This is a Registry and Privacy Statement under the Golden Earth Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Created on 25/06/2019 Last modified 25/06/19.
1. The Registrar
Golden Earth KY, (Business ID 1089246-0)
2. Contact person responsible for the register
Eetu Suominen, firstname.lastname@example.org, +358 440 106654
3. The name of the registry
Online Service User Register, Company Customer Register, Marketing Register, Membership Register
4. Legal basis and purpose of the processing of personal data
The legal basis for the processing of personal data under the EU General Data Protection Regulation is
– individual consent (documented, voluntary, personalized, informed and unambiguous)
The purpose of processing personal data is to communicate with customers, maintain customer relationships and promote marketing
The data is not used for automated decision making or profiling.
5. Information content of the register
The information to be stored in the register is: the person’s name, contact information (phone number, e-mail address, address), information about subscribed services and changes thereto, billing information, other customer relationship and subscribed services information.
Data is kept for a maximum of one year
6. Regular sources of information
Information stored in the register can be obtained from the customer eg. messages sent via web forms, email, telephone, social media services, contracts, customer meetings and other situations where a customer discloses information.
7. Regular disclosures and transfers of data outside the EU or the EEA
Information is not routinely disclosed to other parties. The information may be published to the extent agreed with the customer.
8. Registry Protection Principles
The records shall be handled with care and the data processed by the information systems shall be appropriately protected. When registry information is stored on Internet servers, the physical and digital security of their hardware is properly taken care of. The data controller shall ensure that the stored information, as well as server access and other information critical to the security of personal data, is treated confidentially and only by the employees whose job description it is included in.
9. Right of inspection and right to have the data corrected
Every person in the register has the right to verify their data stored in the register and to request the correction of any inaccurate or incomplete information. If a person wishes to check or rectify the information stored about him / her, the request must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).
10. Other rights related to the processing of personal data
A person on the register has the right to request that personal data relating to him be removed from the register (“the right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).