This privacy statement describes how Vepsäläinen Oy ("Vepsäläinen") processes the personal data of its customers (hereinafter also "data subject"). Vepsäläinen has the right to update this privacy statement at any time as it deems necessary and will inform the data subjects of any material changes to it.
Business ID: 2111755-8
Juvankartanontie 11, 02920 ESPOO, FINLAND
Contact details for matters involving the data file:
Vepsäläinen Oy, Juvankartanontie 11, 02920 Espoo, Finland
Telephone: +358 20 7801 471
E-mail: [email protected]
The processing of personal data contained in the customer register is based on the legitimate interest of Vepsäläinen and its subsidiaries, and on the customer relationship with the data subject. Processing the data is necessary for managing customer relations, developing our business, ensuring a better customer experience across all channels and managing marketing communications. The register is also used for sending newsletters, event invitations and announcements. The customer’s consent for such use will be requested if required.
The minimum data stored in the customer register consists of the data provided by the customer in connection with subscribing to the newsletter or making a purchase. The register also contains data added or updated by Vepsäläinen or the users themselves.
The following data may be processed in the register:
* Vepsäläinen never stores personal codes or other information about online banking or debit or credit cards.
Data concerning the data subjects is mainly collected from the data subjects themselves, from Vepsäläinen's systems and services used by the data subject, and in connection with various marketing activities. Data may also be collected and updated from our partners’ data files and from authorities and companies providing personal data services.
The data in the customer register will not be disclosed to third parties, apart from the following exceptions: to the authorities as required by law, or in connection with mergers and acquisitions if Vepsäläinen sells or reorganises its business. Vepsäläinen also relies on partners in its business operations and, if necessary, may temporarily transfer data from the customer register for processing in a secure manner. In such cases, the data transferred to a third party will be erased with the appropriate methods. The partners always process the data on Vepsäläinen's behalf and do not create their own personal data files from the disclosed data.
As a rule, data stored in the register is not transferred outside the territory of the Member States of the European Union or the European Economic Area, unless this is necessary for the purposes of processing the personal data or for the technical implementation of processing, in which case the data will be transferred in compliance with personal data legislation.
Vepsäläinen processes the personal data of the data subjects for the duration of the customer relationship or for the duration of the newsletter subscription or other service. Data may also be stored for a longer period expressly required by law or the fulfilment of legal or contractual obligations, such as warranty obligations.
The customer register is stored in systems that are appropriately secured by personal passwords and firewalls in accordance with industry-standard information security principles. Manually processed materials are stored on premises that can only be accessed by the parties responsible for processing. Access to the customer register is limited to those Vepsäläinen employees whose duties require it.
Data subjects have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them. If a data subject objects to the processing of their personal data, Vepsäläinen may not able to offer its services to the data subject.
In addition, the applicable data protection legislation gives data subjects the right at any time to:
The data subject must submit the request for exercising their rights to the contact person specified above. Vepsäläinen may refuse to fulfil the data subject's request on grounds provided for in data protection legislation.
Data subjects have the right to lodge a complaint with the competent supervisory authority if they consider that Vepsäläinen has processed personal data in violation of data protection legislation.