PRIVACY STATEMENT ON THE PERSONNEL REGISTER
1. Controller
Duell Bike-Center Oy, (2464132-0)
Kauppatie 19, 65610 Mustasaari
tel. +358 (0) 20 118 000, info@duell.eu
2. Contact person for register matters
Sami Takaneva
Kauppatie 19, 65610 Mustasaari
tel. +358 20 118 0058, sami.takaneva@duell.eu
3. Name of the register
Duell Bike-Center Oy:n sähköposti-, asiakas-, tilaaja-, prospekti- ja markkinointirekisteri.
4. Purpose of the processing of personal data
1. Customers:
1.1. Customer relationship maintenance, management and development.
1.2. Provision and production of services.
1.3. Customer data, customer history and contact history management.
1.4. Arranging support and advisory services for the customer, as well as managing service measures, assignments, invoicing and quality assurance.
1.5. Controller also collects data to identify a customer and prevent abuse.
1.6. Transmission of electronic data content to their subscribers.
1.7. Records of customer calls are used to verify service transactions, to ensure the legal security of customers and Duell Bike-Center Oy, for training purposes, to improve the quality of service, and to prevent abuse and for security reasons.
2. Website users and potential customers:
2.1. Marketing services to potential customer companies and site visitors.
2.2. Targeting marketing communications, developing product and service offerings and business developing and reporting.
2.3. Research and statistical analyses. Customer analysis, forecasting, grouping and development.
2.4. Processing, analysing and compiling statistics on customer feedback and the results of customer analysis and surveys.
5. Register content
- Name
- Address information
- Telephone number
- E-mail address
- IP address
- Direct marketing consents and refusals
- Identifiers and numbers related to the customer’s payment and credit cards:
o Bank connection
o Bank account number
- Information about the employer, company, organization, limited company, corporation, association, etc.:
o Name
o Address information
o Business ID
- Position in the company, role, task, title, job position, area of responsibility, etc.
- Information related to customer service or new customer acquisition:
o Customer feedback
o Information of customer service transaction
o Records of customer calls
o Start time of customer relationship
o End time of customer relationship
o Customer status
o Customer level
o Bidding history
o Information of previous contacts
o Information about customer orders, their delivery and invoicing
o Information from surveys, studies and related discussions
o Website behaviour
- Mouse, cursor or other pointing device movements on Duell Bike-Center Oy's website.
- Campaign data and related tracking data.
- Tags used in targeted marketing.
- Newsletter opening and reading information.
Generally personal data will be processed for as long as the agreement is valid. The information will be entered in the register as received from data subjects and will be updated if the data subject notifies the controller. Form data submitted from the Duell Bike-Center websites will be completely deleted after five (5) years from the date of submission. We remove unnecessary personal information from our customer and marketing register every five (5) years. You can unsubscribe yourself from the email marketing list via the delete link in each marketing email.
6. Regular sources of data
The sources of information are the start of a customer, subscription or customer prospectus relationship in personal meeting, by e-mail or in an electronic form on the controller’s website. After the start of a customer, subscription or customer prospectus relationship, information is collected by automatic electronic identification in the controller’s emails. The data of potential customers is obtained with his or her consent in connection with a website visit or other personal or digital interaction.
The information collected from Duell Bike-Center Oy’s own operations is supplemented, if necessary, by available company data sources (like YTJ and TIEKE) or without these by public information from target company websites.
7. Regular disclosure of Information
Personal data may be disclosed to a targeted marketing campaign of a telemarketing company commissioned by the controller. Ownership of the data will not be transferred from the controller to third parties and third parties will not have the right to use the assignment more widely. Information is provided to the authorities in cases required by law, such as in the investigation and prevention of abuses. Customer data may also be transferred or disclosed to temporary registers, such as event, lottery, contact or research registers, in order to execute an order made by the customer or with the customer’s consent. The data in these above-mentioned temporary registers are processed only for the purposes of each register, in a separately informed manner. Duell Bike-Center disclosures personal data to the collection agency when it is necessary to control payments.
Rekisteröityjen henkilötietojen Duell Bike-Center Oy:n lukuun käsittelee:
- ActiveCampaign Inc.
- Adobe Systems Incorporated
- Facebook Inc.
- Google LLC.
- LinkedIn Corporation
- Microsoft Corporation
- Sendinblue SAS
- DL Software Oy AB
8. Regular transfer of information outside the EU or the EEA
Mainly Duell Bike-Center Oy will not transfer or disclose customer personal data outside the European Union or the European Economic Area. However, if necessary, the data may be transferred or disclosed outside the European Union or the European Economic Area in the manner permitted by the Personal Data Act, provided that:
- the data is transferred to the country or an organization located in a country where the European Commission has determined that the level of data protection is adequate, or
- contractual arrangements can ensure an adequate level of data protection, or
- if the data subject has given her or his consent.
When it’s possible, Duell Bike-Center Oy has chosen a secure data center located in Europe as the storage location for personal data. Some of the above providers and/or registry managers may back up data outside the EU/EEA in the United States. The data is backed up for making sure that the data is in safe, if main servers go down. Duell Bike-Center Oy has ensured that service providers and/or registry managers have joined the EU-US The Privacy Shield program (https://www.privacyshield.gov/list), which aims to ensure the secure processing of European data in the United States.
9. Register Protection Principles
The manual material is stored in locked containers located in Duell Bike-Center Oy’s locked premises. Uncontrolled access to the space is prevented from outsiders. Independent access to the premises is possible only for those who have written agreements with Duell Bike-Center Oy. Access to the premises by outsiders is always controlled.
The data stored and processed by the information system are available to limited persons. The use require login in the system. The data network and hardware, where the register is, are protected by a firewall and other necessary technical measures. The access codes required for logging in to the information system will only be given to the members of Duell Bike-Center Oy. Donations are supervised by a contact person. All users of the information in the register are bound by professional secrecy.
10. Inspection right and correction of data
Everyone data subject has an equal right to review, handle, remove, correct and modify his or her personal data in the register. A request for information on the measures listed above may be addressed, mandated and requested by the data subject using all more general forms of written contact. The request for inspection or correction must be written and sent for signature to the above-mentioned contact person. Processing one inspection or correction request per year is free of charge for the data subject. The request for inspection and correction of data shall identify the error to be corrected and indicate the corrected data. The data can be only be processed on behalf of the data subject and separately by a written member of Duell Bike-Center Oy.
11. Right to have the data rectified
Everyone data subject has an equal right to review, handle, remove, correct and modify his or her personal data in the register. A request for information on the measures listed above may be addressed, mandated and requested by the data subject using all more general forms of written contact. The request for inspection or correction must be written and sent for signature to the above-mentioned contact person. Processing one inspection or correction request per year is free of charge for the data subject. The request for inspection and correction of data shall identify the error to be corrected and indicate the corrected data. The data can be only be processed on behalf of the data subject and separately by a written member of Duell Bike-Center Oy.
12. Other rights related to the processing of personal data
Right to object:
- The data subject has right to object processing of personal data if he or she experience that Duell Bike-Center processing personal data illegal or that Duell Bike-Center Oy have no right to process some personal data.
Ban on direct marketing
- Duell Bike-Center Oy buy online advertising, inter alia, from Facebook and Google. These companies will never receive the personal of the data subject via Duell Bike-Center Oy, and such advertising is not about direct marketing it based on cookies.
- Duell Bike-Center never sells or discloses the personal data for other parties for marketing purposes.
- The data subject has the right to prohibit the use of his/her data for electronic direct marketing by using the order cancellation link in the newsletter.
Right of removal
- If the data subject feels that the processing of some personal data is not necessary for the tasks of Duell Bike-Center Oy, the data subject has the right to request Duell Bike-Center Oy to delete such data. Duell Bike-Center Oy processes the request, after that the data is either deleted or the data subject is informed of the justified reason why the data cannot be deleted. If the data subject disagree with the solution, he/she has the right to make a complaint for the Data Protection Officer (http://www.tietosuoja.fi/fi/index/yhteystiedot.html). The data subject has also the right to demand that Duell Bike-Center Oy limit the processing of disputed data until the matter can be resolved.
Right of complaint
- The data subject has the right to make a complaint for the Data Protection Officer, if the data subject feels that Duell Bike-Center Oy violates the applicable data protection law when processing his or her personal data (http://www.tietosuoja.fi/fi/index/yhteystiedot.html).