Data protection and register description
Data protection and register description in accordance with the EU General Data Protection Regulation (GDPR).
The data controller
Yarmilan kennel / Desainaaja
Storströminkuja 29, Luoto, Finland
VAT No: FI23747895
Contact person for matters concerning the register
Pia Forsman
pia.forsman@yarmilan.com
Tel. +358 50 527 4242
Name of the registry
Yarmilan online store customer register. Our website address is: https://www.yarmilan.com
Purpose of processing personal data
Personal data is processed to maintain and manage customer relationships with our e-commerce customers, such as contacting them as required by the customer relationship and direct marketing. Customers have the right to object to the use of their personal data for direct marketing.
Data content of the register
The following information is stored in the register: the customer’s first and last name, customer number, address information, telephone number, email address, information on marketing authorisations and prohibitions, information on customer purchases, deliveries and discounts, as well as any user IDs and passwords.
Regular sources of information
From the customer himself/herself for online orders, through return and other forms, by telephone, email or similar means.
Regular disclosures of data
The information is used only for the management of customer relations and is not regularly disclosed to third parties, except for the following:
- The data necessary for the delivery of orders placed in the online shop are transmitted to our partner Printful. Link to their privacy policy: https://www.printful.com/policies/privacy
- Payment transactions for orders placed in the online shop are handled by Visma Pay. As a payment institution, Visma Pay is the controller of all data necessary to provide the payment service. For other data, Visma Pay processes the data on behalf of the online merchant. Link to their privacy policy: https://static.vismapay.com/terms/maksajarekisterin-tietosuojaseloste-visma-payments-oy-rekisterinpitajana.pdf
Data may also be disclosed in connection with activities related to the technical administration of the online store (e.g. server or e-commerce platform administration and backup of yarmilan.com and Google Drive), and to the authorities if they so require and if permitted by law.
When users leave comments on the site, we collect the information on the comment form, as well as the user’s IP address and browser version information to help identify spam. The anonymised hash of the email address can be sent to the Gravatar service to know if the commenter is a user of the service. The Gravatar Privacy Policy can be found at https://automattic.com/privacy/. The information collected will be kept only for the time necessary to provide customer service and will not be used for marketing purposes.
Transfer of data outside the EU or the European Economic Area
The data will not be transferred outside the EU or the European Economic Area.
Data storage and destruction
The information in the customer register is kept for the duration of the customer relationship. However, order, billing and payment data are kept in the same way as other accounting records. Data that becomes obsolete is securely destroyed.
Use of cookies
We may use cookies to track visitor traffic and improve the quality of the service, which are stored on your computer. The cookies have a limited lifetime and do not cause any damage to the user’s computer.
If you leave a comment on the site, you can choose to have your name, email address and url stored in the cookie. This feature increases user convenience by eliminating the need to fill in the form each time you add a comment. The cookie data will be deleted from your browser after one year.
If you have an account and log in to the site, we will set a temporary cookie to determine whether or not your browser supports cookies. This cookie does not contain any personal data and is deleted when the browser window is closed.
When you sign in, we set a number of cookies that record your login and display preferences. Login cookies are deleted after two days, display cookies are deleted after one year. If you select “Remember me” when you sign in, your login details will be kept for two weeks. If you log out, the cookies associated with your login will be deleted at the same time.
If you publish an article or edit an existing one, we store a cookie in your browser containing the ID of the article you are editing. The cookie expires in one day.
Articles on this site may contain embedded content (e.g. videos, images, articles, etc.). Accessing embedded content from other sites is comparable to visiting a third-party site yourself. These sites may collect information about you, use cookies, embed third-party tracking cookies and monitor your interaction with embedded content, including tracking your interaction if and when you are logged in as a user to the site.
Principles for the protection of the register
The customer register is treated confidentially. The register is adequately protected from external firewalls and other technical protection measures. The register is kept only in electronic form and occasional paper copies are immediately and properly destroyed.
The register is used only by persons whose functions include its use and who are bound by confidentiality. Each user of the register has a personal username and password.
Right of access
Under the Personal Data Act, everyone has the right to check what information about them has been stored in a personal register. The request for inspection must be sent in a document signed by hand or certified in an equivalent manner. Requests should be sent to the contact person mentioned above, who will also respond to any request for further information.
Updating data
The customer can update their name and address information in their e-commerce profile. In addition, the customer can contact our contact person mentioned above to update their information.
Other rights related to the processing of personal data
The customer has the right to object to the processing of his/her data for marketing purposes. The request to restrict the processing of data should be made by e-mail or letter to the contact person of the Registry.
Updated 12.4.2023
