Register and Privacy Statement

This is Register and Privacy Statement hold by Jarvin Oy, based on personal information law (10 and 24 §) and data protection regulation of EU (GDPR).
This statement is published 24.5.2018. Last change: 24.5.2018.
1. Registrar

Jarvin Oy, PL 17, 15101, Lahti, Finland
2. Register contact person

Irina Lavrina, Tämä sähköpostiosoite on suojattu spamboteilta. Tarvitset JavaScript-tuen nähdäksesi sen., +358 40 55 22 395
3. Name of register

Yrityksen  markkinointirekisteri
4. Legal basis and purpose of processing personal data
The legal basis for the processing of personal data is the EU's general data protection regulation
- the consent of a person (documented, voluntary, individualized, aware and unambiguous)
- the contract where the registered party is one of the parties
- the legitimate interest of the controller (eg customer relationship, employment relationship, membership).

The purpose of processing personal data is to communicate with customers, maintain customer relations and marketing.

Information is not used for automated decision making or profiling.
5. Data content of the register

The information to be stored in the register is: person's name, company / organization where applicable, contact details (phone number, e-mail address, address), website addresses, information on subscribed services and their changes, billing information, other information related to customer relationship and ordered services.
6. Regular sources of information

The information stored in the register is obtained from the customer, among others. messages sent via web forms, email, telephone, contracts, customer meetings and other situations where the customer delivers their information.
7. Ordinary deliveries of data and transfer of data outside the EU or EEA

Information will not be disclosed to other parties on a regular basis. The information can be published as far as it has been agreed with the customer.
8. Principles of registry protection

Careful handling of the registry is ensured and data processed by the information systems is adequately protected. The controller shall ensure that stored data, server access privileges and other critical data related to the security of personal data are processed confidentially and only by employees whose job description they belong to.
9. The right of inspection and the right to demand correction

Everyone in the register has the right to check his / her data stored in the register and to demand that any incorrect information be corrected or incomplete information supplemented. If a person wishes to check or request correction of his / her record, the request should be sent in writing to the registrar. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible for the customer within the time limit set in the EU Data Protection Regulation (usually within one month).
10. Other rights related to the processing of personal data

A person in the register has the right to request the deletion of his / her personal data from the register ("the right to be forgotten"). Also, those who are registered have other rights under the EU's general data protection regulation such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the registrar. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible for the customer within the time limit set in the EU Data Protection Regulation (usually within one month).