Source: https://lv.pahis.fi/privacy/
Timestamp: 2020-04-01 19:57:02
Document Index: 518706786

Matched Legal Cases: ['Art. 1', 'Art. 1', 'Art. 1', 'Art. 15', 'Art. 7', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 77']

Privacy Policy | Pahis Mega Store
The registrar is COLOURBALL OY (Business ID 0809375-8)
The contact person for the register matters: Jussi Saxholm
COLORBALL OY Address: Lönnrotinkatu 5, 87100 Kajaani Phone: +358 40 7589 143 Email: pahis@pahis.fi
2 The name of the register
The register is called a customer register of COLOURBALL OY.
4 The legal basis for the processing of the personal data
a. the person registered has consented to the processing of his or her personal data for one or more specific purposes (GDPR 6 Art. 1.a); b. processing is necessary for the execution of a contract to which the person registered is a party or to put in the effect the pre-contractual measures at the request of a data subject (GDPR 6 Art. 1.b); c. the processing is necessary to achieve the interest of the legitimate registrar or a third party (6 GDPR Art. 1.f).
5 Data content of the register (the processed personal data batches)
In principle, the register contains the following personal data for all persons registered:
a. the basic information and contact details of the person: [first name, last name, address, telephone number, e-mail address];
b. information related to a company or other organization of the person as well as the position or the job title of a person in the company or organization in question;
c. direct marketing permits and prohibitions.
6 The regular sources of information
7 Retention time for personal data
8 Personal data recipients (recipient groups) and regular disclosure of information
9 Transfer of data outside the EU or EEA
10 Principles of registry protection
11 The rights of the person registered
a. the right to receive a confirmation from the registrar of the personal data relating to him or her being processed or not processed and, where these personal data is processed, the right of access to this personal data as well as the following information: (i) the purpose of the processing; (ii) the personal data groups concerned; (iii) the recipients or recipient groups to whom personal data have been or are to be disclosed; (iv) as far as possible, the planned retention period for personal data or, if this is not possible, the criteria for determining this period; (v) the right of the data subject to request the registrar to correct or remove personal data relating to himself or to limit or protest such processing; (vi) the right to appeal to the supervisory authority; (vii) where no personal data is collected from the data subject, all information available on the origin of the data (GDPR Art. 15). This basic information described (i) – (vii) will be provided to the person registered by this form;
b. the right to cancel the approval at any time, without it affecting the lawfulness of the processing executed with consent of the person registered before the cancellation (GDPR Art. 7);
c. the right to require the registrar to correct, without undue delay, inaccurate and incorrect personal data relating to the data subject, and the right to have incomplete personal data completed, i.a., by providing further explanation considering the purposes for which the data were processed (GDPR Art. 16)
d. the right to have the personal data relating to the data subject removed by the registrar without undue delay, provided that (i) personal data is no longer needed for the purposes for which they were collected or for which they were for other reasons processed; (ii) the person registered cancels the approval on which the processing is based and there is no other legitimate reason for processing it; (iii) the person registered opposes the processing on a basis of specific personal situation and there is no legitimate reason for processing or the person registered opposes the processing for direct marketing purposes; (iv) personal data has been processed unlawfully; or (v) the personal data must be removed to comply with Union law or a statutory obligation under the national legislation for the registrar (GDPR Art. 17);
e. the right to have the registrar to restrict processing if (i) the person registered denies the accuracy of the personal data, resulting in limited processing to a period during which the registrar can verify their accuracy the data; (ii) the processing is unlawful and the person registered opposes the removal of personal data and instead claims its use to be limited; (iii) the registrar no longer needs the personal data for purposes of processing it but the person registered needs it to prepare, present or defend a legal claim; or (iv) the person registered has objected to the processing of personal data on a basis of their specific personal situation, waiting for a pending verification of whether the legitimate grounds of the registrar exclude the grounds of the person registered (GDPR Art. 18);
f. the right to obtain personal data relating to the person registered, which the data subject has submitted to the registrar, in a structured, commonly used and machine-readable form, and the right to transfer this information to another registrar without the registrar to whom the information has been provided, opposing if the processing is based on the consent by the regulation and the processing takes place automatically. (GDPR Art. 20);
g. the right to file a complaint with the supervisory authority if the person registered considers that the processing of personal data relating to him violates the EU’s general data protection regulation (GDPR Art. 77).