Legal notice
Privacy Statement
EKOEKOSHOP TRADING REGISTER AND PRIVACY STATEMENT
Prepared on December 1, 2024
1 Data Controller
EkoEkoShop Trading Oy Ltd
Business ID: 3442954-2
Address: Tanhuankatu 2, 37100 Nokia, Finland
Phone: +358 (0)50 5574338
Email: info@ekoshoptrading.com
2 Contact Person for Register-Related Matters
Customer Service, email: asiakaspalvelu(at)ekoeko.fi
3 Name of the Register
Customer Register of EkoEkoShop Trading Oy
4 Legal Basis and Purpose of Personal Data Processing
The legal bases for processing personal data are as follows, in accordance with the EU General Data Protection Regulation (hereinafter also “GDPR”):
a. The data subject has given consent to the processing of personal data for one or more specific purposes (GDPR Article 6(1)(a));
b. Processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract (GDPR Article 6(1)(b));
c. Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party (GDPR Article 6(1)(f)).
The legitimate interest mentioned above is based on a relevant and appropriate relationship between the data subject and the data controller, which results from the data subject being a customer of the data controller. The processing is carried out for purposes that the data subject could reasonably expect at the time of data collection and within the context of this appropriate relationship.
Personal data is processed for purposes related to the management, administration, and development of the customer relationship, the provision and delivery of services, the development of services, and billing. Personal data is also processed for purposes necessary for resolving complaints and other claims. Additionally, personal data is processed for customer communications, such as information and news, as well as for marketing purposes within the limits set by law. Data may be disclosed to partners only for purposes that support the operation of the register.
Data is not used for automated decision-making or profiling. EkoEkoShop Trading Oy Ltd does not collect unnecessary information about its customers and recognizes its responsibility to protect the privacy of its customers and stakeholders.
5 Register Content and Categories of Personal Data Processed
The following information is stored in the register:
- Contact person’s name
- Possible company/organization
- Contact information (address, postal address, billing address)
- Email address and phone number
Information recorded due to the customer relationship includes:
- Details of orders and their changes
- Information collected for customer relationship development
- Possible details of services and products of interest to the customer
- Other information provided by the customer
Data stored in the register is retained only for as long as necessary and to the extent required for the original or compatible purposes for which the personal data was collected. Data about a registered person is deleted 10 years after their customer relationship with the data controller has ended, and any obligations or measures related to the customer relationship have been fulfilled.
The necessity of data retention is regularly reviewed in accordance with the data controller’s internal rules. EkoEkoShop Trading Oy Ltd will take all reasonable measures to ensure that inaccurate, incorrect, or outdated personal data is rectified or deleted without delay.
Customers of EkoEkoShop Trading Oy can update their name and address details in their online store profile. Additionally, customers can contact the person mentioned in Section 2 to update their data.
6 Regular Sources of Data
Data stored in the register is obtained from the data subject at the time of contract formation. Data is updated during the customer relationship based on notifications made by the data subject to EkoEkoShop Trading Oy, through the use of EkoEkoShop Trading Oy’s services, or based on the consent of the data subject. Personal data may also be collected and updated from publicly available sources permitted by applicable law that relate to the customer relationship between the data controller and the data subject.
Personal data may also be collected and updated from other registers of EkoEkoShop Trading Oy and from partner registers if necessary for fulfilling the agreement between EkoEkoShop Trading Oy and the data subject. Information stored in the register (contact person’s name, company, phone number, email address, and delivery address) is also saved in EkoEkoShop Trading Oy’s customer register to facilitate the technical implementation of the agreement.
Additionally, personal data may be collected via social media channels with the consent of the data subject if required for the execution of marketing activities, such as sending product prizes following a competition.
7 Regular Data Disclosures and Transfers Outside the EU or EEA
Data may be disclosed from the register to authorities in legally mandated cases. Data may also be disclosed to partners of EkoEkoShop Trading Oy, within the limits of current legislation, for purposes that support the operation of the register.
Due to technical implementation, data may be transferred to or directly collected by contract partners of the data controller (e.g., delivery, payment, fraud prevention service providers, credit companies, and providers of analysis environments, marketing services, and surveys).
8 Principles of Register Protection
The processing of the register is conducted with care, and data processed through information systems is appropriately secured. When stored on internet servers, the physical and digital security of the hardware is appropriately ensured. Access rights to data systems are restricted to those employees whose roles necessitate such access. Employees are bound by confidentiality agreements.
9 Use of Cookies
Cookies may be used on websites and similar digital platforms to monitor traffic and improve functionality. Cookies do not enable personal identification.
10 Rights of the Data Subject
The data subject has rights under GDPR to:
- Access their data
- Request rectification or deletion of inaccurate data
- Object to processing
- Withdraw consent at any time
Requests should be addressed to the contact person mentioned in Section 2.