Privacy policy
Privacy Statement
Eräkellari Oy Privacy Statement
Eräkellari collects information about its customers and users of its online store so that it can offer its customers the best possible experience when using their services. Customer information is used for delivering services safely, for example, and for developing the quality of customer service and the online store.
Eräkellari respects the privacy of its customers and uses the personal information it collects only for the purposes set forth in this Privacy Statement. Eräkellari will not sell or pass on its customers' information for purposes other than those set forth in Section 7 of this Privacy Statement.
Under the EU Data Protection Regulation (GDPR), which entered into force in May 2018, the registrar has an obligation to inform data subjects about the processing of their personal data. This statement meets the obligation to inform data subjects as set forth in the GDPR. Clients must accept the terms of this Privacy Statement before using the services of Eräkellari.
1. Registrar
Eräkellari Oy (0927634-5 Business ID)
vildmarkskallare.se
erakellari.fi
Contact information:
Rengastie 2 A
60120 Seinäjoki
Contact information for register-related issues:
Tel.: +35844 5226009
E-mail: info@vildmarkskallare.se
2. Data subjects
The register includes all Eräkellari Oy's clients that have registered as clients in the online store or ordered a product. The register also includes persons who have contacted Eräkellari Oy's customer service via the online store, telephone or e-mail, or in a physical store, and left their contact information when placing an order or contacting the company.
The e-mail addresses of those subscribing to the newsletter are collected in another register, which is used for sending the company’s newsletter and marketing communications.
3. Grounds for and purpose of keeping the register
The personal information of customers is collected and processed based on the following criteria:
The customer has given their consent.
There is a registered customer relationship between Eräkellari and the customer.
The company needs the data to fulfil its obligations in relation to orders.
The purpose of the processing of the personal information and the register
Personal information will only be processed for the pre-defined purposes listed below:
to facilitate customer service and communication
to process orders, deliveries and for archiving
to record clients’ purchase histories for potential product returns and warranty processes
to prevent misuse
to improve the customer experience and the quality of customer service
to develop the company's own operations and services
to produce targeted content, communications and marketing
to compile statistics
4. Personal information that is stored in the register
The customer register contains the following information:
Identifying information such as first and last name
Contact information such as address, email address and phone number
Purchase history, including ordered products and price information, delivery address, chosen payment method and delivery terms
Contact history and records of conversations held over the phone, email, or online
5. The rights of data subjects
Data subjects have the following rights, which they can exercise by sending a request to info@erakellari.fi
Right of inspection
Data subjects can check their personal data we have stored.
Right to rectify data
Data subjects may request that any incorrect or incomplete information related to them be rectified.
Right of objection
Data subjects may object to the processing of their personal data if they feel that the personal data has been processed unlawfully.
Right to prohibit direct marketing
Data subjects have the right to prohibit the use of their data for direct marketing purposes.
Right of removal
Data subjects have the right to request that their data be deleted if the processing of the data is not essential. We will process the deletion request, after which we will either delete the data or provide a valid reason for why the data cannot be deleted.
It should be noted that the registrar may hold statutory or other types of rights that allow them not to delete the requested information. The registrar has the duty to keep accounting material for the length of time specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting material cannot be deleted before that period has ended.
Withdrawal of consent
If a data subject’s personal data is processed based only on their consent and not, for example, on their customer status or membership, the data subject may withdraw their consent.
The data subject may appeal the decision to the Data Protection Supervisor
Data subjects have the right to demand that we limit the processing of the disputed data until the matter is resolved.
Right of appeal
Data subjects have the right to lodge a complaint with the Data Protection Supervisor if they feel that the way the company is processing their personal data breaches applicable data protection legislation.
Contact details of the Data Protection Supervisor: www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Regular sources of information
Customer information is obtained regularly:
From the information entered by customers themselves when registering as a customer or placing an order.
From the information provided by a customer when contacting the company. Contact methods include the telephone, email, chat, Messenger or any other internet application.
Through user experience surveys or interviews conducted with a customer
From information entered by a customer themselves when subscribing to the newsletter
7. Legal disclosure
We will pass on some information to third parties provided that they need it to fulfil their obligations related to delivering products. Such third parties include:
logistics partners that are delivering a product to a location determined by the customer
payment intermediaries
billing operators
product suppliers in the case of direct deliveries
customs office in the case of products that are purchased tax-free
debt collection companies when an invoice has reached its maturity date and it is transferred to a debt collector
Our partner companies are committed to complying with the requirements of this Privacy Policy.
If necessary and if required by law, we will also provide information at the request of authorities.
8. Duration of handling of information
As a general rule, personal data is processed for as long as a customer relationship is valid
Subscribers to our newsletter may unsubscribe via a link included in each newsletter we send.
A customer may request that their personal data be anonymised or deleted from our records. Legislation (such as the Accounting Act and the Consumer Protection Act) may impose obligations on longer-term storage of the information.
9. Data processors
Only Eräkellari Oy's own employees who have been trained to handle personal data securely and responsibly will have access to customers’ personal data. Access to personal data will also be granted to IT support personnel with whom we have entered into contractual arrangements that ensure that the personal information is processed in accordance with applicable data protection laws and generally in an appropriate manner.
All personal information in the registry is protected from unauthorised access and our server security is high. Printouts and archives are stored in a locked room equipped with security cameras.
10. Transferring date outside of the EU
Personal data will not be transferred outside of the EU or the European Economic Area except for under exceptional circumstances. Exceptional circumstances only include orders coming from outside the EU, in which case the delivery details of the order will be provided to the transport company to enable delivery.
11. Use of cookies
Eräkellari Oy's online stores use cookies (small text files stored on your device) to collect information. Cookies can be used to collect information about, for example, the page a user was on before navigating to the website, the websites a user has browsed, the browser they are using, and their computer’s IP address. Cookies allow us, among other things, to display specific advertisements based on a user's interests and to analyse how well our sites and online services are performing. Information collected with cookies is also used for statistical purposes.
The information collected with cookies will not be combined with the customer registry information and users cannot be identified through the targeted advertising that is created with the information gathered by the cookies.
Customers of our online store have the option to block cookies by changing their browser settings so that their browser does not allow the storage of cookies. However, disabling cookies may prevent you from using some of the functionalities of our online store.
12. Automatic decision-making and profiling
We do not use personal information for automatic decision-making or profiling.
13. Modification of the Privacy Statement
We reserve the right to change this Privacy Statement as our services evolve and legislation changes or becomes more specific. Customers registered for our services will be notified of any significant changes affecting the Privacy Statement when such changes take place.
This Privacy Statement. Last updated 5/1/2020