Privacy Policy

21.05.2018

According to the EU General Data Protection Regulation (GDPR), the controller has an obligation to inform the data subjects in a clear manner. This policy meets the information requirement.

1. Company

Kewin Ltd
(Business ID / VAT No: FI-2293242-3 )
Contact details
Kewin Ltd
Hämeenkatu 15 C 8
33200 Tampere
Finland

Phone: +358 400 516 644
Fax: +358 420 495 860
E-mail: kewin@kewin.fi

2. Data subjects

Kewin Ltd's customers and their employees.

3. Criteria for keeping the register and its purpose

Personal data is processed on the basis of customer relationship.

Use of personal data processing and register
Personal data is processed only for predefined purposes:
- Processing orders
- Managing customer relationships
- Offering new products
- Billing / Financial Management

4. Personal data stored in the register

The customer register contains the following information:

Contact information:
- Name, phone, email
- Company
- Address, country
- Billing information
- Orders and order history
- Language

5. Regular sources of information

All personal information is collected directly from the customer himself.

6. Rightful data transfer

As a rule, information is not transferred outside of Kewin Ltd for marketing purposes.

We have ensured that all of our service providers comply with the privacy laws. Our service providers have access to our register in the following cases:
- management and maintenance of registry
- IT-support

7. Duration of data processing

In general, personal data is processed as long as the customer relationship is active.

8. Data subject's rights

The data subject has the following rights, which he may use by sending a request to the following address: Kewin Ltd, Hämeenkatu 15 C 8, 33200 Tampere, Finland or kewin@kewin.fi.

Right to inspect
The data subject may inspect the personal data we have stored.

Right to correct
The data subject may request the rectification of incorrect or incomplete data stored in the registry.

Right to oppose
A data subject may oppose the processing of personal data if he / she feels that personal data has been processed unlawfully.

Right to restrict
The data subject has the right to restrict the use of their data for direct marketing purposes.

Right to be forgotten
The data subject has the right to request the deletion of data if data processing is not necessary.

It should be noted that the controller is obliged to keep the accounting records in accordance with the Accounting Act (Chapter 2, Section 10) for a period of time (10 years). Therefore, accounting records can not be removed before the deadline expires.

Withdrawal of consent
If the processing of personal data is based solely on consent, and not customer-based, the data subject may withdraw their consent at any time.

Right to limit processing
The data subject has the right to demand that we limit the processing of controversial data until the matter is resolved.

Right to appeal
The data subject has the right to file a complaint with the Data Protection Ombudsman if he or she feels that we are in violation of our personal data when processing the applicable data protection legislation. Contact details of the Data Protection Supervisor.

9. Data processors

The data controller and companies in its service may process personal data.

We may also outsource the processing of personal data to third parties, thereby guaranteeing that personal data will be processed in accordance with current data protection legislation and otherwise appropriately.

10. Transfer of information outside of EU

In general, we will not transfer information outside the EU or the European Economic Area. However, if personal data is to be transferred outside of the EU and the EEA, we will ensure a sufficient level of protection of personal data, by agreeing on the confidentiality and processing of personal data as required by law.

11. Automatic decision-making and profiling

We do not use data for automated decision making or profiling.