The controller of the personal data processed by the online store luolaseikkailu.fi (hereinafter referred to as the Merchant) is Irti Maasta Oy, business ID 2659037-9, address c/o Kummelipolku 5 A, 02330 Espoo, telephone +358505188075 and e-mail address info@irtimaasta.fi.
The purpose of the processing is to fulfil the contractual obligations between the customer and the Merchant. Personal data are processed for the fulfilment of legal obligations (e.g. accounting and consumer dispute resolution).
Personal data is used to maintain and deliver customer orders. Purchase history data (date of purchase, products and quantity, customer details) is used to compile a summary of products and services purchased and to analyse customer preferences. The account number is used to reimburse customers for payments. Personal data such as email address, telephone number and customer name are processed to maintain the customer relationship (customer service)
The IP addresses or other network identifiers of the users of the online shop are processed for the provision of online services and for statistical purposes.
All personal data obtained by the Merchant as a result of the registration and use of the customer's user account is protected from unauthorised access and will only be disclosed to third parties with the customer's consent, unless the obligation to disclose is required by law. The Customer agrees that the Merchant has the right to process his/her data, including the right to disclose data to third parties related to the Merchant's customer service, in order to provide more personalized targeted content and to develop personalized services.
The Merchant stores customer data on Siteground Ltd servers located in a Member State of the European Union or in countries that are members of the European Economic Area. Data may be transferred to countries whose level of data protection is deemed adequate by the European Commission and to US companies that have signed up to the Privacy Shield.
To protect personal data against accidental or unlawful destruction, alteration, disclosure or publication, the online store has implemented appropriate physical, organisational and technical security measures.
The processing of data is based on agreements between the Merchant and the authorised processors. Our staff are responsible for ensuring that appropriate safeguards are in place when processing personal data.
You can access and correct the personal data stored in the online store on the account management page of the online store. If you make a purchase without a customer account (without a user ID), you can request the data stored in the systems for yourself by filling in a request for information form.
If the processing of your personal data is based on separate consent, you have the right to withdraw your consent at any time. You can withdraw your consent on the account management page.
In principle, the data of loyal customers are kept for as long as the customer's loyalty is valid; unless the data are part of the Merchant's accounting material, in which case they are kept for the period specified in the Accounting Act (seven years); or are related to the processing of payment and claims, in which case they are kept for the period required for the settlement of the claim or after the expiry of the limitation period of the claim (three years).
When you place an order in the online shop without a customer account (without a user ID), the information you provide is stored in the system and your personal purchase history is kept for three years.
You can delete your personal data stored in the online shop and terminate your loyalty on the account management page of the online shop.
If you do not have a customer account, you can request the deletion of personal data concerning you by filling in a data request form. We will respond to your request within one month at the latest and, if necessary, specify the timeframe for deletion.
You can send a data transfer request using the data request form. The data transfer requires verification of your identity. We will respond to your request within one month at the latest by sending you the personal data applicable to the transfer.
If you have given your consent, we will use your email address and telephone number for electronic direct marketing communications. You can withdraw your consent by contacting Customer Service or by revoking your consent to electronic direct marketing via the corresponding link in the header of the email you receive.
You can also object at any time to profiling (the processing of personal data using personal data to evaluate certain personal aspects of you in order to target marketing) by contacting Customer Service.
If you believe that we are not processing your personal data in accordance with the GDPR, you can lodge a complaint via Customer Service (info.tampere@luolaseikkailu.fi). Contact details for the Office of the Data Protection Ombudsman can be found at (https://tietosuoja.fi/tietosuojavaltuutetun-toimisto)
