Privacy, data protection and register description

Register owner: Juha Peltonen, Paint it Black Koristemaalaus, Kovik byväg 4766600 Vöyri

Person responsible for register matters: Juha Peltonen, juha@paintitblack.fi

Name of register: Paint it Black Custom Paint and paintitblack.fi customer register

Purpose of use, disclosure, and confidentiality of data

The purpose of the register is to maintain the customer register for the aforementioned online store and newsletter, to archive and process customer orders, to manage customer relationships and marketing, and to prevent misuse. Visitor analytics data is used to maintain and develop the usability of the website and for targeted content and marketing.

Sharing of website visitor data: We only share your data with third parties who comply with data protection regulations and the law. Your data is shared with the following parties, among others: the Squarespace online store platform, which enables commerce. Data may be shared with Google and Meta for targeted marketing purposes.

Data content of the register

The personal register contains the following information:

– Name

– Address

– Email address

– Phone number

– Order information, such as the number and content of orders and payment method information

– Marketing prohibitions and permissions

Principles of register protection

All personal data is treated confidentially. The customer register data is stored in the controller's system, which is protected by operating system security software. Access to the system requires a username and password. The system is also protected by firewalls and other technical means. Only the register administrator and accountant (invoicing information) have access to and are authorized to use the information stored in the system. Printed personal data is stored in the locked premises of the register keeper.

We store your personal data:

– in our email archive for seven years/for the period specified by law

– in our accounting records for seven years/for the period specified by law

– if you have subscribed to our newsletter, in our email list for as long as the list exists or until you unsubscribe yourself from the list

On what basis is my personal data processed?

Legitimate interest: By legitimate interest, we refer to the need to process data in order to provide the service. The collection of visitor analytics is based on the user's consent.

Right of access, exercise of the right of access, and right to prohibit processing

The data subject has the right to access the data stored about them in the register and to request the correction of any inaccurate data in the register. A written request for inspection must be sent to the person responsible for register matters. The data subject also has the right to request the removal of their data from the register if we have no legal obligation to continue processing their personal data. A written request for deletion must be sent to the person responsible for the register.