1. CONTACT INFORMATION
Lovi Oy (company register ID: 2049060-9)
Address: Hallitie 3, 90940 Jääli, Finland
Phone: +358 40 745 5002
Contact person: Mikko Paso
2. WHAT INFORMATION WE COLLECT
• First and last name
• Contact details, such as postal address, email address, telephone number
• Order, subscription and possible billing information
3. PURPOSES OF PROCESSING AND LEGAL BASIS
We ask you to provide your information when you register yourself as a customer or make an order at our online store. We use this information to execute your order.
We process your information for the purposes of order processing, accounting, customer relationship management and marketing. The data can also be used for the development of Lovi Oy’s operations and for statistical purposes.
We use personal data only on the basis of our legitimate interest to fulfill your orders and develop our business.
For marketing purposes, we only process your data if you have provided your consent and/or ordered newsletters or similar marketing communication from us. There is an order form on our website to subscribe to our newsletter. You can also subscribe to our newsletter by ticking a subscription box on the checkout page. If you give your consent, we will send you e-mail offers and information about Lovi’s products and activities. You can unsubscribe whenever you like. Each newsletter we send contains a link that you can click to unsubscribe from the list.
4. DATA RETENTION AND PROTECTION
We keep your information for the time of your customer relationship and at maximum 10 years for purposes of accounting under the Accounting Act.
5. TECHNICAL AND ORGANIZATIONAL MEASURES
We use various technical and organizational measures to protect your personal data. In the event of a security breach, we will contact you immediately.
7. DISCLOSING YOUR INFORMATION AND DATA TRANSFER
The customer information is only used by those employees of Lovi Oy, who are authorized to do so. In order for us to process your order, we use third-party services. Logistics companies and our payment service provider Paytrail, for example, will process your information.
Your information is primarily stored in the area of EU/EEA. In case we would need to transfer the data outside the EU/EEA in course of our operations, we will do so in accordance with the requirements of the laws and regulations and apply necessary safeguards and standard contractual clauses as approved by the EU Commission where applicable.
You may contact us for more information.
8. YOUR RIGHTS
Under the applicable laws and regulations, you as a data subject have the following rights (as more closely provided under Article 15-21 of the GDPR):
- Right of access: data subjects have the right to request whether their personal data is being processed, as well as access to said personal data. Data is delivered within 1 month of such request after we have properly identified you
- Right to rectify: data subjects have the right to request the data controller to rectify any errors or omissions in their personal data
- Right of removal: data subjects have the right to request the data controller to remove any of their personal data that is no longer needed for the purpose for which it was collected or processed, regarding which the data subject objects to processing and there is no legitimate basis for the processing, which is being processed unlawfully or must be removed to satisfy a legal obligation
- Right to restrict processing: the data subject has the right to restrict the processing of his or her personal data in the event the accuracy or veracity of the personal data is disputed, if the personal data is being unlawfully processed, if the data controller no longer needs the personal data but the data subject legitimately objects to the removal of the personal data, or if the data subject objects to the processing but it has not yet been determined whether there is a legitimate basis for said processing
- Right to object: the data subject has the right to object to the processing of his or her personal data to the extent said personal data is being processed subject to Article 6(1)(f) of the GDPR, in which case the data controller must in order to continue processing show that there is a legitimate basis for the processing of said personal data
- Right to notify data protection authority: data subjects have the right to complain about the processing of their personal data to the appropriate data protection authority, which with regards to Finland is the Data Protection Ombudsman (https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman)