Privacy statement

EU Data Protection Regulation (GDPR) Privacy Statement

Date of preparation 10 May 2018

CONTROLLER

Lumoava Finland Oy (hereinafter referred to as ”Lumoava Finland”)
Business ID: 0298672-3
Kultakuja 4
70150 Kuopio
Finland

PERSON IN CHARGE OF FILING SYSTEM

Marjaana Koski
Marketing Designer
Phone: +358 40 3040 212
Email: marjaana.koski@lumoava.fi

NAME OF FILING SYSTEM

The customer register of the Lumoava online shop of Lumoava Finland Oy

PURPOSE OF FILING SYSTEM

The filing system is used for the purpose of managing customer relations, contacting customers, and marketing. The data in the filing system are used for Lumoava Finland’s own direct marketing unless the customer has explicitly prohibited direct marketing. The data in the customer register are used for planning the company’s product range, targeting and developing its products, and for statistical purposes.

Lumoava Finland may use its partners for maintaining client and service relationships. Some of the register data may be transferred to the partner’s servers due to technical requirements.

Personal data shall be processed within the limits allowed and required by the Data Protection Act.

CONTENTS OF FILING SYSTEM

The personal data filing system includes the following data:
The person’s first and last name
Email address
Postal address
Telephone number
Information about processed orders
Delivery tracking data from Posti Finland
Information about marketing permissions and prohibitions

SOURCES OF DATA FOR THE FILING SYSTEM

Data personally provided by the customer and the orders placed by customers in the online shop.

USE OF COOKIES

Lumoava Finland's online shop uses cookies. A cookie is a small text file submitted to and stored on a user’s computer. The file enables website administrators to detect frequent site visitors, makes it easier for users to log into websites, and allows compiling aggregate data of site visitors. This feedback allows Lumoava Finland to constantly develop the contents of its website. Cookies do not cause any damage to the user’s devices or files. When anonymous users click on the ‘like’ button on Lumoava’s online shop, cookies that are valid for 2 years or until users delete cookies on their browser are used to store the likes.

DISCLOSURE OF DATA

Lumoava Finland may disclose the data in the customer register to communities that have entered into a partnership agreement with Lumoava Finland for the purpose of the delivery of orders by customers. Lumoava Finland's partners do not use the data for any other purposes or transfer the data to third parties. Lumoava Finland may disclose customer data to the authorities within the limits allowed and required under valid legislation.

The data shall not be transferred outside the European Union or European Economic Area.

THE PRINCIPLES OF SECURING THE FILING SYSTEM

Lumoava Finland Oy's personnel is bound by confidentiality obligations in relation to all customer register data. Only specially appointed Lumoava Finland Oy employees or other agents authorised to operate for Lumoava Finland Oy in connection with the data filing system may process the manually stored customer data.

Due to the technical implementation of data processing, some of the data may be physically located on the servers or equipment of third-party subcontractors, in which case a technical access is used to process the data.

Protection of the filing system and storage of data
Lumoava Finland Oy takes generally accepted measures to ensure the data security of the filing system and uses appropriate technical solutions to prevent the access of unauthorised persons to its data systems. Customer data can only be accessed with a user ID and password. Only specially appointed Lumoava Finland Oy employees and employees of companies authorised by Lumoava Finland Oy for this specific purpose may use the data filing system application. Each person processing the register have user authorisation granted by Lumoava Finland Oy.

RIGHT OF ACCESS, RECTIFICATION, AND OBJECTION

The customer has the right to verify which of their personal data have been stored in the register. The request for verification must be in writing and signed by the customer and sent to:

Lumoava Finland Oy
Marjaana Koski

PO Box 1512 (Hopeakatu 3)
70151 Kuopio
Finland

Lumoava Finland shall respond to the requests in writing.

If there are errors in the customer’s data, he or she has the right to obtain from the controller the rectification of inaccurate personal data.

The customer has the right to object to the processing of his or her personal data for direct marketing purposes by contacting the customer services of Lumoava Finland Oy’s Lumoava online shop by telephone at +358 40 3040 226, in a letter sent to the person in charge of the filing system, or by email at lumoavashop(a)lumoava.fi.