Privacy Policy
This is a Privacy and Data Protection Statement in accordance with Sections 10 and 24 of the Finnish Personal Data Act and the EU General Data Protection Regulation (GDPR).
1. Data Controller
Name: Minja Kolehmainen / Minja K
Business ID: FI34545789
2. Contact Information Regarding Register Matters
Minja Kolehmainen
minja@minjakolehmainen.com
3. Name of the Register
Customer and Stakeholder Register of Minja K
4. Purpose of Processing Personal Data
In order to provide our services to our customers and individuals interested in our services, we must process necessary personal data. Such data includes, for example, information submitted via contact request forms.
The information is used for delivering products, communicating with customers, maintaining customer relationships, and marketing. The company also maintains a customer register and archives customer orders. Data may also be used for email marketing, statistical analysis, and the development of our operations.
5. Content of the Register
We use so-called cookies on our website. A cookie is a small text file sent to and stored on the user’s computer, allowing the website administrator to recognize returning visitors, simplify login procedures, and enable the creation of combined visitor data. This feedback helps us continuously improve the content of our website. Cookies do not damage users’ computers or files.
We use cookies to provide customized information and services to our users based on their individual needs.
This site may collect the following types of information via cookies:
- IP address
- Browser type
- Information on which site the user arrived from
If a user does not want us to collect this data via cookies, most browser programs allow cookies to be disabled via browser settings.
However, it’s important to note that cookies may be necessary for the proper functioning of some pages we maintain and services we offer.
6. Regular Sources of Data
Data is collected from the individual directly.
Behavioral data within the service is also collected using tools such as Google Analytics.
7. Transfer of Data Outside the EU or EEA
Data from the customer register is not disclosed outside the EU or EEA.
Technical maintenance of customer information systems may be carried out via remote connections from outside the EU, in accordance with the requirements of the Personal Data Act.
8. Principles of Register Protection
Data is transmitted over a secure SSL connection.
Only the company’s personnel have access to the customer register. All users of the register are bound by confidentiality obligations. Access to the register requires a password.
9. Data Retention Period
Customer data collected with the customer's consent will be removed from the register upon the customer’s request.
In such cases, please contact us via email: minja@minjakolehmainen.com
10. General Rights of the Data Subject
The data subject has the right to inspect what personal data concerning them has been stored in the personal data register. A written and signed inspection request must be submitted to the person responsible for register matters.
The right to inspect data is free of charge once per year.
The data subject has the right to request the correction or deletion of incorrect or outdated information, or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the GDPR.
The data subject has the right to withdraw their previously given consent to the processing of data or file a complaint to the supervisory authority regarding the processing of their personal data.
The data subject also has the right to prohibit the use of their data for direct marketing purposes.
11. Other Rights of the Data Subject
The data subject has the right to inspect what personal data concerning them has been stored in the personal data register. A written and signed inspection request must be submitted to the person responsible for register matters.
The right to inspect data is free of charge once per year.
The data subject has the right to request the correction or deletion of incorrect or outdated information, or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the GDPR.
The data subject has the right to withdraw their previously given consent to the processing of data or file a complaint to the supervisory authority regarding the processing of their personal data.
The data subject also has the right to prohibit the use of their data for direct marketing purposes.