Customers of Kloffa Clothing
Marketing Register Privacy Statement
1 Registrar
Kloffa Clothing (Kloffa Group Oy)
Business ID 3009782-7
Vatselankatu 9, 20500 Turku
2 Contact person for register matters
Aleksi Lahti
3 Data Protection Officer
Aleksi Lahti is responsible for data protection and can be reached at the following contact details: info@kloffa.fi / 0400254413.
4 Name of the registry
Kloffa Clothing's Customer and Marketing Register.
5 Purpose of the processing of personal data
Personal data is collected for a specific, explicit and legitimate purpose. Information is collected in the register electronically and with the consent of customers and stakeholders. Consents have been collected from customers and stakeholders on a separate form with their truthful and genuine consent-based approval. Information is collected for customer relationship maintenance and marketing activities.
The customer has been informed about profiling, personalized marketing and it has been made clear to the customer that he can withdraw this consent at any time, in which case the profiling will cease immediately. Personal information will be collected in accordance with this Privacy Statement and will not be used, modified or transferred in any way other than as set forth in this Privacy Statement.
6 Information content of the register
The register contains personal information of Kloffa Clothing's customers and stakeholders, which is or may be first name, last name, e-mail address, telephone number, indicator information related to profiling and use of services, such as information collected by cookies on the website, and information provided by customers and stakeholders to Kloffa Clothing.
7 Regular disclosures
Kloffa Clothing has decided not to disclose the information in its possession to third parties or automatically to other Kloffa Clothing partners. In individual cases, Kloffa Clothing will disclose customer or stakeholder information to a designated party for Kloffa Clothing's marketing activities, or if a party requests Kloffa Clothing to do so, or if a statutory authority requires Kloffa Clothing to disclose separately identified information from a database held by Kloffa Clothing.
8 Transfer of data to a third country (outside the EEA) or to an international organization
Kloffa Clothing has decided not to automatically transfer information held by Kloffa Clothing to third countries or an international organization. In individual cases, Kloffa Clothing will disclose the information to third countries or an international organization if the customer or stakeholder has given Kloffa Clothing a mandate to do so and Kloffa Clothing, together with the Data Protection Officer and the Finnish Data Protection Authority, has assessed the risk criteria and quality system.
9 Registry security principles
Kloffa Clothing protects the personal register mentioned in this privacy statement based on the result of the risk assessment of the required level of security. The Data Protection Officer will be involved in the risk assessment process and will provide an impartial opinion on the final decision on data protection to be followed by Kloffa Clothing. Kloffa Clothing takes into account technical security and administrative as well as IT requirements when protecting the personal register.
10 Right of inspection
The data subject has the right to know what information about him is stored in the register. In addition, after a sufficiently precise and individualized request for an inspection, he or she shall have the right to be informed of the information concerning him or her contained in the records. The request for inspection must be addressed in writing and signed to the following address: Vatselankatu 9, 20500 Turku.
11 Right to request rectification and erasure of data
The controller shall correct any inaccurate information provided by the data subject in the register of personal data. The registrar is also obliged to check the relevance and timeliness of the information in the register through independent activities. The data subject may also require the controller to remove information about himself from the register. The person responsible for data protection leads the processing of the measure.
12 Other rights related to the processing of personal data
The data subject has the right to demand a restriction on the processing of personal data. The data subject shall also have the right to obtain personal data concerning him which he has provided to the controller in a structured, commonly used and machine-readable form and the right to transfer such data to another controller. In addition, the data subject has the right to object to data processing, automatic decision-making and profiling.
13 Data deletion and retention period
Kloffa Clothing removes the customer's data from the register when there is no longer a business reason for processing the data or if the person concerned requires Kloffa Clothing to delete the data concerning him or her by law. Data shall be destroyed by overwriting when there are no longer grounds for processing or storing the data. However, the data will not be deleted if the law provides otherwise or the competent authority has initiated a process that requires Kloffa Clothing to retain the data or another party has applied to Finland for a security decision on the data.
14 Approval of the Privacy Statement
This privacy statement was approved on an ongoing basis and reviewed on September 14, 2020.