This is a combined Register Description and Information Document for Kulta-Center's customers, potential customers and website users in accordance with Sections 10 and 24 of the Personal Data Act (523/1999) and Articles 12 and 13 of the EU General Data Protection Regulation (679/2016).
1. The controller
Name: Kulta-Center Oy (Business ID 0166661-3)
Address: Olavinkatu 53, 57100 Savonlinna, Finland
Email: info [at] kulta-center.com
2. Name of the register
Kulta-Center.com's customer and marketing register.
3. Registered
- Customers (or contacts)
- Potential customers
- Website users
4. Purpose and basis of processing of personal data
Customers (contact persons)
Purpose of processing : Enabling the contacts required by customer service and maintaining the customer relationship.
Basis for processing : Legitimate interest of the controller
Potential customers and website users:
Purpose of processing : Contact requests and newsletter subscriptions via the website.
Basis for processing : Legitimate interest of the controller
5. Information to be stored in the register
The following information can be stored in the register:
| Information | Customer | A possible customer | Intended use | |||
| Name | ✔️ | ✔️ | Identification / communication | |||
| Telephone number | ✔️ | ✔️ | Communication | |||
| Email address | ✔️ | ✔️ | Communication / marketing targeting | |||
| Address | ✔️ | ✔️ | Customer relationship management | |||
| IP address | ✔️ | Marketing targeting |
Example of stored data content:
Subscribers to the newsletter: name, e-mail address and date of birth (optional information)
Customer: first name, surname, address, telephone number, e-mail address, information related to profiling and purchasing products, as well as other information provided by the customer.
Reviews: Name, nickname, e-mail or other information provided by the customer.
NOTE ! We do not store any personally identifiable information about users of the website in the register.
6. Duration of processing
When placing an order, the customer agrees to the storage of customer data in our system in order to maintain the customer relationship.
As a general rule, personal data is processed for as long as the customer agreement for which we need the data is valid. We will enter the information in the register as we receive it from the registrant and will update it according to what the registrant notifies the registrar.
Form data sent from Kulta-center.com will be automatically deleted six (6) months after submission. We remove unnecessary personal information from our customer and marketing register every six (6) months.
You can unsubscribe from our email marketing list yourself via the opt-out link in every marketing email we send you. Otherwise, customer data will be retained in the direct marketing register as long as the customer relationship is maintained and the customer has not prohibited direct marketing.
We retain emails related to orders for 7-8 years and invoices and receipts for 7-8 years from the date required by law. Our analytics data is retained by our marketing team for 50 months. For reviews, the reviews remain for the duration of the service used.
7. Your rights
You have the following rights, for which requests must be made to: info [@] kulta-center.com.
Right of inspection
You have the right to verify the personal information we hold about you. If you find inaccuracies or omissions in your information, you can ask us to correct or complete the information.
Right of objection
You have the right to object to the processing of your personal data at any time if you feel that we have processed your personal data unlawfully or that we do not have the right to process some of your personal data.
Prohibition of direct marketing
You have the right at any time to prohibit us from using your information for direct marketing. We will never sell or otherwise disclose your personal information to others so that they may target direct marketing to you.
We acquire online advertising e.g. From Facebook and Google. However, these companies will never receive your personal information and such advertising is not about direct marketing but is based on cookies. See cookies for more details.
Right of removal
If you feel that the processing of certain information about you is not necessary for the performance of our duties, you have the right to ask us to delete that information. We will process your request, after which we will either delete your information or provide you with a valid reason why the information cannot be deleted. If you disagree with our solution, you have the right to lodge a complaint with the Data Protection Officer ( instructions for making a complaint ). You also have the right to demand that we therefore limit the processing of disputed information until the matter is resolved.
Right of appeal
You have the right to complain to the Data Protection Officer if you feel that we are violating applicable data protection laws when processing your personal information ( instructions for making a complaint ).
8. Regular sources of information
The information of potential customers is obtained with their consent in connection with a visit to the website or in connection with other personal or digital interactions.
9. Disclosures
As a rule, the information is not disclosed for marketing purposes outside Kulta-Center Oy.
The data may be selectively disclosed to a targeted third-party marketing campaign commissioned by the controller. Ownership of the data shall not be transferred from the controller to a third party and the third party shall not have the right to use the data beyond the scope of the assignment.
We have ensured that all of our service providers comply with data protection laws. We regularly use the following service providers:
- Our company and its employees, whose job description is to maintain e-commerce.
- Payment service provider Klarna.
- The shipping company that will ship the order to you (Posti or Matkahuolto)
- An accounting firm that records an order in our books.
- An auditor who audits our accounts.
- An IT company that maintains our website
In addition, our marketing team can obtain general information for marketing, direct marketing and communication, as well as for other marketing activities performed for Kulta-Center.fi. The company that maintains the reviews and provides the service receives the information provided by the customer, which is not passed on to third parties.
10. Data transfer outside the EU
Whenever possible, we have chosen secure data centers in Europe to store your data.
Some of the above service providers may back up data outside the EU / EEA to the United States. The data is backed up so that your data is safe even in the event of a major server failure.
Privacy Shield
We have ensured that our service providers have joined the so-called EU-US The Privacy Shield Program ( https://www.privacyshield.gov/list ), which aims to ensure the secure processing of European data in the United States.
11. Registry Security Principles
The secure processing of your personal information is important to us. We use the following safeguards to ensure the security of your information.
- Access to the system requires a username and password. The system is also protected by firewalls and other technical means.
- Only certain pre-defined employees of the registrar have access to and are entitled to use the data contained in the register stored in the system.
- The use of the registry is protected by user-specific IDs, passwords and access rights.
- The registry resides on a computer located in a computer room on a server that is denied access to unauthorized persons.
- The information contained in the register is located in locked and guarded premises.
- The register is regularly backed up.
12. Cookies
This website uses cookies. The website sends a cookie to your browser - a small text file that is stored on your computer's hard drive. There are both temporary session ID cookies that close when you close your Internet browser and persistent cookies that are stored on your computer's hard drive. Cookies allow us to identify your browser and use the information we receive to calculate, for example, the number of browsers that visit our website and to analyze the use of our website, such as statistical tracking. They also allow us to view and track the interests of our users and thus develop our website. All information collected is anonymous and cannot be used to associate online activities with a specific person.
Most Internet browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. You can avoid cookies by modifying your browser settings and disabling their use.
Advertising cookies help us choose the most appropriate and interesting ads for you. They also prevent the same ads from showing. Some third-party vendors may also use cookies or web beacons (a 1-pixel image file) to display ads of your choice when you visit different sites. Information collected through cookies and web beacons does not share any personal information with us or third parties, such as your name or contact information. Third-party advertisers may also use technology to measure the performance of their ads. To do so, they may use a trace (a one-pixel GIF file) placed on our website to collect anonymous information.
This site uses the Google Adwords cookie to target marketing to users on Google's ad networks. The user is not identifiable by the information attached to the cookie. If you wish, you can opt out of Google Adwords marketing based on user lists at www.google.com/settings/ads .
For more information on browser-based allocation of advertising allowed Your Online Choices website for
Changes to our privacy statement
We may update our privacy statement, for example, as legislation changes.
Updated on 23 May 201 to comply with the EU data protection regulations, also known as the GDPR, which will enter into force on 25 May 2018.
Changes made on 21.2.2020, when the personal data processing bodies were updated. (Removed Paytrail and added Matkahuolto).
Changes made on April 14, 2020, as updated additions regarding the new review service.
The content of the report is structured on June 26, 2021