PRIVACY POLICY

1. Controller

1. Controller
Veljekset Kellola Oy
Romuperäntie 193
92260 KOPSA
Business ID: FI14901539
Tel. +358 (0)40 180 704
Email: info@kellola.fi

2. Contact person for matters regarding the register  

Juho Pöyskö  
Tel. +358 (0)40 180 7046
Email: juho.poysko@kellola.fi

3. Register 

Veljekset Kellola Oy customer register 

4. Purposes for processing personal data

Personal data in the register is used for delivering the services purchased by the customer from Veljekset Kellola, managing customer relationships, and planning and developing the company’s business. 

An updated list of all services and products offered by Veljekset Kellola is available at www.veljeksetkellola.fi.

5. Registered data

The register may contain the following customer data:
• Name (first and last names)
• Language used for business
• Invoicing and delivery address (street address, postcode, municipality, country)
• Email
• Telephone number
• Name of the organisation (e.g. company name)
• Order and purchase history 

6. Sources of data

The data is obtained from the customer in connection with the execution of a service or product delivery agreement, i.e. when a customer relationship is established, and possibly later if there is a need to update the aforementioned registered data. In compliance with the Finnish Accounting Act, Veljekset Kellola is obliged to record all payment transactions for six years. Customer information can also be obtained through Veljekset Kellola’s website if the customer sends such data using the form on the web page.

7. Disclosure of personal data  

Personal data shall not be disclosed to third parties unless required by the authorities.

8. Transferring data outside the EU or the EEA

Veljekset Kellola Oy shall not disclose data to third parties as a rule. Any personal data in the register is processed using data management systems located in the EU or EEA. No data shall be disclosed outside these areas.

9. Protection of the register

A Manually recorded data
Manually recorded data is stored in a locked facility. People with access to the said facility are bound by the obligation of confidentiality. 

B Automatically processed data
Personal data shall be kept confidential. Access to the register is only by appointed employees of the controller who need the said data in their work and who have a personal right to use the register. The processors are also bound by the obligation of confidentiality. Register data may be physically located in more than one place, and they may be located on recording media of a third party, i.e. a service supplier of Veljekset Kellola. In these cases, privacy is ensured by means of contractual arrangements. The personnel of the third party, for example IT support, is bound by obligation of confidentiality.

10. Right to inspect your personal data

Every customer has the right to inspect their personal data recorded in Veljekset Kellola’s customer register. The request must be made in writing to: info@kellola.fi. 

11. Right to have your personal data rectified

Every customer has the right to request the rectification of inaccurate personal data recorded in the register or the full or partial deletion of their data.

12. Other rights related to the processing of personal data

According to article 21 of the General Data Protection Regulation, every registered person has the right to object to the processing of their data by the controller for direct advertising, distance selling or other direct marketing, as well as marketing surveys or opinion polls, personal registration or genealogy.