Privacy Policy
This privacy policy has been prepared in accordance with the EU General Data Protection Regulation (GDPR).
Name of the register
Ki-Sal Oy Customer Register
Data controller
Ki-Sal Oy
Business ID: 0963595-0
Keilaranta 10 E, 02150 Espoo, Finland
Person responsible for data protection matters
Karoliina Järvensivu, Marketing and Sustainability
karoliina.jarvensivu@ki-sal.fi
Purpose and legal basis for processing personal data
Personal data is processed for managing customer relationships, managing webshop customer accounts, processing and delivering orders, invoicing, customer service and direct marketing aimed at business customers.
The processing of personal data is based on Ki-Sal Oy’s legitimate interest in managing customer relationships and carrying out direct marketing, as well as on compliance with legal obligations. Where processing is based on consent, the legal basis is the data subject’s consent.
Providing the required information is necessary for creating a webshop customer account and processing orders. Without the required information, a customer account cannot be created and an order cannot be processed.
Data contained in the register
The register may contain the following information:
- name and contact details
- company and position within the company
- information related to the webshop user account
- order, delivery and invoicing information
Regular sources of information
Information is primarily obtained from the customer and the company represented by the customer. Information may also be obtained from public company registers and credit information service providers, such as Suomen Asiakastieto Oy.
Disclosure and transfer of data
Personal data may be disclosed or made available for processing to the extent necessary for carrying out orders, deliveries, invoicing and other services related to the customer relationship. Such parties may include providers of warehousing and transport services, financial administration services, and IT and webshop services.
Personal data may also be disclosed to authorities where required by law.
Personal data is not transferred outside the EU or EEA.
Data retention period
Personal data is retained only for as long as necessary for the purposes for which it is processed or as required by law. Accounting records are retained for the period required by applicable accounting legislation.
Principles of data protection
Personal data is processed confidentially. Electronic data is protected by appropriate technical and organisational measures, and access is limited to persons who require the data to perform their duties.
Rights of the data subject
In accordance with applicable data protection legislation, the data subject has the right to:
- access their personal data
- request the correction of inaccurate data or the deletion of personal data
- request restriction of the processing of personal data where provided by law
- object to the processing of personal data where provided by law
- object to the use of their personal data for direct marketing
- withdraw their consent where the processing of personal data is based on consent
The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman.
Requests concerning these rights may be sent to the person responsible for data protection matters.
Cookies
The website and webshop use cookies that are necessary for their operation. Other cookies are used with the user’s consent.
Cookies and related preferences can be viewed and managed in the website’s cookie settings. the site, and provide individualized services based on them.
You can refuse cookies or delete them using your browser’s functions. However, this may affect our ability to provide personalized, high-quality online services.
