The description of the register according to the law of personal data (523/1999) 10§ and 24§
80160 JOENSUU, FINLAND
Tel 045 78341738
Business ID 3137663-3
Contact information for register holder
Sisushop's Customer Service
80160 JOENSUU, FINLAND
Name of Data file
Sisushop Customer Registry
Sisushop Newsletter Registry
Purpose of processing of personal data
The Registry contains Sisushop’s customer database. The primary purpose of processing personal data is to enable the processing of customers orders. The Database consists of customer info for those who have purchased from us in the past.
Purpose of register
Personal data collected in Customer register is processed in connection with customer orders, billing, mailing, customer contacts, development of services, reporting, marketing and other measures relating to customer matters. The purchase and other related data in the Customer register is also used for profiling and targeting offers, promotions, customer communication and other marketing measures to customers. The personal data collected in Newsletter Register is processed for the purpose of sending newsletters and in connection with participation in competitions and other marketing campaigns.
Data content of the register
Customer register contains the following information:
- First name and last name
- E-mail address
- Postal address
- Telephone number
- Details of orders
Data file protection
Access to the database is given to Sisushop personnel and may be provided the access to companies or individuals if needed to perform functions such as credit/debit card validation or web hosting services.
Regular transfer of data or transfer of data outside the European economic area
The personal data contained the Customer Registers are not transferred outside Sisushop´s, unless so required by applicable laws or to such subcontractors who participate in organizing direct marketing for the Customer, administration of information systems of the Company or in the processing of the order of the Customer (mailing of products and payment processes). Personal data of the Customer is not transferred to outside the EEA.
Principles for protecting the registers
Personal data contained in the Customer Registers of Sisushop's are confidential. The registers are held in electronic form and are appropriately protected with firewalls and by using other technical protection. Only named employees have access to the use and maintaining of the password protected Registers. The operators of the Registers are bound by confidentiality obligations.
Right of acess and rectification
The Customer has a right to request access to personal data recorded in the Customer Registers. The signed request for right of access shall be sent in writing to the Customer Service of the Company. The request of Access can also be made in person at the address provided above, in which case the Customer must have documentation to confirm his/her identity. The Company responses to requests for right of access in accordance with the Personal Data Act. If there is an error in the collected data of the Customer, the Customer can request rectification of such error. The Customer can prohibit the use of his/her data for direct marketing purposes by informing the Customer service of the Company in addition to which each newsletter provides instructions on how to cancel subscription.