Registration statement

1. Data controller and contact person

Data controller: Cesars Finland Oy (business ID 2194567-9)
Address: Vilhonkatu 4, 00100 Helsinki
Phone: 0400 608621
Email: info@cesarsshop.fi
Contact person: Satu Saarisalo

2. Register

The register processes personal data of Cesars Finland Oy's customers and former customers, contact persons of organizations related to Cesars Finland Oy's operations, and its trusted persons.

3. Basis and purpose of processing personal data

In order to provide the best service, our operations require the collection of certain customer data in a register. The purpose of the register is to develop services, manage customer relationships and marketing, as well as manage documentation of expired memberships in the personal data system.

The processing of personal data is based on the Association's legal obligation to maintain a membership register and, in certain cases, the implementation of the agreement.

4. Personal data processed

The register processes the personal and contact information of Cesars Finland Oy's customers, as well as other necessary information related to membership. This information includes:

- First and last name
- Address and domicile
- Email address
- Phone number
- Information you provided when ordering and order history
- Information we receive through cookies
- Information we receive through social media
- Other information collected with the customer's consent

5. Regular sources of information

Personal data is collected from the customer themselves and through cookies.

6. Protection of personal data and data security

Digitally processed personal data is protected and stored in Cesars Finland Oy's System, access to which is limited to only those persons who need the information in question to perform their work tasks. These persons have access to personal usernames and passwords.

Personal data is protected from external access and the use of member data is monitored. Members have a personal username and password protection. Personal data sent outside the association is encrypted. The workstations and storage media used are encrypted.

7. Regular disclosures and transfers of personal data

Personal data will not be disclosed to third parties.

8. Data retention period

Personal data is stored in the register as long as the customer is a customer of Cesars Finland Oy. After the customer relationship ends, personal data is stored for a maximum of ten years from the end of the customer relationship based on the company's legitimate interest, i.e. to defend against possible legal claims (KKO 2017:15). Personal data may also be stored for longer than this if applicable legislation or the company's contractual obligations towards third parties require a longer storage period.

9. Profiling

As part of the processing of personal data, the company may carry out automatic profiling of the customer. As a result of profiling, the customer receives more targeted marketing messages.

10. Customer rights

The customer has the right to object to the processing of their personal data for direct marketing purposes at any time. The customer can provide Cesars Finland Oy with channel-specific consents and prohibitions regarding direct marketing (for example, prohibiting marketing messages sent by email).

In addition, the data subject has the right, in principle, in accordance with applicable data protection legislation, at any time:

- to receive information about the processing of their personal data
- to access their own information and check the personal data processed by Cesars Finland Oy concerning them
- demand the correction of inaccurate and incorrect personal data and the completion of information
- request the deletion of their personal data
- withdraw their consent and object to the processing of their personal data to the extent that the processing of personal data is based on the customer's consent
- object to the processing of their personal data on grounds relating to their particular personal situation to the extent that the processing of personal data is based on the legitimate interest of the company
- receive their personal data in a machine-readable format and transfer the data in question to another controller, provided that the customer has provided the personal data in question to the company. Cesars Finland Oy processes the personal data in question based on the customer's consent and the processing is carried out automatically.
- demand restriction of the processing of their personal data.

The customer must submit a request for the exercise of the above-mentioned right in accordance with the Contact section of this privacy policy. Cesars Finland Oy may ask the data subject to clarify their request in writing and verify the data subject's identity before processing the request. The association may refuse to execute the request on the grounds provided for in applicable law.

11. Right to complain to a supervisory authority

Every Data Subject has the right to lodge a complaint with the relevant supervisory authority or with the supervisory authority of the European Union Member State in which the Data Subject has his/her place of residence or place of work, if the Data Subject considers that his/her personal data has not been processed in accordance with applicable data protection legislation.

12. Contacts

Requests regarding the exercise of customer rights, questions about this privacy policy and other contacts should be made by email to Cesars Finland Oy / Satu Saarisalo at satu.saarisalo@cesarsshop.fi. The customer can also contact us in person or in writing at the address below:

Cesars Finland Oy / Privacy Policy
Satu Saarisalo
Vilhonkatu 4, 00100 Helsinki

13. Changes to this Privacy Policy

This privacy policy may be updated from time to time, for example due to changes in legislation. This privacy policy was last updated on January 26, 2019.