According to the EU General Data Protection Regulation (GDPR), the controller has an obligation to inform the data subjects in a clear manner. This policy meets the information requirement.
(Business ID / VAT No: FI-2293242-3 )
Hämeenkatu 15 C 8
Phone: +358 400 516 644
Fax: +358 420 495 860
Kewin Ltd's customers and their employees.
Personal data is processed on the basis of customer relationship.
Use of personal data processing and register
Personal data is processed only for predefined purposes:
- Processing orders
- Managing customer relationships
- Offering new products
- Billing / Financial Management
The customer register contains the following information:
- Name, phone, email
- Address, country
- Billing information
- Orders and order history
All personal information is collected directly from the customer himself.
As a rule, information is not transferred outside of Kewin Ltd for marketing purposes.
We have ensured that all of our service providers comply with the privacy laws. Our service providers have access to our register in the following cases:
- management and maintenance of registry
In general, personal data is processed as long as the customer relationship is active.
The data subject has the following rights, which he may use by sending a request to the following address: Kewin Ltd, Hämeenkatu 15 C 8, 33200 Tampere, Finland or firstname.lastname@example.org.
Right to inspect
The data subject may inspect the personal data we have stored.
Right to correct
The data subject may request the rectification of incorrect or incomplete data stored in the registry.
Right to oppose
A data subject may oppose the processing of personal data if he / she feels that personal data has been processed unlawfully.
Right to restrict
The data subject has the right to restrict the use of their data for direct marketing purposes.
Right to be forgotten
The data subject has the right to request the deletion of data if data processing is not necessary.
It should be noted that the controller is obliged to keep the accounting records in accordance with the Accounting Act (Chapter 2, Section 10) for a period of time (10 years). Therefore, accounting records can not be removed before the deadline expires.
Withdrawal of consent
If the processing of personal data is based solely on consent, and not customer-based, the data subject may withdraw their consent at any time.
Right to limit processing
The data subject has the right to demand that we limit the processing of controversial data until the matter is resolved.
Right to appeal
The data subject has the right to file a complaint with the Data Protection Ombudsman if he or she feels that we are in violation of our personal data when processing the applicable data protection legislation. Contact details of the Data Protection Supervisor.
The data controller and companies in its service may process personal data.
We may also outsource the processing of personal data to third parties, thereby guaranteeing that personal data will be processed in accordance with current data protection legislation and otherwise appropriately.
In general, we will not transfer information outside the EU or the European Economic Area. However, if personal data is to be transferred outside of the EU and the EEA, we will ensure a sufficient level of protection of personal data, by agreeing on the confidentiality and processing of personal data as required by law.
We do not use data for automated decision making or profiling.