Privacy Policy
Privacy policy for the online store Heavenly Matcha
- Data Controller and Data Protection Officer Name: Nurisafoods Oy Business ID: 3293258-2 Address: Metsolantie 158 Postal code: 17510 City: Nyystölä Telephone number: 0408181131 Email address: info@nurisafoods.fi
- Purpose of the register The personal data collected is used: For customer identification and management of user rights. For delivering orders from registered users and for maintaining and developing customer relationships.
- Basis for collecting and processing data Customer data is collected and processed with the customer's consent, or to implement a (purchase) contract with the customer.
- Data content of the register Customer's name, email address, telephone number and home address
- Data retention period Personal data is retained for as long as it is needed to implement the (purchase) contract with the customer or to develop customer service.
- Regular data sources The register collects data from the person themselves.
- Regular data transfers and data transfers outside the EU or the European Economic Area Data is not routinely transferred outside the company.
- Use of cookies We use the so-called cookie function on our website. A cookie is a small text file that is sent to and stored on the user's computer, which enables the website administrator to identify frequent visitors to the website, to make it easier for visitors to log in to the website and to enable the compilation of aggregated information about visitors. This feedback allows us to continuously improve the content of our website. Cookies do not harm users' computers or files. We use them so that we can offer our customers information and services tailored to their individual needs. If a user visiting our website does not want us to receive the above-mentioned information via cookies, most browser programs allow the cookie function to be switched off. This is usually done through the browser settings. However, it is good to take into account that cookies may be necessary for the proper functioning of some of the websites we maintain and the services we offer.
- Register protection Data is transferred over an SSL-protected connection. Electronic data is protected by a firewall, usernames and passwords. Only those persons employed by the controller who need the data for their duties have access to the data.
- Automated decision-making No automated individual decisions (Article 22 of the EU Data Protection Regulation) are made.
- Rights of the data subject The data subject has the right to check what information about him or her has been stored in the personal data register. A written inspection request must be sent, signed, to the person responsible for the register. The right to inspect is free of charge and can be exercised no more than once a year. The data subject has the right to demand the correction or deletion of incorrect or outdated data or the transfer of data from one system to another. He or she also has the right to restrict or object to the processing of his or her data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation. The data subject has the right to withdraw previously given consent to the processing of data or to lodge a complaint with a supervisory authority regarding matters related to the processing of his or her personal data. The data subject also has the right to prohibit the use of his or her data for direct marketing purposes