Privacy Statement

Personal Data Act (523/99) 10 § and 24 §

Data Controller

Arvo-Helat Oy (Y-tunnus 0178320-3)
Sähkötie 14
66300 Jurva

For more information about privacy and the processing of personal data, you can contact us at:

Register Name

Customer Register of Arvo-Helat

Purpose of Processing Personal Data

The register is used solely for managing and processing the customer relationship and orders between Arvo-Helat Oy and the customer.

Content of the Register

We store the following information:

Information provided by the user or personally identifiable information

• Name
• Company name
• Address information
• Postal code and city
• Email address
• Phone number

Information observed from the use of services and derived through analytics

• Order history
• Usage and browsing information on the online store

Uses of Register Information

• Maintenance of customer relationships
• Order delivery, processing, and archiving
• Development of the operations and services of Arvo-Helat Oy
• Improvement of customer experience
• Statistical purposes
• Creation of more engaging targeted content and marketing
• Prevention of misuse

Regular Data Sources

Customer's own declaration, customer's own websites, online store order system, and potential legally compliant customer data purchases from external parties such as credit service providers.

Regular Disclosures of Data and Transfers Outside the EU or European Economic Area

Data is not disclosed or transferred outside EU/EEA countries.

Principles of Register Protection

All personal data is protected against unauthorized access and accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing.

Manual material is stored in a locked secured space. Computer-based material is stored in a locked area with firewall, username, and password protection.

Information is transmitted internally and externally to the following groups:

• Employees of Arvo-Helat Oy who need the information for their work
• Authorities as required by law
• Necessary partners and subcontractors for order processing and customer
relationship management (e.g. parties related to order payment and delivery).

Access to and use of the information in the register is permitted only for employees of the data controller who are pre-defined to handle the data.

Storage Period of Data

We retain personal information for the necessary time to fulfill the purposes described in this statement. Additionally, some data may be retained longer as required by law, such as for accounting purposes.

At the customer's request, personal data related to them can be removed or anonymized from the systems of Arvo-Helat Oy, and the data will no longer be used for the purposes listed in this statement.

Certain legal obligations mandate longer storage of certain data, including:

• The Accounting Act defines longer storage times for data, regardless of whether the material contains personal data or not
• System log data is collected and stored as required by law to provide lawful and secure online store services to our customers
• Taking sufficient backups of store databases and systems to ensure data security, correct errors, and verify security and continuity

Sharing Data with Third Parties

We share some necessary information with third parties, for instance, to ensure delivery and payment transactions. In such cases, we use trusted contractual partners. When required, we also provide information to authorities upon request.

Marketing

The Arvo-Helat Oy customer register is used for marketing to customers in compliance with legislation. We send newsletters to consumer customers only if the customer has subscribed to the newsletter. The customer can opt out of newsletters by notifying us. Our newsletters contain an unsubscribe link.

Cookies and Visitor Data on the Online Store

We use cookies and similar technologies like local storage to operate our online store. Cookies are small text files between the browser and server of the terminal device. There are three types of cookies: necessary, statistical, and marketing cookies. Necessary cookies are essential for the functionality of the online store and are not shared with external parties. Optional statistical cookies (e.g. Google Analytics) are used to analyze visitor numbers, and marketing cookies (e.g. Facebook) are used for targeted marketing.

Data used for analysis is anonymized whenever possible. Otherwise, we treat data as personal to the extent it contains customer-specific information, such as IP addresses. Identifiers associated with customers in any way are also treated as personal data.

Rights of the Data Subject

Right to Inspect and Exercising the Right to Inspect

Data subjects have the right to inspect the information about themselves stored in the register and to receive copies of it. Requests for inspection must be made in writing and signed. The request for inspection should be addressed to the data controller.

Correction of Data and Exercising the Right to Correction

Data subjects have the right to demand the correction of incorrect information in the register. Requests for correction must be made in writing and sufficiently specified.

Right to Prohibit Processing

Data subjects have the right to prohibit the data controller from processing data concerning themselves for direct advertising, distance selling, and other direct marketing, as well as market and opinion research, and genealogy. The data processing prohibition should be made in writing to the data controller.

Requests for inspection, correction, and prohibition can be sent by mail to:

Arvo-Helat Oy / Information request
Sähkötie 14
66300 JURVA
FINLAND

Additionally, requests for inspection and data processing prohibition can be made in person at our premises.

Changes to the Privacy Statement

Due to service development and changes in legislation, we reserve the right to amend the privacy statement.