Purpose of this notice
This Privacy Notice provides mandatory information as required under Articles 13 and 14 of the European General Data Protection Regulation (GDPR) regarding the transparency of personal data processing.

Data Controller
Olini Oy
FI21353200
Hyvelänraitti 6
09640 Saukkola
+358504109952

Contact Person
Petrus Liukkonen
Olini Oy
Hyvelänraitti 6
09640 Saukkola

Purpose of and legal basis for processing personal data
Personal data is used for maintaining customer accounts and handling orders as well as for deliveries, analytics, producing and targeting marketing contents, customer service and preventing misuse.

The right of Olini Ltd to process customers’ personal data is based either on a legitimate interest arising from a potential customer relationship or on an unambiguous consent given by the data subject for storage of their data.

Data is not used for automated decision-making or profiling.

Contents of the register
Data stored in the register:

– Name
– Telephone number
– Email address
– Postal address
– Internet protocol address
– Information on products ordered
– Invoicing details
– Consents for and restrictions of direct marketing

Regular data sources
The data stored in the register comes from the data subjects themselves in conjunction with their use of the online store or on a separate form with opt-in consent given by the customer for storage of their data and for using their data for marketing purposes.

Regular disclosure of data and data transfer outside the EU or EEA
Data is not regularly transferred to third parties. Data is not transferred outside the EU or EEA.

Fundamentals for register protection
The IT system and files of the controller are covered by technological protection measures. Access to the register requires a personal user ID and a password that are only given to members of staff of the controller or to a party acting on behalf of the controller with a task and position related to such right of access.

The right to access and request rectification of data
Every data subject of the register has the right to access their data stored in the register and to request rectification of any possibly inaccurate data or completion of any possibly incomplete data. In cases where a person wants access to the data stored about them or wants to request rectification, a request should be sent in writing to the following address:

Olini Ltd
Hyvelänraitti 6
FI-09430 Saukkola, FINLAND

The controller will respond to the customer within the time limit specified in the General Data Protection Regulation of the EU (in general within one month).

Other rights related to processing personal data
A person whose data is stored in the register also has the right to request the controller to erase their personal data (the right to be forgotten). A person can also object to use of their data for direct marketing purposes, for example.

If a person wants their data to be erased or wants to restrict use of their data, the request should be made as instructed above.

The controller will respond to the customer within the time limit specified in the General Data Protection Regulation of the EU (in general within one month).