for the processing of personal data under the EU General Data Protection Regulation is
- individual consent (documented, voluntary, individualized, informed and unambiguous);                                                     - the agreement to which the data subject is party;                                                                                                                       - electronic order created by the customer (name, address, e-mail, telephone number);                                                        - comply with the law and regulations arising from the contractual relationship between the customer and the controller;                                                                                                                                                                                             - personal data is necessary for the performance of the contract of sale. The contract cannot be concluded without personal information.

The purpose of processing personal data is to communicate with customers and maintain customer relationships.

The data is not used for automated decision making or profiling.

3. Information content of the register

Information to be recorded in the register includes: person's name, position, company / organization, contact information (phone number, email address, address), website addresses, IP address of the internet connection, IDs / profiles on social media services, details of subscribed services and changes, billing information, other customer relationship and subscribed information.

The Controller shall store personal data for as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the Controller and the Customer and for three years after the termination of the contractual relationship;

The controller shall delete all personal data after the period of time necessary to retain personal data.

4. Regular sources of information

Information stored in the register can be obtained from customers, for example. messages sent via web forms, email, telephone, social media services, contracts, customer meetings and other situations where a customer discloses information.

5. Regular disclosures and transfers of data outside the EU or the EEA

Information is not routinely disclosed to other parties. The information may be published to the extent agreed with the customer. Data may also be transferred by the controller outside the EU or the EEA.

6. Registry Protection Principles

The records shall be handled with care and the data processed by the information systems shall be appropriately protected. When registry information is stored on Internet servers, the physical and digital security of their hardware is properly taken care of. The data controller shall ensure that the stored information, as well as server access and other information critical to the security of personal data, is treated confidentially and only by the employees whose job description it is part of.

7. Right of access and right to have the data corrected

Every person in the register has the right to verify their data stored in the register and to request the correction of any inaccurate information or the correction of incomplete information. If a person wishes to check or rectify the information stored about him / her, the request must be sent in a letter to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).

8. Other rights related to the processing of personal data

Any person on the register has the right to request that personal data relating to him be removed from the register ("the right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).

The Registrar may update these Rules at any time. A new, updated version must be published on this website.