Registry and Privacy Policy
This is a register and privacy statement in accordance with Caresol Oy's Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Dated 31.01.2020. Last modified 07.03.2020
1. The Registrar
Caresol Oy, Ojalantie 109, 03100 Nummela, Finland
sales@vectorsave.com, antti@vectorsave.com
2. Contact person responsible for the register
Antti Taskinen
3. Name of the register
Caresol Oy customer register
4. Purpose of processing of personal data
Purpose of processing and collecting personal data with the consent of the customer Caresol Oy liaising with customers, maintaining customer relationship.
Based on the information you provide, we will be able to provide the products you have ordered, billing, possible refunds and complaints. If you have a problem with your order, we may use your information to contact you.
With the customer's consent, the information may also be used to announce any offers, newsletters and other events related to Caresol Oy's activities.
The data is not used for automated decision making or customer profiling.
5. Information content of the register
The data to be recorded in the register are:
- First and last name
- business name and business ID
- address
- telephone number
- email address
- prohibitions and consents to direct marketing
- payment and billing information
- user name
- customer number
- order history
- customer feedback and contacts
The information is retained until the customer requests it for removal.
6. Regular sources of information
Information stored in the register can be obtained from the customer. messages sent via web forms, email, telephone, social media services, contracts, customer meetings and other situations where a customer discloses information.
7. Regular disclosures and transfers of information outside the EU or the EEA
Information is not routinely disclosed to other parties. The information may be published to the extent agreed with the customer.
Data may also be transferred by the controller outside the EU or the EEA.
If you are disclosing personal information to different parties, please indicate here the potential recipients or groups of recipients.
8. Registry Protection Principles
The records shall be handled with care and the data processed by the information systems shall be appropriately protected. When registry information is stored on Internet servers, the physical and digital security of their hardware is properly taken care of. The data controller shall ensure that the stored information, as well as server access and other information critical to the security of personal data, is treated confidentially and only by the employees whose job description it is part of.
9. Right of inspection and the right to have the data corrected
Every person in the register has the right to verify their data stored in the register and to request the correction of any inaccurate information or the correction of incomplete information. If a person wishes to check or rectify the information stored about him / her, the request must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).
10. Other rights related to the processing of personal data
Any person on the register has the right to request that personal data relating to him be removed from the register ("the right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).