Customer information filing system– Privacy policy
Drafted on 26.08.2018
Controller of the customer information filing system:
Miska Selin
+358 456959409
info@windowfilm24.eu
Contact person in matters relating to the customer information filing system:
Miska Selin
+358 456959409
info@windowfilm24.eu
Name of the customer information filing system:
Windowfilm24.eu customer information filing system
Purpose of processing personal information
The purpose of the customer information filing system is to maintain a database of the company’s customers, managing, archiving and processing orders and taking care of customer relations.
The collected data may be used to improve the activities of the company, for statistical purposes and for generating more personal targeted content in our online services. All personal information is processed in conformity with the requirements of the data protection legislation.
Data collected in the customer information filing system may be used in the company’s own databases, for example for the purpose targeting advertisements without disclosing the data to third parties. For the purposes of maintaining customer and service relations, and targeting the marketing of the services to persons not contained in the company’s customer information filing system, the company may rely on the services of its associates, in which situation parts of the data in the customer information filing system may be transferred to the servers of the associates due to technical requirements.
The company has the right to publish data contained in the customer information filing system in the form of electronic or written directory, unless the customer explicitly forbids that. Directory means, in this context, for example mailing stickers used for direct advertisements or other similar procedures. The customer has the right to forbid the publishing of his or her personal data by notifying the company’s customer service by email (info@windowfilm24.eu) or by notifying the contact person of the customer information filing system.
Data processed in the customer information filing system
The following data is processed in the customer information filing system:
-The person’s first and last name
-The entity they represent
-Email address
-Address
-Telephone number
-Data about the goods and services ordered by the customer, including data about the delivery and billing of the ordered goods and services
-Any comments attached to orders by a customer
-Data about the customer’s previous orders
Lawful sources of personal data
Personal data about the customers is obtained from the orders of the customers in the online store, from the orders made by email and from orders made using the forms available on the website, as well as from communications made to the customer relationship management system during the use of the services.
Personal data is obtained from the process of registration to the service by the customer and communications made by the customer during the customer relationship. Updates to data concerning name and contact information is also obtained from authorities and companies providing information-update services. Personal data may also be gathered from subcontractors, who are associated with the use, production or offering of the services.
Data about other actions of the customers in the digital environment may be obtained from the company’s associates’ web pages, databases, or from other digital sources, which are logged into by using an invitation (a link), by cookies, or by using login information provided to the customer.
The data contained in the customer information filing system is only available for use by the company, excluding where a third party service provider is used for providing value-added services and deliveries, for supporting decision on credit, or targeting advertisements to person to others than those contained in the customer information filing system.
No data is disclosed outside the company, or to its associates, unless it is for the purposes of delivery, debt collecting or matters relating to billing, as well as where required by the applicable legislation. No personal data is transferred outside the European Union, unless that is necessary for the technical facilitation of the activities of the company or its associates.
Personal data of a registered customer will be erased upon request of the customer, unless legislation, unpaid bills, or on-going debt collecting prevents the erasure of the personal data.
Lawful disclosure of personal data
No personal data is disclosed to third parties, unless that is required for the facilitation of the services the company provides.
Data in the customer information filing system is available for use by the company only, excluding where a third party service provider is used for providing value-added services, or in support of credit decisions.
No data is disclosed outside the company, or for use by its associates, unless that is required for the purposes of credit applications, debt collecting or matters relating to billing, or where required by the applicable legislation.
Personal data of a registered customer will be erased upon request of the customer, unless legislation, unpaid bills, or on-going debt collecting prevents the erasure of the personal data.
Transfer of personal data outside the EU or the ETA
No personal data is transferred outside European Union, unless that is necessary for the technical facilitation of the activities of the company or its associates.
Principles of protecting the data processed in the customer information filing system A: Manual documents
Contact information and other manually processed documents containing customer information collected in customer events will be stored, after the their initial processing, in a locked and fire-safe storage. Only prescribed employees, who have signed legal non-disclosure agreements, have the right to process the manually stored documents containing information about the customers.
Principles of protecting the data processed in the customer information filing system B: Operations processed using IT
Only prescribed employees of the company and associate companies working in its name have the right to use, and update, the data of the customer information filing system. Each person using the customer information filing system has signed a legal non-disclosure agreement.
The system is protected with a firewall that protects contacts coming to the system from outside of the system.
Cookies
Our website uses cookies. Cookies improve the usability of the website by saving information in the user’s browser. We analyze our website by gathering information through the use of cookies. A cookie is a small text file contained in the user’s browser, where information is saved. The use of cookies allows us to identify users visiting our website again and connect activities on the website with users. However, no information can be individualized.
The use of cookies allows for the development of the website and improvement of user experiences, and additionally makes it possible for us to show targeted advertisements of third party services, provided we believe the showing of such advertisements to be beneficial for both us and the visitors of our website.
We use Facebook Remarking tags
A Facebook remarking tag is a cookie, which allows for the showing of targeted advertisements in Facebook for people who have visited this site. Information collected through the use of these cookies is handled according to the privacy policy of Digibadger (Windowfilm24.eu) and the privacy policy of Facebook.
You can check the targets of your interests collected from the variety of your connections, and the Facebook tags (i.e. the cookies) saved in your browser, and also delete them partially or completely from Facebook.
Address: https://www.facebook.com/ads/website_custom_audiences/
Right of access to personal data
A registered user has the right to access their personal data collected in the customer information filing system. A request for access to personal data must be done in writing by contacting the company’s customer service or the contact person of the customer information filing system in Finnish or English. The request for access to personal data must be signed.
A registered user has the right to prohibit the processing and disclosure of his or her personal data for use in direct advertising, distance selling and direct marketing, or market research and polling, by contacting the company’s customer service.
Right to rectification of personal data
Data stored in the customer information filing system that is inaccurate, unnecessary, incomplete or outdated must be rectified, erased or completed respectively.
Request for rectification of personal data must be done in writing, accompanied by a handmade signature, to the company’s customer service or to the controller of the customer information filing system.
The request must set out what personal data is demanded to be rectified, and on what grounds. The rectification of personal data will be executed with no delay.
The rectification of personal data will be notified to the entity from whom the inaccurate data is collected from or to whom such data is disclosed.
In the event of refusal of the request for rectification the controller of, or other person responsible for, the customer information filing system must provide a written acknowledgment of refusal, which sets out the grounds for the refusal of the request for rectification of personal data.
A person concerned may bring the refusal of request for rectification before their data ombudsman for resolution.
Other rights associated with the processing of personal data
A registered user has the right to forbid the disclosure and processing of his or her personal data for purposes of direct advertising and other marketing, the right to demand the pseudonymisation of the personal data to the extent such is viable and the right to erasure of the personal data (right to be forgotten).