1. Controller of the personal data file
Kidemaa Oy (hereinafter called Kidemaa)
Mikonkatu 6 C, 00100 Helsinki, Finland
Tel: +358 40 0244797
2. Controller’s contact person
Ms. Inkeri Mentzoni
Tel: +358 40 0244797
4. To what purposes we process Your data?
The purposes of processing Your personal data are the following (one or more purposes may apply simultaneously):
· Managing and analyzing the customer relationship
Kidemaa may use Your personal data for managing, analyzing and improving the customer relationship with You.
· Providing products and services
Kidemaa may use Your personal data for providing products and services for You either directly or via the suppliers, for example when You purchase our products, use our digital services, subscribe to our newsletters and participate in events.
Your personal data is processed for carrying out the rights and obligations related to a contract or other commitment between Kidemaa and You.
· Communication with You
Kidemaa may use Your personal data to communicate with You, for example to send You important alerts and other such notices relating to our products and services, to inform You that our services have changed and to ask for your feedback on our products and services.
· Marketing to You
Kidemaa may contact You to inform You of new products, services or promotions Kidemaa may offer.
Kidemaa may use Your personal data to personalize our offering and to provide You with more relevant content.
This means for example making recommendations and to display customized content and advertising in our services and in third party services.
· Managing and developing services
Kidemaa may use Your personal data to manage and develop Kidemaa’s business operations.
5. What information we collect about You?
Content of Kidemaa’s personal data file may include the following types of data and changes made to these data types:
5.1 Basic information of all data subjects
· first and last name
· contact data (postal address, e-mail address, telephone numbers)
· language preferences
· starting and ending moment and method of the customer or comparable relationship
· campaigns and promotions directed to You, as well as their use
· interests and other information provided by You
· direct marketing choices
· information of the use of Kidemaa’s digital services as well as digital content created by You
· technical data sent to Kidemaa by Your digital devices (such as computers and mobile devices) as well as information related to cookies and other similar technologies
· recordings of customer service telephone conversations as well as e-mail and chat correspondence
· information received from social media service providers, such as Your contact lists within a service
In addition to the above specified basic information Kidemaa may process the following subcategories of personal data of You.
5.2 Information of Kidemaa’s B-to-C web shop’s customers
· user name and password
· customer number
· functions within the web shop after logging in
· purchase history
· billing, delivery, returns and payment collection data
(excluding bank account or credit card information unless needed for reimbursement purposes)
5.3 Information of data subjects who have given feedback and/or made complaints related to Kidemaa’s products or services
· content, correspondence and consequences related to feedback and complaints
5.4 Information of data subjects participating in Kidemaa’s events
· relevant information related to the organization or participation of the event
6. Where do we gather Your personal data from?
Most of the information is collected from You at the beginning of and during the customer relationship and from the software programs when You are using and/or purchasing our products and services.
Your personal data and its updates are also obtained from authorities, organizations and companies offering credit information and personal data updating services, social media service companies, public directories and other public sources of information.
The provision of Your personal data is necessary in order to enter into a contract and customer relationship with Kidemaa.
Failure to provide the required data means that You are not able to purchase and use Kidemaa’s products and services.
7. Is Your data regularly shared with others?
Kidemaa does not sell, lease or otherwise disclose Your personal data to third parties outside of the global Kidemaa group unless otherwise stated below.
This may include for example providing services such as customer service and software services, managing and analyzing personal data, conducting research and managing marketing and execution of diverse campaigns.
Kidemaa may share Your personal data for obtaining payment for products and services including the transfer or sale of delinquent accounts to third parties for collection.
Kidemaa may share Your personal data with carefully considered third parties for joint or independent direct marketing purposes.
Only the minimum necessary amount of Your personal data is shared with third parties.
Kidemaa may share Your personal data based on a valid order from a court or other official body with sufficient authority.
Kidemaa may share Your personal data as part of any merger, acquisition, sale of company assets or transition of service to another provider.
This also applies in the unlikely event of an insolvency, bankruptcy or receivership in which Your personal data would be transferred to another entity as a result of such a proceeding.
8. Is Your data transferred to countries outside the European Union or the European Economic Area or vice versa?
Kidemaa’s services may be provided using resources and servers located in various countries around the world. Therefore Kidemaa may transfer Your personal data outside the country where You use our services, including to countries outside the EU and EEA that do not have laws providing specific protection for personal data or that have different legal rules on data protection. In such cases Kidemaa ensures that a legal basis for such a transfer exists and that adequate protection for Your personal data is provided as required by applicable law, for example, by using standard agreements approved by relevant authorities (where necessary) and by requiring the use of other appropriate technical and organizational information security measures.
9. How long do we process Your Personal data?
Kidemaa may process Your personal data in this personal data file for as long as the customer relationship or other comparable relationship between You and Kidemaa exists, as well as for a reasonable time thereafter.
Kidemaa may process Your personal data for tax or legal purposes as long as necessary.
After the above specified timeframe has ended, Kidemaa may process part of Your personal data in its direct marketing registers according to applicable legislation.
10. The principles of securing the data
Kidemaa has established electronic and administrative safeguards designed to make the information collected secure.
Only appointed personnel of Kidemaa and of organizations operating by Kidemaa’s assignment or on behalf of Kidemaa are entitled to use the personal data file application.
All persons processing the application have a personal right of use granted by the controller.
Different levels of access have been created based on the data a person needs according to his/her job description.
The system is protected with a fire-wall which protects it from contacts outside of Kidemaa.
All personnel of Kidemaa and its subcontractors are obliged to keep the information of the personal data which they obtain in their work confidential.
Manually processed documents containing Your personal data are protected against unauthorized access.
11. Your right of access, correction and prohibition
You have a right of access to the data concerning You in Kidemaa’s personal data files.
The request for right of access shall be made in writing to the contact person of the personal data file.
The request for the right of access must be signed.
The request for right of access can also be presented at the main office of the controller at the address Mikonkatu 6 C, 00100 Helsinki, Finland, with verification of identity.
You have the right to prohibit Kidemaa from processing Your personal data for direct marketing and the right to demand correction of an erroneous data by contacting the controller’s contact person.
12. Choice of law and the right to lodge a complaint to the supervisory authority and the contact details of the supervisory authority
The processing of this personal data file is governed by the laws of Finland.
In case You suspect a breach of data protection legislation and the matter is not solved amicably between You and Kidemaa in negotiations, You may contact the Finnish Data Protection authority at Data Protection Ombudsman’s Office, P.O. Box 800, 00514 Helsinki, Finland.