Privacy Policy

1. Data Controller

2. Registered Individuals

Our register contains customers of Heusala Group Ltd and registered users of our online services.

3. Purpose of Processing Personal Data

We process personal data on the basis of the registered customer relationship for the purpose of selling our services and products and marketing them, as well as to identify users of our related online services.

4. Personal Data Stored in the Register

The user register contains the following information:

• User's name
• Email address
• Phone number

The customer register contains the following information:

• Contact person's name
• Email address
• Phone number
• Address details

The customer register also contains information about purchased products or services.

5. Rights of the Registered Individuals

The registered individuals have the following rights, requests for the use of which should be addressed to the above-mentioned data controller contacts.

• Right of access. The registered individuals have the right to check the personal data we have stored.
• Right to rectification. The registered individuals have the right to request rectification of their incorrect or incomplete data.
• Right to object. The registered individuals have the right to object to the processing of their personal data, if they feel that their personal data has been processed unlawfully.
• Right to opt-out of direct marketing. The data subject has the right to request that their personal data is not used for direct marketing purposes.
• Right to restrict processing for verification. The registered individuals have the right to demand that the processing of contested information be restricted until the matter is resolved.
• Right to erasure. The registered individuals have the right to request the erasure of data if processing is no longer necessary. We will process the deletion request, after which we will either delete the data or provide a justified reason why the data cannot be deleted. It should be noted that the data controller may have a statutory or other right to not delete the requested data. The data controller is obliged to retain accounting material in accordance with the Accounting Act (Chapter 2, Section 10) for the period defined by the law (10 years). For this reason, accounting material cannot be deleted before the end of the period.
• Right to withdraw consent. If the processing of personal data concerning the registered individual is based solely on consent, and not on, for example, customer or membership relationship, the registered individual may withdraw consent.
• Right to lodge a complaint. The registered individuals have the right to lodge a complaint with the supervisory authority if they feel that we are in breach of the applicable data protection legislation.

6. Regular Sources of Information

We collect information from the user themselves when they use our website, when they order our products or services, or when they register for our online services.

7. Regular Disclosures of Information

We do not disclose information to external parties for marketing purposes. We have ensured that all of our service providers comply with data protection legislation.

8. Duration of Processing

Personal data is processed for as long as the customer relationship is in force. You can remove yourself from our marketing lists by either deleting your account from our online services or turning off marketing messages in your account settings.

9. Processors of Personal Data

The data controller and its employees process personal data. We may also partially outsource the processing of personal data to third parties, in which case we will ensure, through contractual arrangements, that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.

10. Transfer of Data Outside the EU

Personal data will not be transferred outside the EU or the European Economic Area.

11. Automated decision-making and profiling

We do not use personal data for automated decision-making or profiling.