Section 10 of the Personal Data Act (523/99) and the EU Data Protection and Data Protection Regulation (GDPR)
Date of issue: 06.04.2021
1. Registry name
Street and ball hockeys store Finland / Velikuusamo Oy customer register
Street and ball hockeys store Finland / Velikuusamo Oy , 2305617-0
3. Registry Contact
Brother Veikko Kuusamo
Ruunikkokatu 11, 20380 Turku
4. Personal data processed in the register
The register contains information on customers according to the following grouping:
- first name
- postal code
- telephone number
- purchase history < br> - email address
5. Purpose of processing personal data
Street and ball hockeys store Finland maintains a customer register of e-commerce customers and order history, as well as newsletter subscribers.
The core program of the information system is Shopify.
6. Retention period of personal data
Personal data will be retained in the register for the time being.
Personal data may be deleted from the register at the customer's request.
7. Regular data sources
The data source is the information provided by the customer on the online form, which the customer enters himself. Customer information may be updated or deleted upon request.
8. Regular disclosure of personal data
Personal data will not be disclosed to third parties, except when required by the Finnish authorities. Personal data will never be transferred to the EU or outside the European Economic Area.
9. Principles of register protection
The information security of the customer register is ensured by appropriate technical and administrative measures. Data is protected e.g. through a firewall, protection of physical equipment spaces, access control, access rights and encryption technologies. Personal data is kept confidential and persons handling register data are subject to professional secrecy. Access to the customer registry database is restricted by personal user rights.
10. Right of verification of personal data
The members of the register have the right to verify the data concerning themselves and to request the correction of incorrect data. To verify what personal information has been collected about you from the Registry, please contact the Registry Contact Person via email.
11. Right to refuse access to data and right to withdraw consent
The data subject has the right to refuse access to data concerning him and to request that the data be deleted. This applies to information processed with the consent of the individual.
12. Right of appeal
The data subject has the right to appeal to the supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the EU Data Protection Regulation.