Fiskarsinkatu 11, 20750 Turku
2. Register contact person
Vuorikatu 8 b 9
3. The name of the registry
Aavagen CUSTOMER REGISTER
4. What is the legal basis and the purpose of the processing of personal data?
The processing of personal data is based on the provision of the service or other relevant connection. The purpose of processing personal data is:
- delivery and development of our products and services
- meeting our contractual and other promises and responsibilities
- managing our customer relationship
- electronic and direct marketing
We will process the information ourselves and utilize subcontractors working for us in the processing of personal data. We have outsourced IT management to an external service provider, that manages and has protected the server on which personal data is stored.
5. What information do we handle?
In connection with the customer register, we process the following personal information of a customer or other registered person such as a trainee:
- basic information such as name* and customer number;
- contact information such as e-mail address and address information*;
- company and company contact person information such as company contact and address information and contact person information;
- customer and contract information such as past and current contracts and orders, and other business information
any other information collected with the consent of the customer, such as information on horses owned by the customer, and information on these horses.
6. Where do we get information?
We get information primarily from the following sources: from the registered person, our partners, as well as horse racing websites (eg. hippos.fi or travsport.se).
In addition, personal data may be collected and updated for the purposes described in this Privacy Statement also from publicly available sources and from information received from authorities or other third parties on the basis of applicable law. Such updating of data is performed manually or by automatic means.
7. To whom will we disclose information and transfer information outside the EU or EEA?
We will disclose personal data for direct marketing purposes to our outsourced sales organization. Information may be disclosed to authorities if legislation so compells.
We will not disclose personal information outside the EU / EEA territory.
8. How do we protect the data and how long will we keep it?
The use of our system that contains personal data is only performed by our employees who have the right to handle customer information. Each user has their own username and password in the system. Information is collected in databases protected by firewalls, passwords and other technical means. Databases and backups are located in locked spaces and only certain pre-designated persons can access the data.
We will keep personal information as long as it is necessary for the purpose of using such personal information. In principle, data is stored for 48 months.
We estimate the need for data retention regularly in the light of current legislation. In addition, we will take reasonable measures to ensure that no incompatible, obsolete or incorrect personal information is kept of the subjects. We will rectify or discard such information without delay.
9. What are your rights as a registree?
As a registree, you have the right to inspect the information we have stored in the personal data file and to claim for correction or deletion of incorrect information. You also have the right to cancel your consent. Submit relevant requests personally or in writing to the contact person mentioned in section 2.
As a registered user you have the right to object or request the restriction of the processing of your data and to file a complaint against the processing of personal data to the supervisory authority, as of 25 May 2018.
For specific personal reasons, you also have the right to object to profiling and other processing actions that are relevant to you when the processing of data is based on our relationship with you. In such a case, present a claim for objection to the contact person mentioned in point 2. In connection with your claim, you will need to identify the specific situation on which you object to handling. We can refuse to apply for objection only on the basis of the law.
As a registered person you also have the right at any time and without charge to object to the processing, including profiling as far as it relates to direct marketing.