A description regarding the processing of Atelier Torbjörn Tillander Oy:s (”Atelier Torbjörn Tillander”)customers as well as their representatives personal information, updated 11.6.2018
1. DATA CONTROLLER
Atelier Torbjörn Tillander Oy (Business ID: 0894457-5)
Kluuvikatu 1
00100 Helsiki
2. CONTACT INFORMATION IN REGARDS TO PRIVACY
Atelier Torbjörn Tillander Oy
E-mail:
tina@tillander.comAddress: Kluuvikatu 1, 00100 Helsinki
3. PERSONAL DATA PROCESSED
You can access our website without entering any personal data. However, Atelier Torbjörn Tillander may collect personal data for certain services and as a requirement to function properly. Personal data that is collected generally consists of contact and personal details such as:
- first- and last name
- contact details (address, phone number, e-mail address)
- consent regarding direct marketing
- marketing and promotional information, marketing measures targeted to the registered person and the participation in such (for example promotional games and competitions or participation to events)
- information regarding customer relations and other sensible business related contact (for example product and service purchases and cancellation of purchases), delivery information, feedback and consumer complaints
- information regarding changes in above specified information
4. PURPOSES OF PROCESSING
Personal data may be processed for the following purposes:
- analyzing, managing and developing customer relations, with:
- product maintenance, reparations, making, delivering or the fulfillment of any other contracts related to the before mentioned
- services provided by Atelier Torbjörn Tillander communication to the customer;
- direct marketing of Atelier Torbjörn Tillander;
- other similar uses, which are not in contradiction to the above mentioned use cases.
5. LEGAL BASIS FOR PROCESSING
5.1. Contractual basis
We process your personal data for the performance of a contract between you and us when you have agreed to our Privacy Policy or other applicable terms applicable on our website and have begun to use our webpages. You also enter into contract with us whenever you create a profile in our services.
In addition, we process your personal data in order to take steps at your request prior to entering into contract defined above.
5.2. Legitimate Interest
Part of our processing is necessary for the purposes of our legitimate interest. Our legitimate interests allow us to process your data for other reasons than merely for the performance of the contract between you and us.
We have considered the protection of personal data and we have concluded that the fundamental rights or freedoms of the registered person does not override the right of Atelier Torbjörn Tillander to process certain personal data. You have the right at any moment, to object the processing of personal information. In this situation, we will evaluate whether the processing is necessary according to the law and whether we have the right to continued processing of your personal data.
6. HOW DO WE SHARE YOUR INFORMATION
We may disclose information about you within the bounds of the law. Personal data is shared for the authorities per their request, for example the tax authorities.
We do not sell your personal data to any third parties for e.g. marketing purposes. However, we have the right based on law to disclose personal information in the case of the selling of the business.
Personal data processing is outsourced to the following service providers, who process the information on behalf of Atelier Torbjörn Tillander:
- IT-software provider
- accounting company
7. DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE OF THE EU AND THE EEA?
We do not transfer any data outside the EU or the EEA.
8. HOW LONG DO WE STORE YOUT PERSONAL DATA
Personal data is stored for as long as it is necessary for the purposes of the processing or for as long as the legal requirements require.
- Atelier Torbjörn Tillander stores customer information as long as the customer relationship is ongoing and 20 years after purchase a service or a product. How long the data is stored is based on the long life of the products sold by Atelier Torbjörn Tillander. The information is stored to assure good customer service.
- Atelier Torbjörn Tillander stores customer information for direct marketing purposes until the registered withdraws their consent. In this case, Atelier Torbjörn Tillander will store the information of the withdrawal, unless the registered person does not give permission to store the information.
- Atelier Torbjörn Tillander stores all accounting related information 6 years after the calendar year has ended.
9. THE RIGHTS OF THE REGISTERED
You can use all below mentioned rights by contacting either by e-mail: tina@tillander.com or by mail: Data protection matters, Atelier Torbjörn Tillander Oy, Kluuvikatu 1, 00100 Helsinki.
Please be aware, we might request more information in order to prove your identity.
9.1. Right to access information
You have the right to information pertaining how we process your personal data. In addition, you have the right to access your personal information that we store and all processing information in conformity with the GDPR.
We will not give access to Atelier Torbjörn Tillander trade secrets or other confidential information, which may violate the fundamental right to the protection of privacy.
When you use the right to access your information, we will provide you with a copy of the information stored and processed. If you request more than one copy, we have the right to demand a fair compensation to cover the administrative expenses. If you request the information by e-mail, we will provide you with an electronic copy of the information except in the case that you request the information orally or on paper.
9.2. Right to rectification
You have the right to obtain without undue delay the rectification of your inaccurate personal data from Atelier Torbjörn Tillander. We might have to request additional information in the case we need to confirm your identity or to confirm the new information received.
9.3. Right to erasure
You have the right to obtain from the controller without undue delay the erasure of your personal data, if:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw your consent on which the processing is based on and where there is no legal ground for the processing;
- the personal data has been unlawfully processed;
- the personal data has to be erased in compliance with a legal obligation in EU or Member State law to which the controller is subject.
You have the right to obtain a restriction on processing from the controller in regards to your information where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
- the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject
We make decisions in a case-by-case basis when considering the erasure of personal information. We do however make the best possible effort to respect your wishes and right to the erasure of your personal data.
9.5. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to Atelier Torbjörn Tillander, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance, where:
- the processing is carried out by automated means
- the processing is based on your consent (for example when subscribing to a possible newsletter) or in the case the processing of the information is necessary to fulfil a contract.
9.6. Right to object
You have the right to object to the processing of your personal information, on grounds relating to your particular situation. Atelier Torbjörn Tillander shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
10. THE RIGHT TO NOTIFY A BREACH OF PERSONAL DATA TO THE SUPERVISORY AUTHORITY
You have the right to contact the competent supervisory authority to lodge a complaint if you believe Atelier Torbjörn Tillander in processing your data has breached the Data Protection Regulation and/or violated your rights under the Data Protection Regulation.
11. WHERE HAVE WE OBTAINED YOUR INFORMATION (IF NOT FROM THE REGISTERED HERSELF OR HIMSELF)?
Atelier Torbjörn Tillander collects information only from the registered himself or herself.
12. PROTECTION OF YOUR PERSONAL INFORMATION
Atelier Torbjörn Tillander has undertaken appropriate technical and organizational measures to protect personal data related to you. Such measures include i.e. user controls, firewalls, secure connections, virus protections, sufficient outsourcing agreements and adequate training of our staff.
The manual form of your personal data is stores in a secure location where only authorized personnel have access.
Only specific Atelier Torbjörn Tillander employees and others who are in a contractual relationship with Atelier Torbjörn Tillander have a right to access your personal data.