Privacy Policy

 

1. Data Controller:

Matrel Oy

Business ID: 2448255-0
Nostajantie 8
50600 Mikkeli

Contact Person for Registry Matters

Lasse Turunen
lasse.turunen@matrel.fi
+358 400 357 253

2. Registered Individuals:

Customers, potential customers, employees, event participants.

3. Purpose of Processing Personal Data:

Basis for maintaining the register:

  • Personal data is processed based on the data subject’s customer relationship
  • Personal data is processed based on consent (e.g., sweepstakes and event registrations where consent has been requested)

Purpose of Processing Personal Data and Use of the Register

Personal data is processed only for predefined purposes, which include:

  • Managing customer relationships
  • Providing information about our services

4. Personal Data Stored in the Register:

The customer register contains the following information:

Contact Information

  • Name
  • Address
  • Email
  • Phone number

Customer Information:

  • Details of purchased products/services

5. Rights of the Data Subject:

The data subject has the following rights, and requests concerning their use must be sent to lasse.turunen@matrel.fi.

Right to Access

The data subject has the right to check the personal data stored about them.

Right to Rectification

The data subject has the right to request the correction of incorrect or incomplete personal data.

Right to Object

The data subject has the right to object to the processing of personal data if they believe the data has been processed unlawfully.

Right to Restrict Direct Marketing

The data subject has the right to prohibit the use of their data for direct marketing purposes.

Right to Erasure

The data subject has the right to request the deletion of their data if processing is no longer necessary. We will process the deletion request and either remove the data or provide a justified reason why the data cannot be deleted.
It should be noted that the data controller may have a legal or other right to retain the requested information. The data controller is required to retain accounting records for the period defined in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting-related material cannot be deleted before the retention period expires.

Right to Withdraw Consent

If the processing of personal data is based solely on consent, and not on, for example, customer or membership status, the data subject may withdraw their consent.

The Data Subject May Appeal to the Data Protection Ombudsman

The data subject has the right to request that the processing of disputed data be restricted until the matter is resolved.

Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they believe we have violated applicable data protection legislation when processing personal data.

Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular Sources of Information:

Customer Information is Regularly Collected:

  • Directly from the customer when the customer relationship is established
  • Directly from the customer via an online form

7. Regular Disclosures of Information:

Data is not disclosed for marketing purposes outside Matrel Oy.

We have ensured that all our service providers comply with data protection legislation.

8. Duration of Processing:

  • Personal data is generally processed as long as the customer relationship is active.
  • The data subject can remove themselves from our marketing list via a link included in each marketing email we send.

9. Processors of Personal Data:

The data controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, ensuring through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.

10. Transfer of Data Outside the EU:

Data may be transferred outside the EU or EEA if the software used to maintain customer relationships changes and stores data outside these areas.

11. Automated Decision-Making and Profiling:

We do not use personal data for automated decision-making or profiling.