Integritetspolicy

JUHLABOKSI A&A OY CUSTOMER REGISTER PRIVACY POLICY

1 CONTROLLER
Party box A&A Oy, business ID 3430103-9, Veistämötie 6 E, 90620 Oulu

2 CONTACT PERSON FOR MATTERS CONCERNING THE REGISTER
CEO Ann-Helen Piri, Veistämötie 6 E, 90620 Oulu, 044 5666116, info@ juhlaboksi.fi

3 NAME OF THE REGISTRY
For the party Oy's customer register

4 GROUNDS FOR AND PURPOSES OF PROCESSING PERSONAL DATA
The primary basis for processing personal data in the customer register is. Juhlaboksi A&A Oyand Juhlaboksi A&A Customer relationship between Juhu A&A Oy and its customer. The purpose of the processing of personal data is to manage the customer relationship. 

Juhlaboksi Oy deals with hpersonal data for the following purposes: 

  • Selected and ordered by the customer products and the implementation, development and, maintenance, delivery, billing and reporting 

  • Customer relationship management, sales and marketing, information, customer support and customer relationship management. 

  • Tompanies, services and products developing and maintaining. 

  • Pinformation and promotion of services and products. 

  • Lpartners for the implementation of the businesspartners service communication. 

This is in our legitimate interests to respond to you, provide you with efficient services and maintain our business relationship with you in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

5 WHAT PERSONAL DATA WE COLLECT  
The types of personal information we collect about you depend on how you interact with our Site and use our Services. When we use the term "personal data" we mean information that identifies you or relates to, describes or can be associated with you. The following sections describe the categories and exact types of personal information we collect.

The information you send to us directly through our Services may include: 

  • Contact, such as your name, address, phone number and email address.

  • Ordering information, such as your name, billing address, delivery address, payment confirmation, email address and phone number.

  • Account details, such as your username, password, security questions and other information used for account security purposes.

  • Customer support information, such as information you wish to include in your communications with us, for example, when you send a message through the Services.

Some features of the Services may require you to provide us directly with certain information about yourself. You may choose not to provide this information, but it may prevent you from using these features. 

We may also automatically collect certain information about your interactions with the Services ("Terms of Use"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you use our Site and your account, and may include information about your device, browser information, information about your network connection, your IP address and other information about your interaction with the Services.

Information we receive from third parties 
We may also receive information about you from third parties, such as vendors and service providers, who may collect information on our behalf, including. 

  • companies that support our Site and Services, such as. Shopify. 

  • Our payment processors that collect payment information (e.g. bank account, credit or debit card, etc.) debit-card details, billing address) in order to process your payment and fulfil your order and to provide you with the products or services you request in order to fulfil the contract we have with you. 

  • When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties with whom we work may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third party libraries and cookies. 

Any information we receive from third parties will be treated in accordance with this Privacy Policy. 

6 RETENTION PERIOD OF PERSONAL DATA 

Personal data registered in the customer register is stored for the period required by the Accounting Act (1336/1997). The minimum retention period is 6 years, Accounting Act 2:10.2 §.

7 REGULAR SOURCES OF INFORMATION
From the registrant himself.  

8PRINCIPLES OF REGISTER PROTECTION 
Juhlaboksi Oy's customer register data is stored in ShopifyInternational Limited:n e-commerce platform operated by Shopify LLC Limited. The information is protected by Shopify:n firewall-protected servers, and is kept secure by the following principles: 

  • Information security: All customer data is protected by industry-standard security measures.

  • Access control: Access to customer data is limited only to those employees who have a need to process personal data.

  • Data encryption: Personal data is encrypted both during transmission and during storage, which protects the data from unauthorised access.

  • Information security policies: Shopify has a strict security policy covering both physical and digital security.

  • Shopify:n to access the security statement here.


MThe service provider is Paytrail Plc (2122839-7) and Flatpay ApS (3327270-7).
Paytrail The Corporation has a payment institution's licence and their on their privacy policy Accessed at here and Flatpay ApS here.

Noudateamme EU General Data Protection Regulation (GDPR). 

9 HOW WE DISCLOSE CONTACT INFORMATION 
In certain circumstances, we may disclose your personal information to third parties for the performance of a contract, for legal purposes and for other reasons consistent with this Privacy Policy. Such circumstances may include, but are not limited to, the following and may involve: 

  • Vendors or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and delivery). 

  • Business and marketing partners, who provide services and advertise. Our business and marketing partners use your information in accordance with their own privacy policies. 

  • When you direct or request us to disclose certain information to third parties or otherwise consent to its disclosure, such as to provide products to you or through the use of social media. widgets or login integrations with your consent. 

  • For our partners and others our company in accordance with our legitimate internal interests in support of our business. 

  • In connection with business transactions, such as a merger or bankruptcy, to comply with our legal obligations (including responding to legal subpoenas, warrants and similar requests), to enforce applicable Terms of Use, and to protect or defend the Services, our rights, and the rights of our users or others. 

We do not use or disclose sensitive personal data without your consent or to infer your characteristics. 

With your consent, we share personal information for advertising and marketing purposes as described below. 

Third party websites and links 

Our website may contain links to websites operated by third parties or other online platforms. If you follow links to sites that are not operated by our partners or are not under our control, you should check the relevant privacy and security policies and other terms and conditions. We do not guarantee the privacy or security of such sites or the accuracy, completeness or reliability of the information on such sites and are not responsible for it. Information that you disclose through public or semi-public channels, including information you share on third party social media platforms, may also be visible to other users of the Services and/or users of those third party platforms without restriction as to its use by us or any third party. Our inclusion of such links does not in itself imply our endorsement of the content on such platforms or their owners or operators, except as disclosed on the Services. 

10 THE DATA SUBJECT'S RIGHT OF ACCESS 

The data subject has the right to check what data relating to him or her has been stored. Celebrating A&A Ltd's customer register. The request for inspection should be made in accordance with point 12 of this Privacy Policy. in accordance with Article 12 of this Privacy Policy.

11 THE DATA SUBJECT'S RIGHT TO OBTAIN RECTIFICATION, ERASURE OR RESTRICTION OF PROCESSING 

The data subject has the right to require the controller to correct inaccurate or erroneous data concerning him or her. The data subject also has the right to obtain the erasure of data which are no longer necessary or the processing of which was based on consent of the data subject. This procedure does not apply to all personal data relating to customers stored on the basis of a contract or legitimate interest. In addition to the rights mentioned above, the data subject has the right to request the restriction of processing in accordance with the Data Protection Regulation.  

A request to exercise the rights of the data subject should be made in accordance with point 12 of this Privacy Policy. in accordance with.

12 CONTACT 

The data subject should contact the contact person mentioned in point 2 in all situations relating to the processing of personal data and the exercise of his or her rights. Such contact should preferably be made electronically. The controller may, where necessary, request in writing further information or clarification in situations relating to the rights of the data subject. If necessary, the identity of the data subject may be verified before any other action is taken. 

13 EVIDENCE 

Like many websites, we use cookies on our Site. For more information about the Cookies we use in relation to the operation of our store Shopify can be found at: https://www.shopify.com/legal/cookies. We use cookies to make our Site and Services more efficient and better (including remembering your activities and preferences), to perform analytics and to better understand user interactions (to manage, improve and optimise the Services in accordance with our legitimate interests). We may also allow third parties and service providers to use Cookies on our Site to better tailor the services, products and advertisements on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can set your browser to remove or reject Cookies. Remember that disabling or blocking Cookies may negatively affect your user experience and may cause some Services, such as certain features and common functions, to not function properly or to become unavailable. In addition, blocking Cookies may not completely prevent how we share information with third parties, such as advertising partners. 

 

 

 

 

JUHLABOKSI A&A OY MARKETING REGISTER PRIVACY POLICY 

1 CONTROLLER 

Juhlaboksi A&A Oy, business ID 3430103-9, Veistämötie 6 E, 90620 Oulu 

2 CONTACT PERSON FOR MATTERS CONCERNING THE REGISTER 

CEO Ann-Helen Piri, Veistämötie 6 E, 90620 Oulu, 044 5666116, info@juhlaboksi.fi

3 NAME OF THE REGISTRY 

Juhlaboksi Oy's marketing register. 

4 PERSONAL DATA BASIS AND PURPOSE OF PROCESSING 

The processing of personal data in the marketing register is based on a legitimate interest in the customer relationship. By subscribing to the newsletter, the data subject indicates his/her interest in Juhlaboksi A&A Oy's activities and, by his/her voluntary choice, constitutes the basis for registration. By making this choice, the data subject can assume that by subscribing to the controller's newsletter, his or her personal data will be processed in connection with customer communications. 

VWe use your personal information for marketing and promotional purposes, such as sending marketing, advertising and promotional communications by email, text message or post, and displaying targeted ads for products or services on Facebook and Instagram. This may include using your personal information to better tailor the Services and the advertising that appears on our Site and other websites. If you are located in the European Economic Area, the legal basis for these processing activities is our legitimate interest in selling our products in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

5 CONTENT OF THE REGISTER 

The data subject may be stored at the following information: 
Name, date of birth, address, telephone number, e-mail address. 
The registrant can be registered at the same time Party box A&A Oy's customer register and marketing register. Data can also be transferred internally from the marketing register to the customer register when a customer relationship is established. We also use the information for remarketing purposes, i.e. to target ads to users who have already visited our site. This information may be shared with Meta (Facebook and Instagram) for the purpose of ad targeting.
No specific personal data is stored in the marketing register. 

6 RETENTION PERIOD OF PERSONAL DATA 

Personal data registered in the marketing register will be kept for as long as, as long as the data subject is a subscriber to the newsletter. 

7 REGULAR SOURCES OF INFORMATION 

The personal data to be registered are obtained from the data subject. 

8 REGULAR DISCLOSURES AND TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION OR THE EUROPEAN ECONOMIC AREA 

No data will be disclosed or transferred to third parties third parties. 

9 DESCRIPTION OF THE PRINCIPLES OF REGISTER PROTECTION 

All user information collected for the programmes is kept confidential and any electronic data transfers are carried out using an encrypted protocol. Manually processed documents containing data subjects' information will be stored in a manner that prevents unauthorised access and will be destroyed by shredding. 
 
10 DATA SUBJECT'S RIGHT OF ACCESS 

The data subject has the right to check what data relating to him or her has been stored. Celebrating A&A Ltd's marketing register. The request for inspection should be made in accordance with point 13 of this Privacy Policy. 

11 THE DATA SUBJECT'S RIGHT TO OBTAIN RECTIFICATION, ERASURE OR RESTRICTION OF PROCESSING 

The data subject has the right to require the controller to correct inaccurate or erroneous data concerning him or her. The data subject also has the right to request the erasure of data that are no longer necessary. 

A request to exercise the rights of the data subject must be made in accordance with point 13 of this Privacy Policy. 

12 RIGHT OF WITHDRAWAL AND OPPOSITION 

The data subject has the right to unsubscribe from the newsletter related to the marketing register, in which case all his/her personal data will be deleted from the register. 

The data subject also has the right to object to the processing of personal data based on legitimate interest, in which case the controller may no longer process the data subject's personal data. The procedure does not apply if the controller can demonstrate an overriding legitimate ground for processing the personal data. In the absence of such a reason, the objection procedure will lead to the complete erasure of the data subject's data from the marketing register. 

A request to exercise the rights of the data subject must be made in accordance with point 13 of this Privacy Policy. 

13 CONTACTS  

The data subject should contact the contact person mentioned in point 2 in all situations relating to the processing of personal data and the exercise of his or her rights. Such contact should preferably be made electronically. The controller may, where necessary, request in writing further information or clarification in situations relating to the rights of the data subject.