The processing of personal data is based on the proper implementation of information to users of the pages, the provision and delivery of products and services, the organization of studies and campaigns and competitions, and the proper implementation of advertising and marketing through the web pages maintained by the controller. Personal data will be processed for the purpose of establishing, implementing and enforcing a customer relationship or other contractual relationship, for the proper identification of a person participating in a competition or other campaign, for information, analysis, statistical, maintenance and development activities required for membership, direct marketing, direct marketing and opinion and market research in the manner and to the extent permitted by law, unless the User has prohibited such collection and storage of his personal data, and for uses in accordance with the user’s unambiguous consent;
GDPR iZettle https://www.izettle.com/en/help/articles/2938013-gdpr
Registrar and contact person
Registrar: Powerun Adventures, Riku & Sanna Setälä
Address: Powerun Adventures, Luosuntie 77 95900 Kolari
Phone: +358 45 670 7314
Contact person: Sanna Setälä
Data Protection Officer in the event of a data breach:
+358 400 833 354
In the register, we process the information provided by customers and their uses.
Basis and purpose of processing personal data
The purpose of the register is the up-to-date management of customers’ personal data during the customer relationship, its maintenance and development, both marketing and direct marketing, and also the management of the documentation of expired memberships in the personal information system.
The processing of personal data is based on Powerun Adventures’ legal obligation to maintain a register of members and, in certain cases, the implementation of the agreement.
Personal data to be processed
The register processes our customers’ personal and contact information as well as other necessary information related to the customer. This information is:
First and last name of the data subject;
Registered office of the registered person;
Email address of the registrant;
Phone number of the registrant;
Electronic communications identification data; IP addresses.
Physical fitness of the data subject to provide the service
We receive this information by email, via the “Contact Us” form, by telephone, and face to face with the client / registrant.
Regular sources of information
Personal information is collected directly from the customer, as well as through a partner (so-called third party) who provides our services.
Protection and security of personal data
Digitally processed personal data is protected and stored in our company’s system, to which access is restricted only to persons who need such data in order to perform their duties. These people have personal usernames and passwords.
Personal information is protected from outside use and the use of member information is monitored. Personal information sent outside the company is encrypted. Used workstations and the storage media are encrypted and secured so as not to get access enables a third, a guest party.
Regular transfers and transfers of personal data
Our starting point is that we do not share information with a third party under any circumstances. If cooperation with a third party, ie a subcontractor, requires it in the future, we will update this report accordingly, and before sharing the information, we will confirm to the customer that this action has been approved.
Transfers of personal data outside the European Union or the European Economic Area
The company’s online services are located on Finnish servers. However, website user data is stored in Google Analytics visitor tracking in the Google cloud environment, which may also be located outside the EEA (Privacy Shield countries). Otherwise, personal data will not be transferred outside the EU or the EEA.
Retention period of personal data
Personal information will be kept in the register for as long as the registered is a customer of Powerun Adventures. After the termination of the customer relationship, personal data is stored for a maximum of 24 months after the termination of the customer relationship on the basis of the company’s legitimate interest, ie due to possible legal claims (KKO 2017: 15). Personal data may also be stored for a longer period if the applicable law or the company’s contractual obligations towards third parties require a longer retention period.
Powerun Adventures can implement automated customer profiling as part of its personal information processing activities. As a result of profiling, the registrant receives better targeted marketing messages, as well as the voluntary benefits that come with their customer base.
For example, if we offer a product to our customer, we can do so using the registered customer information.
Rights of the data subject
The data subject has the right at any time to object to the processing of his personal data for direct marketing purposes. The registrant may give the company channel-specific direct marketing consents and prohibitions (e.g., prohibit email marketing emails).
In addition, the data subject is, in principle, entitled at any time, in accordance with the applicable data protection law:
to be informed about the processing of their personal data;
gain access to their own data and verify personal data about themselves processed by the company;
require the correction and supplementation of inaccurate and incorrect personal data;
demand the deletion of their personal data;
withdraw his consent and object to the processing of his personal data in so far as the processing of personal data is based on the data subject’s consent;
opposes the processing of his or her personal data on the basis of his or her special personal situation insofar as the basis for the processing of personal data is the legitimate interest of OY;
to receive his personal data in machine-readable form and transfer such data to another controller, provided that the data subject has himself provided such personal data to the Association, the Association processes such personal data with the data subject’s consent and the processing is performed automatically; and
require restrictions on the processing of their personal data.
The data subject must submit a request for the exercise of the above right in accordance with the Contact section of this privacy statement. The company may ask the registrant to specify his request in writing and to verify the identity of the registrant before processing the request. Powerun Adventures may refuse to comply with the request on the grounds set forth in applicable law.
The right to appeal to the supervisory authority
Each Data Subject has the right to lodge a complaint with the relevant supervisory authority or the supervisory authority of the Member State of the European Union where the Data Subject is domiciled or employed if the Data Subject considers that his or her personal data have not been processed in accordance with applicable data protection law.
Requests concerning the exercise of the rights of the customer, ie the data subject, questions about this privacy statement and other contacts should be made by e-mail to firstname.lastname@example.org. The data subject may also contact him in person or in writing at the address below:
Powerun Adventures Oy
Powerun Adventures Oy reserves the right to change its privacy statement as the service develops, and these changes will be highlighted before the new service is published.
This privacy statement may be updated from time to time, for example as legislation changes. This Privacy Statement was last updated on 15/04/2020