PRIVACY POLICY

Registrar

Patio Group Ltd

Business ID: 3162145-9

Address: Myllyjärventie 10, 74200 VIEREMÄ

Email: asiakaspalvelu@patioterassit.fi

Contact person for privacy matters

Data Protection Officer Ville Kokkonen Phone: 044 5454734 Email: ville.kokkonen@patiogroup.fi

Basis and purpose of processing personal data

The legal basis for processing personal data is the legitimate interest of the data controller, based on the customer relationship between the data subject and the data controller. The collected personal data is used to identify the user on the website, for example, for the purpose of customer relations in the online store. Additionally, the service may send newsletters to its customers. Cookies

A cookie is a small text file that the web browser saves on the user’s device. Cookies are used, for example, when the user’s information needs to be stored as they move from one page of the internet service to another. The use of cookies always requires the user’s consent. This website uses, among others, the following information in cookies:

user’s IP address browser type from which network address the user came contents of the shopping cart selected language version More information about cookies can be found on the Finnish Communications Regulatory Authority’s website.

Regular sources of information The information to be entered in the personal register is obtained regularly from the data subject himself/herself. Data collection takes place when registering on the website or online store. In addition, information is collected about purchased products, written comments, and behavior on the service.

Disclosure of personal data

Personal data is not regularly disclosed. Consequently, personal data is not transferred outside the European Union and the European Economic Area. However, information may be disclosed to authorities, for example, on the basis of a legal requirement.

Protection of personal data

The server of the website is SSL-protected, and personal data is stored in an encrypted database.

Retention period of data Data is stored as long as the user account is registered with the service. If the user deletes their account, the collected data is anonymized so that all identifying information, such as names, addresses, and phone numbers, is deleted.

Profiling Information about previously purchased products or behavior on the website/service can be used as a basis when offering additional services to the user.

Rights of the data subject

Right to access personal data

The data subject has the right to receive confirmation as to whether personal data concerning him or her is being processed and, if so, the right to obtain a copy of the personal data.

Right to rectification of data

The data subject has the right to request that inaccurate and incorrect personal data concerning him or her be corrected. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.

Right to erasure of data

The data subject has the right to request the deletion of personal data concerning him or her in the following cases: Personal data is no longer needed for the purposes for which it was collected Personal data has been processed unlawfully.

Right to restrict processing

The data subject has the right to restrict the processing of personal data concerning him or her in the following cases: The data subject disputes the accuracy of his or her personal data. The processing is unlawful, and the data subject opposes the deletion of his or her personal data and instead requests the restriction of their use. The data controller no longer needs the personal data for the original purposes of processing, but the data subject needs them for the establishment, exercise, or defense of legal claims.

Right to object

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. The data controller may no longer process the data subject’s personal data unless the data controller can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling.

Right not to be subject to automated decision-making

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The above does not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and the data controller or is based on the data subject’s explicit consent.

Right to data portability

The data subject has the right to receive personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another data controller.

Right to lodge a complaint with a supervisory authority

The national supervisory authority for personal data matters is the Data Protection Ombudsman, operating under the Ministry of Justice. The user of the service has the right to submit his or her case to the supervisory authority if he or she believes that the processing of personal data concerning him or her violates the relevant legislation.

Contacts

For all questions related to the processing of personal data and situations related to the exercise of their rights, the data subject should contact the Data Protection Officer by email at ville.kokkonen@patiogroup.fi or by mail at Patio Group Ltd, Myllyjärventie 10, 74200 VIEREMÄ.