Moimilo Oy’s privacy policy
Data Controller
[Moimilo Oy]
Business ID: [1444410-4]
address: [Pihlajatie 47 A 16], [00270] [Helsinki]
tel. [+358 50 330 2015]
Email: [info@moimilo.fi]
Data Protection Contact Person
Data Protection Officer
[Mikko] [Loikkanen]
tel. [+358 50 330 2015]
Email: [mikko.loikkanen@sci.fi]
Basis and purpose of processing personal data
The legal basis for the processing of personal data is the controller’s legitimate interest, which is based on the customer relationship between the data subject and the controller. The collected personal data is used to identify the user on the website, e.g. for the purpose of becoming a customer of the online store. In addition, the service can send bulletins to its customers.
Cookies
A cookie is a small text file that is stored on the user’s device by an internet browser. Cookies are used, for example, when the user’s data is to be stored when the user moves from one page of an internet service to another. The use of cookies always requires the user’s consent.
This website uses the following types of information in cookies, among other things
• the user’s IP address
• Browser type
• the web address from which the user came
•
More information about cookies can be found on the website of the Finnish Transport and Communications Agency, Traficom.
Regular sources of information
The data entered in the personal data register is regularly obtained from the data subject himself/herself. The data collection is done by filling in the book order form. In addition, information is collected on written comments and behaviour in the service.
Disclosure of personal data
Personal data is not regularly disclosed. Therefore, personal data will not be transferred outside the EU and the European Economic Area. However, the data may be disclosed to the authorities, for example, on the basis of a legal requirement.
Protection of personal data
The site’s server is SSL protected and personal information is stored in an encrypted database.
Data retention period
The data is stored for as long as the user account is registered in the service. If a user deletes their account, the collected data will be anonymized so that all identifying information such as names, addresses, and phone numbers are removed.
Profiling
Information about previously purchased products or behavior on the site/service may be used as a source when providing additional services to the user.
Rights of the data subject
Right of access to personal data
• The data subject has the right to obtain confirmation as to whether personal data concerning him or her is being processed, and if so, the right to receive a copy of his or her personal data.
Right to rectification
• The data subject has the right to request that inaccurate and incorrect personal data concerning him or her be corrected.
• The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to erasure
The data subject has the right to request the erasure of personal data concerning him or her in the following cases:
• Personal data is no longer needed for the purposes for which it was collected
• Personal data has been processed unlawfully.
Right to restriction of processing
The data subject has the right to restrict the processing of personal data concerning him or her in the following cases:
• The data subject disputes the accuracy of their personal data
• The processing is unlawful and the data subject objects to the erasure of their personal data and instead demands the restriction of their use be restricted
The controller no longer needs the personal data for the original purposes of the processing, but the data subject needs it to establish, exercise or defend a legal claim.
Right to object
The data subject has the right to object to the processing of personal data concerning him or her at any time on grounds relating to his or her particular situation.
The controller may no longer process the personal data of the data subject, unless the controller can demonstrate that there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or if it is necessary for the establishment, exercise or defence of a legal claim.
If personal data is processed for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling where it is related to such direct marketing.
The right not to be subject to automated decisions
The data subject has the right not to be subject to a decision based solely on automated processing, such as profiling, which produces legal effects concerning him or her or similarly significantly affects him/her.
The above does not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and the controller or is based on the data subject’s explicit consent.
Right to data portability
The data subject has the right to receive the personal data concerning him or her and provided by him or her in a structured, commonly used and machine-readable format and the right to transmit such data to another controller.
Right to lodge a complaint with a supervisory authority
The national supervisory authority for personal data matters is the Data Protection Ombudsman, which operates in connection with the Ministry of Justice. The user of the service has the right to bring your matter to the supervisory authority if they consider that the processing of personal data concerning them violates the relevant legislation.
Contacts
In all questions related to the processing of personal data and situations related to the exercise of their rights, the data subject must contact the Data Protection Officer by email at [mikko.loikkanen@sci.fi] or by post at [Pihlajatie 47 A 16, 00270 Helsinki]