DATA PROTECTION STATEMENT FOR CUSTOMER REGISTER
Due to the type of their trade, and the responsibilities dictated in the Finnish law, Ollero Oy handles personal data in various occasions.
In this data protection statement, we solely inform on the customer register and the data processing of Johku ecommerce system, managing the bookings in Ollero Eco Lodge.
1. CUSTOMER REGISTER HOLDER
Ollero Oy / Ollero Eco Lodge
Address: Apajatie 12
96800 ROVANIEMI, FINLAND
2. PERSON RESPONSIBILITY FOR THE CUSTOMER REGISTER
Mrs. Anni Pöyry
Ollero Oy / Ollero Eco Lodge
Tel. +358 44 971 4115
3. CUSTOMER REGISTER NAME
Ollero Eco Lodge webshop customer register
(FI: Ollero Eco Lodgen verkkokaupan asiakasrekisteri)
4. GENERAL LEGAL PRINCIBLE AND THE PERSONAL DATA COLLECTION/CUSTOMER GEISTER JUSTIFICATION:
According to the European Union general data protection regulation (Regulation (EU) 2016/679), the judicial right to handle personal data is an agreement, which comes to be, when a customer orders services and/or products in Ollero Eco Lodge webshop. The intent of the registry is to ensure the commerce taking place in the webshop, such as brokering order information, billing information, payment verification or data handling information between Ollero Oy and the customer. In addition, the register is being upheld to enable customer contacts and customer relations, and to enable electronic marketing communication in such cases where the customer has allowed this.
Ollero Oy does not save or keep in the register any data connected to other merchants’ services or products. The collected data will not be applied to any automatized decision-making. The data may be used in customer profiling.
All personal data is collected according to this data protection statement and will under no circumstances be used, altered or transferred in a manner not specified here.
5. REGISTER DATA CONTENT
- Family name, first name
- Postal code
- Telephone number
- E-mail address
- Identity number (private customers)
- Source page of the purchase
Additional data (company data content):
- Company name
- Business ID
- Invoicing address
- Billing broker ID
- Reference number
Additionally, customer will be given the choice to concede additional information via a webform.
Ollero Oy will erase customer data from the register once there is no longer a legal right or obligation to retain the information.
6. REGULAR DATA SOURCES
The data will be collected via electronic forms in the Johku ecommerce system. The customers fill in the forms when ordering services/products from Johku ecommerce system.
7. REGULAR SHARING OF DATA AND REGULAR DATA HANDOVER OUTSIDE EU/EAA
Customer data can be provided to the authorities if required by the law. In individual cases, Ollero Oy may relinquish customer data to a specific party after a lawful request or if a verified authority has made a lawful demand for Ollero Oy to release a specified piece of data from Ollero Oy’s database.
The data may be technically handled outside EU / EEA.
8. REGISTER DATA PROTECTION
The data will be handled with utmost meticulousness and will be protected accordingly. The data will be held on web servers, which are maintained and protected accordingly. The register holder ensures, that all personal data and access rights will be handled confidentially and only by legitimate staff members.
Electronically saved data: The register is located on the Johku server and the data manager is Aptual Commerce Oy. The full register can only be accessed by the register holder and the technical staff at Aptual Commerce Oy. Read more about the Johku data protection policies: https://johku.fi/privacy/.
Manual data: In principle the data shall not be printed as manual data. Should the data be printed, the data will be held in secured premises and only the register holder holds accessing rights.
9. VERIFICATION RIGHTS
All persons listed in the register have a right to verify their saved data and correct any misinformation. This right has been automated by the Johku service, maintained by Ollero Oy, in the following means:
The Johku service communicates to the customer through My Johku application whenever his/her personal data is being handled. The service sends an automated message, as well as a link, to the My Johku where the customer may verify the data saved. The application also features a data transfer function. The My Johku service can be accessed throughout: johku.com/customer.
The My Johku service also hosts the contract termination feature, including the removal of the data. Should the customer terminate her/his contract with My Johku, all automated features and applications will cease. After the contract termination the customer must manage her/his own data (verification, correction, dismissal, limiting, data transfer) through written communication with Ollero Oy. Ollero Oy has the responsibility to answer the written communication within one month, as is being determined in the European Union general data protection regulation (GDPR). Ollero Oy holds the right for identity control.
The My Johku service is complimentary.
10. OTHER PERSONAL DATA RIGHTS
The customer, whose data is being held in the register, has the right to ask for the removal of her/his data, as well as other rights as determined in the European Union general data protection regulation (GDPR).
It is noteworthy that Ollero Eco Lodge customer register data is being created, when a customer purchases/reserves a service/products. Thus, Ollero Oy is also bound by the Finnish book-keeping and tax legislation to store and conserve the data.
All demands must always be presented to the register holder in written form. The register holder holds the right for an identity verification. The register holder must reply to the written demand within one month, as has been determined in the European Union general data protection regulation (GDPR).
The purpose of a cookie is to upgrade the website user experience. The cookies also manage the login to the site. The cookies enable the data collection of the browsing data and enhance the serviceability. Web browsers are customized to accept cookies automatically, but the feature can be removed in the browser settings, thereby also removing some features on the website.
The data collected by cookies and trackers do not contain personal data, and the browsing actions cannot be traced back to a person.