DATA PROTECTION STATEMANT FOR CUSTOMER REGISTER
NAME OF REGISTER
Apajatie 12, 96800 ROVANIEMI, FINLAND
+358 44 971 4115
CONTACT FOR REGISTER
DATA PROTECTION OFFICER
PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
Personal data is collected for legal requirements. The register includes data from sources related to our customers and stakeholders.
All personal data is collected according to this data protection statement and will under no circumstances be used, altered or transferred in a manner not specified here.
CONTENTS OF REGISTER
The register contains personal data from Ollero Oy’s customers. This includes names, addresses, phone numbers, e-mail addresses, identity numbers, nationalities, reasons for travel and other information pertinent to managing customer relations.
REGULAR DATA SOURCES
Personal data is collected into the register from the data subjects themselves as well as from tour operators and booking services.
REGULAR SHARING OF DATA
Customer data can be provided to the authorities if required by the law. In individual cases, Ollero Oy may relinquish customer data to a specific party after a lawful request or if a verified authority has made a lawful demand for Ollero Oy to release a specified piece of data from Ollero Oy’s database.
RIGHT OF ACCESS
Data subjects have a right to discover what data related to them is stored in the register. Following a sufficiently accurate and specific request, data subjects also have a right to access stored data related to them. Requests for access should be addressed in writing to the register’s contact person. Include a copy of valid photo identification.
RIGHT TO RECTIFICATION AND ERASURE OF DATA
Should a data subject discover an error in their stored personal data, the data controller must rectify the register. The data controller is also obligated to proactively inspect and update the data in their register. Data subjects may also demand the data controller to erase their personal data from the register. The data protection officer is in charge of such operations.
OTHER RIGHTS RELATED TO PROCESSING OF PERSONAL DATA
Data subjects have a right to demand limited processing of their personal data. Data subjects also have a right to receive any personal data they have provided to the data controller in a structured, commonly used and machine-readable form. They may also provide this data to other data controllers.
ERASURE OF DATA AND PERIOD OF RETENTION
Ollero Oy will erase customer data from the register once there is no longer a legal obligation to retain the information.
Personal data is erased once there is no legal obligation for processing or storing the data.
APPROVAL OF DATA PROTECTION STATEMENT
This data protection statement has been approved for use until further notice and inspected on 21 Nov 2019.