Privacy policy

DATA PROTECTION STATEMENT IN ACCORDANCE WITH THE EU DATA PROTECTION REGULATION
Compiled on 5.6.2021

  1. Data controller
    JVT Production Oy
    c/o Rakkolainen
    Hakatie 3
    26510 RAUMA
    Business ID: 3195134-3

  2. Person responsible for the register and contact person in matters related to the register CEO Joonas Rakkolainen
    Email: joonas.rakkolainen@jvtwellness.fi
    Website: www.jvtwellness.fi

  3. Registered individuals The data controller maintains customer, marketing, and stakeholder registers. A customer refers to the contact persons of companies and entities with whom the data controller has a customer relationship. A potential customer (marketing register, which can also include existing customers and stakeholders) refers to the contact persons of entities with whom the data controller seeks to establish a customer relationship. Stakeholders refer to contact persons of entities with whom the data controller has a collaborative relationship or other relevant connection.

  4. Basis and purpose for maintaining the register The customer register is maintained for reasons such as orders, credit, invoicing, collection, communications, transactions, customer surveys, service development, reporting, and other customer relationship maintenance actions. The marketing register is for informing about the company's services and news and acquiring new customers. The purpose of the stakeholder register is for making orders and communication. The legal basis for processing personal data is the need to implement a contract as well as the realization of legitimate business interests, such as direct marketing and sales, and customer service to non-customers. The processing of personal data can be based on one or more given consents.

Stored personal data in the register can be used for communications, marketing, targeting services and marketing, necessary profiling, managing communications, and other similar purposes, as permitted by legislation.

  1. Content of the register and groups of personal data The data groups that can be processed are the contact persons of entities who are or have been customers, subcontractors, or other partners of the data controller, individuals who have contacted the data controller, or have given marketing consent. The register may process information, among other data groups, necessary for the purpose of the register such as: a) Basic information about the entity that is or has been a customer, subcontractor, or another partner of the data controller, such as company name/organization and contact details, as well as the name and contact details of the contact person b) Purchase and transaction information of the registered individual on the data controller's website, behavior data on websites, and other similar grouping data, contacts made through a contact form, contacts to JVT Production Oy employees and services, and information related to newsletter subscriptions c) Marketing register (newsletter distribution) contains the name and email address of the person who has given marketing consent

  2. Regular data sources Data sources used include information provided by customers and partners, invoicing databases, CRM and customer service system data, website and newsletter usage and transaction data, companies and authorities providing personal data services.

  3. Data sources Data is collected from the registered individual themselves when ordering the service via the website's contact form, by email, phone, from contracts, from the client company's website, and from other situations where the client provides their personal data. Additionally, personal data is collected from authorities, public registers, directories, media, or other data sources, such as search engines or through social media services.

  4. Regular data disclosures Data can be disclosed, based on the data controller's discretion, within the limits allowed and required by current legislation, to our partners unless the registered individual has prohibited the disclosure. Data transfer to partners is only for purposes supporting the register's concept, e.g., lead generation and thus increasing trade among our customers. Participant lists and contact details can be shared at the data controller's events if participants have allowed it. Registered data is transferred to a defined data processor based on a service agreement. Such operations can be, e.g., communication and campaigns (newsletters), invoicing, collection of unpaid receivables, or direct marketing. The data controller ensures that the data processor protects personal data in accordance with the data protection regulation. The data controller uses external service providers in its operations. The data controller ensures that the data processor protects personal data in accordance with the data protection regulation.

  5. Principles of register protection The data in the registers is stored in the data controller's IT systems. The systems are protected, and access requires a username and password. Only pre-defined data controller employees can access the register's data. Identified employees of the data controller and those acting on its behalf and account (e.g., accounting firm) have access to some of the data in the registers.

  6. Right to check and modify register data A person in the register has the right to check what information about them is in the register. The request must be made in writing to the data controller. The data controller may ask the requester to prove their identity if necessary. The data controller will respond to the customer within the time stipulated in the EU data protection regulation (usually within a month). A person in the register has:

  • The right to check the stored personal data
  • The right to request the correction of this data
  • The right to request data deletion
  • The right to request restriction of processing, e.g., a direct marketing ban
  • The right to lodge a complaint about the processing of personal data with the Data Protection Ombudsman
    Register data can also be deleted by JVT Production Oy without a request. This statement has been published on the data controller's website www.jvtwellness.fi.