Postal address: Siltasaarenkatu 1, FI-00530 Helsinki, Finland
2. Data register officer
Name: Päivi Kröger-Kekkonen
Postal address: Siltasaarenkatu 1, FI-00530 Helsinki, Finland
Email: info@skybeauty.fi
3. Registers
Customer register of Sky Beauty Oy/shop.skybeauty.fi
4. Purpose of processing personal data
The customer’s personal data can be processed for the following purposes:
• managing and developing the customer relationship;
• confirming customer events;
• developing customer service and the business;
• marketing;
• analysis and statistics, as well as
• other equivalent purposes.
We also process your data to meet statutory and other requirements, such as the requirements on the storage of material under the Finnish Accounting Act.
5. Information content of the register
The register may contain the following information:
• contact information, such as name, business ID, address, telephone numbers, email addresses,
• registration information, such as user ID, password or any other identifying code,
• information on the customer relationship, such as invoicing and payment information, product and order information, customer feedback and comments, information on raffles and contest responses as well as cancellations,
• permissions and consents, if any, and
• any other information gathered with the customer’s consent.
6. Regular information sources
Information on the customer is regularly received:
• from the customer by phone, via the internet, by email or other similar method
• by using cookies and other similar technology.
7. Regular disclosure of information and transfers of information outside the EU and the EEA
We do not sell or lease the information in our register to third parties.
Information is disclosed regularly:
• to our email marketing partner, if the customer has consented to our newsletter.
We can only disclose necessary information to third parties and only in the following cases:
• To our transport partner, if the selected delivery method is transport to a pickup point or direct delivery.
• To the payment forwarding service provider when payments are made with a payment card.
• For the use of authorities, e.g., in situations of misuse; we inform the customer about the issue in accordance with the law.
• To a debt collection company, when an invoice falls due and is transferred to debt collection.
As a rule, information is not transferred or disclosed outside the EU or the EEA.
8. Rights of the data subject
Right of access and rectification
The data subject has the right to access all information about the data subject stored in the register. Communications concerning the right of access shall be signed and sent in writing to the address mentioned in Section 1. If there are errors in the registered information, or if the data subject wants the information to be erased, the data subject can submit a request concerning the changes to the data register officer named in Section 2.
Right to object to processing
The data subject has the right to object to the controller’s processing of information about him or her for the purpose of direct advertising, distance selling and other direct marketing. In issues related to access and rectification, the data subject can contact customer service by email or post using the addresses mentioned in Section 1.
9. Principles of protecting the registers
Manual data
There are no manual data.
Electronically stored data
Only employees who are authorised to process customer data by virtue of their professional roles are authorised to use the system that contains customer data. All users have an individual user ID and password to the system. The data is collected in databases that are protected by firewalls, passwords and other technical methods. The databases and their backup copies are in locked areas and only certain persons, designated in advance, can access the data.
