Privacy Policy

Privacy Policy

As the controller of the Shoptampere.fi directory, Vilkas Group Oy (business ID 1033996-4) operates (hereinafter referred to as "Shoptampere.fi", "Vilkas", "we", or "our")

Phone: +358 20 743 1919

Email: privacy@vilkas.fi

Contact person for matters concerning the register:

Noora Kahra, Finlaysoninkuja 19, 33210 Tampere, Finland Phone: +358 50 536 4620 Email: noora@vilkas.fi

Register name User register of Vilkas Group Oy's online services

General terms and conditions These register terms and conditions of Vilkas Group Oy (hereinafter referred to as the "Register Description") apply to personal data stored in Vilkas Group Oy's customer register.

Our goal in processing customer information is to provide high-quality service and improve the customer experience while respecting privacy. We do not collect unnecessary information about our customers and are aware of our responsibility to protect the privacy of our customers and their associated individuals.

Register content We store the following information about our customers and, when the customer is not a natural person, the customer's contacts and other relevant individuals for the management of the customer relationship (each hereinafter referred to as the "Data Subject"):

- Company

- First and last name

- Address

- Preferred language

- Email address

- Phone number

Other possible information related to customer management, such as information about marketing permissions and prohibitions and information about ordering services.

Updating information The user can update their name and address information in their online store profile. The user can also contact the contact person mentioned in this description to update their information. The user also has the right to subsequently prohibit the processing of their information for marketing purposes. This request must be made to the contact person mentioned in this description by email.

Purpose of processing personal data We use the information collected about the Data Subjects for the following purposes:

- To deliver and order services;

- To personalize our services and communication, provide recommendations, and target marketing;

- For customer service and communication related to services, such as sending messages, reminders, technical notices, updates, and requested information;

- For the production, maintenance, protection, and development of services;

- For direct marketing in accordance with the consents and prohibitions given by the Data Subject;

- To ensure the relevance and functionality of communication;

- For business planning and product development; and

- To fulfill the rights and obligations of the controller and to enforce agreements with third parties.

If the Data Subject provides us with their electronic contact information, such as their email address, in connection with customer communication, we consider that they have given explicit consent to receive the above-mentioned communication, also using electronic channels.

For the purposes of individual, pre-identified, and short-term campaigns, additional information on the purposes of processing personal data may be provided in campaign-specific register descriptions. Information collected within the scope of campaigns will be immediately deleted after the purpose of the campaign has ceased.

Regular sources of information The regular sources of information are the data provided by the Data Subject in orders and forms, as well as information generated in connection with customer service, offers, contact requests, complaints, and the use of products and services. In addition, with the consent of the Data Subject and based on the law, we may obtain or receive information related to the Data Subject from third parties, such as authorities, for the purpose of improving communication quality and ensuring the accuracy of the information.

Regular disclosures of information No regular disclosures are made from Vilkas' user register.

Vilkas may disclose personal data within the limits permitted and required by applicable law to third parties, such as authorities.

Vilkas uses the Mailerlite system for email communication and customer management, which means that personal data is stored on servers located outside the European Union, and the service provider is in the USA PrivacyShield system, ensuring data protection at the EU level.

Use of cookies We use cookies and similar technologies on the Shoptampere.fi website to track visitor statistics for our services. The information collected through cookies is used to improve the functionality and content of the website. The user can choose to disable cookies from their browser settings. However, we cannot guarantee that our platform will function properly after disabling cookies, as cookies may be necessary for the proper functioning of certain services.

Principles of register protection The register and the personal data it contains are treated confidentially. The register is properly protected against external access with firewalls and other technical security measures. The register is stored only in electronic form, and any occasional paper printouts of the register are immediately and properly destroyed in accordance with Vilkas' internal instructions.

Personal data may be stored on Vilkas' own physical platform as well as in an electronically provided cloud service by an external service provider. When using the services of an external service provider, the service provider is responsible for actions related to the rights of the Data Subject as the controller. Regardless of whether we store and process data in our own or outsourced environment, we, as the controller, ensure that data security is properly organized and personal data is adequately protected against external security measures. We do our best to implement and update our actions to protect personal data from unauthorized use, destruction, or alteration. We cooperate with authorities and our partners to ensure compliance with the applicable laws regarding the privacy of the Data Subjects. However, it should always be remembered that no information, especially online, is completely reliable and secure.

Rights of the Data Subject The Data Subject has the following rights under the EU General Data Protection Regulation:

- The right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed and, if so, the right to access personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; (iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (v) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (vi) the right to lodge a complaint with a supervisory authority; (vii) where the personal data are not collected from the data subject, any available information as to their source; and (viii) the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject (GDPR Article 15);

- The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (GDPR Article 7);

- The right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them and the right to have incomplete personal data completed, including by means of providing a supplementary statement taking into account the purposes for which the data were processed (GDPR Article 16);

- The right to obtain from the controller the erasure of personal data concerning them without undue delay, provided that (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) the data subject withdraws consent on which the processing is based, and where there is no other legal ground for the processing; (iii) the data subject objects to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes; (iv) the personal data have been unlawfully processed; or (v) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject (GDPR Article 17);

- The right to obtain from the controller restriction of processing where (i) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; (ii) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; (iii) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or (iv) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject (GDPR Article 18);

- The right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means (GDPR Article 20);

- The right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them infringes the EU General Data Protection Regulation (GDPR Article 77).

Requests for the exercise of the Data Subject's rights shall be addressed in writing to the contact person of the controller in a document signed by hand or in a corresponding authenticated document or presented personally to the register maintainer.

The Data Subject is responsible for the accuracy of the information provided. The Data Subject must notify us of any changes to the information they have provided.

The Data Subject may give and withdraw their consent for electronic direct marketing in accordance with the Information Society Code (917/2014) by notifying us by email. In addition, the Data Subject has the right to prohibit the processing and disclosure of their information for direct marketing, distance selling, and market and opinion research by notifying the contact person of the controller. The right to prohibit does not apply to customer communication and other communication related to the services in connection with the implementation of the services or the management of the customer relationship.

This description was last updated on September 2, 2024. Vilkas reserves the right to modify these privacy practices and update these terms accordingly.

If the user has any questions regarding our products or services, please contact customer service. If the contact is specifically related to privacy, please kindly contact the contact person mentioned in this Register Description by email.