Data protection declaration

The Data Protection Regulation requires the controller to provide clear information to data subjects. This privacy statement fulfils that obligation.

1. Data controller

Kemvit Oy, 0845555-2

Contact information:
Bastintie 303
68410 Alaveteli

Contact details for matters concerning the data register

Kemvit Oy
Bastintie 303
68410 Alaveteli, Finland
+358 400 257 926
info@kemvit.fi

Contact details of the Data protection officer, if applicable:

Data Protection Officer

Kemvit Oy / Juuso Viherlaakso
Bastintie 303
68410 Alaveteli, Finland
+358 400 257 926
info@kemvit.fi

2. Data subjects

The register contains the contact details of the persons who contacted us via the online contact form.

There is no separate register of customers, but the data of those who have purchased products are retained.

3. Purpose of use of personal data

Grounds for keeping the data register:

• Personal data are processed on the basis of the customer relationship of the data subject
• Personal data are processed on the basis of consent

Purpose of the processing of personal data and use of the register

Personal data are processed only for the following predefined purposes:

• To respond to those contacted via the contact form
• To manage customer relations.

4. Personal data to be recorded in the register

The register will in all cases contain the following data:

Contact details

• Name
• address
• email

In addition, the customer can add to the register at his/her discretion:

• Company name
• telephone number

5. Rights of the data subject

The data subject has the following rights, and any request to exercise them should be addressed to Kemvit Oy
Bastintie 303
68410 Alaveteli, Finland
+358 400 257 926
info@kemvit.fi

Right to access

The data subject may check the personal data we have stored.

Right to amend

The data subject may request the rectification of inaccurate or incomplete data concerning him or her.

Right to object

The data subject may object to the processing of personal data if he or she considers that the personal data have been processed unlawfully.

Direct marketing refusal

Data subjects have the right to object to the use of their data for direct marketing.

Right to withdraw

The data subject has the right to request the removal of data if the processing is no longer necessary. We will process the request for removal, after which we will either delete the data or provide a reasoned justification why the data cannot be deleted.

Please note that the controller may have a legal or other right not to delete the requested data. The controller is obliged to keep the accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting records cannot be deleted before the expiry of this period.

Withdrawal of consent

If the processing of personal data concerning a data subject is based solely on consent and not, for example, on purchase history or membership, the data subject may withdraw consent.

The data subject may appeal against the decision to the Data Protection Ombudsman

The data subject has the right to request that we restrict the processing of the disputed data until the matter is resolved.

Right to appeal

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she considers that we are in breach of the applicable data protection legislation when we process personal data.

Contact details of the Data Protection Ombudsman:  www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular sources of information

Regular sources of customer data:

• From the customer via the online contact form

7. Regular disclosures of data

As a rule, data will not be disclosed for marketing purposes outside Kemvit Oy.

8. Duration of processing

• As a general rule, personal data will be processed for as long as the customer relationship is in force.
• The data of those who have submitted their details via the contact form will be deleted once their messages have been replied to and their case has been closed.

9. Processors of personal data

Personal data are processed by the employees of Kemvit Oy, the controllers:

Juuso Viherlaakso

Tiina Nyman

Annika Brännkärr

Mattias Finell

10. Transfer of data outside the EU

Personal data will not be transferred outside the EU or the European Economic Area.

11. Automated decision-making and profiling

We do not use data for automated decision-making or profiling.