This is the privacy and registry statement of Ylläsavain in accordance with the EU General Data Protection Regulation (GDPR). Drafted on 02.09.2024.
Data Controller
Ylläsavain Oy (2149913-8)
+358 400 190 217
Tunturintie 16 A 1 FI-95970 Äkäslompolo
Requests Related to Data Protection
Data protection requests are handled by Louru Oy.
Registry Name
User registry of Ylläsavain.fi online service.
Purpose of Processing Personal Data
The purpose of processing personal data is to communicate with customers, maintain the customer relationship, and for marketing purposes. Additionally, the collected data can be used for the development of the online service. The data is not used for automated decision-making or profiling.
Content of the Registry
The data stored in the registry includes: the person’s name, company name, contact information (phone number, email address, address), website addresses, information on the ordered services and their changes, billing information, and other information related to the customer relationship and ordered services.
The data is stored indefinitely.
Regular Sources of Information
The data stored in the registry is received from the customer via email, phone, social media services, contracts, customer meetings, and other situations where the customer provides their information.
Data on contact persons of companies and other organizations can also be collected from public sources such as websites, directory services, and other companies.
Transfer of Data Outside the EU or EEA
Data is not regularly disclosed to other parties. Data can be published only to the extent agreed with the customer. Data may also be transferred by the data controller outside the EU or EEA.
Principles of Registry Protection
The data controller ensures that the stored data, as well as server access rights and other critical information for the security of personal data, are processed confidentially and only by employees whose job description includes the handling of these data.
Risks
Risks related to personal data include data leaks. The personal data stored in the registry is protected against unauthorized access and accidental or unlawful destruction, alteration, disclosure, transfer, or any other unlawful processing.
Right of Access and Rights Related to the Processing of Personal Data
Every person in the registry has the right to inspect the data stored about them and demand the correction of any incorrect data or the completion of incomplete data.
If a person wishes to inspect the data stored about them, request a correction, or request the deletion of their personal data, the request must be sent in writing to the data controller. The data controller may ask the requester to prove their identity if necessary. The data controller will respond to the customer within the time stipulated by the EU’s data protection regulation (usually within a month).
Cookies and Visitor Tracking
Visitor data and statistics of the website are stored via the Google Analytics web analytics service on Google servers, which may also be located outside the EEA (in Privacy Shield countries).
What are Cookies?
Cookies are small text files stored on the user’s device when they visit a website. Each time they visit, these cookies are sent back to the website, which recognizes the cookie. Cookies can be used to, among other things, recognize the user’s device, save the user’s choices on the site, and retain login information. Cookies can also be used for visitor tracking to improve user experience and target advertisements.
Cookies Used on the Website
This website uses the Google Analytics web analytics service, which uses cookies for visitor tracking. Google Analytics cookies can collect information such as the user’s
device
location
visited pages (on this site)
opened links
visit time
source of arrival.
This website may contain embedded content from other sources. Loading or opening embedded content is comparable to the user visiting the third-party website themselves.
Targeting of Collected Data to Individuals
No collected data can be targeted to individuals because IP addresses and other identifiers have been removed from the reports. Google Analytics reports provide indicative figures on the number of visitors, information about their devices, and their behavior on this website.
