Privacy policy
Data Controller
Puutyö Salonen (1969666-9)
Hereinafter referred to in this Privacy Policy as the Company
Person Responsible for Data Protection and/or Contact Person
Otto Salonen
0504342939
puutyosalonen@gmail.com
Name of the Personal Data Register
Puutyö Salonen Customer and Marketing Register
This Privacy Policy applies to the processing of personal data related to our website, marketing, customer relationship management, and the products and services we provide.
Personal Data Collected and Sources of Data
We collect personal data necessary for managing customer relationships.
| Data Category | Examples of Data Content |
| Identification and contact details | Name and contact details of the customer and/or their representative. |
| Information concerning products and services, orders, and customer communications | Information about orders, delivery times, contracts, invoicing, customer communications, and complaints. |
| Information related to marketing (including direct marketing) and events, as well as consents and objections provided by the data subject | Contact details for marketing purposes, as well as information collected in connection with events and occasions. Consents and objections concerning direct marketing. |
| Information concerning the use of websites and other electronic services | IP address, electronic communication identification data, search and browsing data, browser and operating system information, and registration details. |
We collect personal data directly from the data subject, as well as from publicly available registers maintained by authorities and other external sources, such as the Trade Register or other similar public business registers. We also collect information provided through contact forms and use it for the aforementioned purposes related to maintaining customer relationships.
Purposes and Legal Basis for Processing Personal Data
Personal data is processed within the limits permitted by applicable legislation for the following purposes:
- providing products and services and entering into customer agreements (contractual relationship or measures taken prior to entering into a contract)
- managing customer relationships (legitimate interest)
- providing information and advice regarding services (legitimate interest)
- testing online services (legitimate interest)
- developing products and services (legitimate interest)
- collecting and analysing user statistics (consent, legitimate interest)
- improving the user experience of our website and other services (consent, legitimate interest)
- invoicing, credit decisions, and debt collection (legitimate interest)
- marketing communications (legitimate interest)
- direct marketing, including electronic direct marketing and telephone marketing, as well as planning and measuring the effectiveness of advertising and marketing, and combining and updating personal data for direct marketing purposes (legitimate interest, consent)
- managing stakeholder relationships, subcontracting, and cooperation with service providers (legitimate interest, contractual relationship or measures taken prior to entering into a contract)
- internal reporting and other administrative measures (compliance with a legal obligation)
- handling warranty and liability matters, complaints, litigation, and proceedings before authorities (legitimate interest)
- preventing and investigating misuse and ensuring information security and the safety of persons and property (legitimate interest)
- complying with other statutory obligations (e.g. accounting and taxation requirements) and reporting obligations
Where the processing of personal data is based on the individual's consent, the individual may withdraw their consent at any time by notifying the contact person mentioned above.
The processing of personal data may be necessary for the purposes of the legitimate interests arising from the customer relationship between the Company and the data subject. The Company has a legitimate interest in processing personal data for marketing, service and customer analyses, and service testing. Marketing purposes may also involve profiling. In such cases, the data subject has the right to object to the processing of personal data. Where personal data is processed on the basis of legitimate interest, we have assessed the benefits of the processing and any potential disadvantages to the data subject and have determined that the rights and interests of data subjects do not override the legitimate interest. Further information on processing based on legitimate interest is available upon request.
Processors of Personal Data
Access to personal data is limited to persons responsible for customer relationship management and marketing.
Recipients of Personal Data
Various service providers and other third parties may also be used in the processing of personal data, such as providers of technical solutions or server hosting services, as well as accounting and financial administration service providers. We ensure that the agreements required by data protection legislation are in place with the parties we use to process personal data.
Personal data may be disclosed to third parties where required by law or authorities, for the investigation of misuse, or to ensure safety and security. Personal data may also need to be disclosed in connection with litigation or similar legal proceedings.
If the Company is involved in a merger, business transaction, or other corporate restructuring, personal data may be disclosed to the parties involved in the arrangement or to parties assisting with the arrangement.
Further information about recipients of personal data is available upon request.
Transfer of Personal Data Outside the European Economic Area
Personal data will not be transferred outside the European Union or the European Economic Area unless this is necessary for the technical implementation of the service. In situations involving the disclosure or transfer of data, the level of data protection required by applicable data protection legislation and other necessary safeguards will be observed.
Further information about transfers of personal data and the safeguards used is available upon request.
Cookies
We use cookies and other similar technologies on our website. A cookie is a small text file stored by the browser on the user's device. Cookies contain an anonymous, unique identifier that allows us to identify and count the different browsers visiting our website. The purpose of using cookies and similar technologies is to analyse and further develop our services to better serve users and to target advertising. Users can manage their consent through the cookie management tool available on our website.
Protection of Personal Data
We protect personal data using appropriate technical and organisational measures. The data is stored in databases protected by firewalls, passwords, and other technical security measures. The databases and their backups are located in locked and monitored premises, and access to the data is restricted to specifically authorised persons.
Retention and Disposal of Personal Data
Personal data is retained for as long as necessary for the purposes for which it was collected and processed, for the performance of a contract, or for as long as required by applicable laws and regulations. Thereafter, the personal data will be appropriately destroyed.
Rights of the Data Subject
The data subject has the following rights:
- Right of access to personal data. The data subject has the right to obtain confirmation as to whether their personal data is being processed and to receive other information concerning the processing of personal data as required by data protection legislation. The data subject has the right to receive a copy of their personal data.
- The data subject may request the rectification of personal data if the information is incomplete or inaccurate.
- The data subject may request the deletion of personal data where there is no legal basis for its processing independent of the data subject's consent.
- The data subject has the right to restrict the processing of personal data where required due to the accuracy or lawfulness of the data, or where, in accordance with the right to object, the data subject requests that processing be restricted solely to the storage of the data. The data subject has the right to object to the processing of personal data for direct marketing purposes based on the Company's legitimate interest.
- The data subject may request that their personal data be transferred to another data controller. As a general rule, the right to data portability applies to personal data provided by the data subject to the data controller in a structured and machine-readable format, where the processing is based on the data subject's consent or a contract and/or where the processing is carried out by automated means.
- Right to withdraw consent. Where the processing of personal data is based on consent provided by the data subject, the data subject has the right to withdraw their consent to the processing of their personal data. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Requests concerning the exercise of the data subject's rights must be submitted in writing or by email using the following contact details:
Puutyö Salonen
Request concerning access to or other processing of personal data
puutyosalonen@gmail.com
The identity of the person making the request may be verified before the request is processed. The Company will respond to requests within one month of receiving the request unless there are specific reasons for extending the response period.
The data subject has the right to lodge a complaint with the competent data protection authority if they believe that their personal data has been processed in violation of applicable data protection legislation.
Contact details for the Finnish data protection authority are available here.