Privacy Statement
Tunturipuun Kauppa Oy, www.tunturipuu.fi, is committed to protecting the privacy of its service users and complies with data protection legislation and good data protection practices.
Data Controller
Name: Tunturipuun Kauppa Oy
Business ID: 3548399-7
Address: Puistokatu 9 as 3, 39500 Ikaalinen
Phone: 020 731 1101
Email: tunturipuu@tunturipuu.fi
Contact Information Regarding the Register
Name: Esa Seppänen
Address: Puistokatu 9 as 3, 39500 Ikaalinen
Phone: 020 731 1101
Email: tunturipuu@tunturipuu.fi
Data Subjects
The register contains customers, potential customers, and partners.
Purpose of Processing Personal Data
| Data Subjects | Purpose of Processing | Legal Basis |
|---|---|---|
| Customers (contact persons) and partners | Enabling necessary customer service communications and maintaining the customer relationship | Legitimate interest of the controller |
| Potential customers and website users | Contact requests and newsletter subscriptions via the website | Legitimate interest of the controller |
Data Stored in the Register
The customer register contains the following information:
| Data | Customers & Partners | Potential Customers / Website Users | Purpose of Use |
|---|---|---|---|
| Name | x | x | Identification / communication |
| Phone number | x | x | Communication |
| Email address | x | x | Communication |
| Employer / company | x | x | Customer relationship management / targeted marketing |
| Role / title | x | x | Customer relationship management / targeted marketing |
| IP address | x | Targeted marketing |
Rights of the Data Subject
The data subject has the following rights. Requests to exercise them should be made to the address provided above.
- Right of access: The data subject may review their stored personal data.
- Right to rectification: The data subject may request correction of inaccurate or incomplete data.
- Right to object: The data subject may object to the processing of their data if they believe it has been processed unlawfully.
- Right to restrict direct marketing: The data subject has the right to prohibit the use of their data for direct marketing.
- Right to erasure (“right to be forgotten”): The data subject may request deletion of their data if processing is unnecessary. The controller will either delete the data or provide a justified reason why it cannot be deleted.
- Note: The controller may have a statutory or other right to retain data. For example, bookkeeping material must be stored for 10 years in accordance with the Accounting Act (Chapter 2, Section 10).
- Right to withdraw consent: If processing is based solely on consent, the data subject may withdraw consent at any time.
- Right to lodge a complaint: The data subject may lodge a complaint with the Data Protection Ombudsman if they believe their data has been processed unlawfully.
Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html
Regular Sources of Data
Information on potential customers is obtained with their consent through website visits or other personal or digital interactions.
Regular Disclosures of Data
Data is generally not disclosed outside Tunturipuun Kauppa Oy for marketing purposes.
Data may selectively be disclosed to third parties commissioned by the controller for targeted marketing campaigns. Ownership of the data does not transfer, and third parties have no right to broader use beyond the assignment.
We ensure that all our service providers comply with data protection legislation. Regularly used providers include:
- Hubspot
- Dealfront (Leadfeeder)
Duration of Processing
Personal data is generally processed as long as the customer relationship is valid. Data subjects can unsubscribe from our mailing list via the link included in every marketing email.
Processors of Personal Data
Personal data is processed by the controller and its employees. Processing may also be partly outsourced to third parties, in which case contractual arrangements ensure compliance with data protection legislation.
Transfer of Data Outside the EU
Personal data is not transferred outside the EU or the European Economic Area.
Automated Decision-Making and Profiling
We do not use personal data for automated decision-making or profiling.
Alternatively, if applicable:
We may use personal data for automated decision-making and profiling, for example in targeted marketing, customer scoring, or service personalization.
- Automated decision-making means decisions are made without human involvement.
- Profiling means evaluating personal characteristics such as interests or behavior.
The purpose of profiling and automated decision-making may be to improve customer experience, provide tailored content, or speed up decision-making.
The legal basis may be legitimate interest, performance of a contract, or consent, depending on the situation.
The data subject has the right:
to object to profiling and request deletion of their data from profiling registers.
not to be subject to decisions based solely on automated processing if it significantly affects them;
to request human involvement in the decision-making;
to express their views and contest the decision;