Privacy Policy
Privacy Policy
Registrar
Jiahe Oy
Business ID: 2746940-7
Address: Sörnäisten rantatie 7, 00530 Helsinki
Email: jiaheoy@gmail.com
Data Protection Officer
In all matters relating to the processing of personal data and the exercise of your rights please contact the data protection officer via jiaheoy@gmail.com.
Data processing
The legal basis for the processing of personal data isa contractual relationship between the data subject and the registrar. The purpose of processing personal data is to deliver orders.
Regular sources of information
Information entered in the personal register is regularly obtained from the registrant him/herself.
Personal data to be processed
The registrar will only collect personal data from data subjects that are relevant and necessary for the purposes described in this privacy statement.
The following information is processed about registrations:
Name, Shipping address, Email address and Phone number.
Disclosure of personal data
Personal data will not be disclosed to third parties unless required by law. So the data can be exceptionally handed over to the authorities, for example, if required by law.
Protection of personal data
The registrar shall process personal data in a manner that ensures proper security of the personal data, including protection against unauthorized access and accidental loss, destruction or damage.
The controller shall use appropriate technical and organizational safeguards to ensure this objective, including the use of firewalls, encryption technologies and secure equipment facilities, appropriate access control, careful management of information system user IDs and guidance to staff involved in the processing of personal data.
All employees processing personal data have a duty of confidentiality under the Employment Contracts Act (55/2001) and supplementary non-disclosure agreements regarding the processing of registered personal data related matters.
Data retention period
The registrar processes personal data during the delivery of the order. At the end of this period, the data registrar shall delete or anonymise the data at the request of the customer. The registrar may be required to process some of the information contained in the register in order to comply with legislation or regulatory requirements.
Profiling
Personal information is not used for profiling or other automated decision making.
Rights of the data subject
Right of access to personal data:
The data subject has the right to receive confirmation as to whether personal data concerning him or her are being processed and data subjects also have the right to obtain a copy of their personal data.
Right to rectification:
The data subject has the right to request that inaccurate and incorrect personal data concerning him or her be corrected. The data subject also has the right to have incomplete personal data supplemented by providing the necessary additional information.
Right to delete data:
The data subject has the right to request the deletion of personal data concerning him or her if:
a. personal data are no longer required for the purposes for which they were collected; or
b. personal data have been processed unlawfully.
Right to restrict processing:
The data subject has the right to restrict the processing of personal data concerning him if:
a. The data subject disputes the accuracy of his personal data.
b. The processing is unlawful and the data subject opposes the deletion of his or her personal data and instead requests that their use be rec.
c. the registrar no longer needs personal data for the original purposes of the processing, but the data subject needs them to make, present or defend a legal claim.
Right to transfer data from one system to another:
A registered person has the right to receive their personal data in a structured, commonly used and machine-readable form and the right to transfer the data in another system.
Right to appeal to the supervisory authority:
You have the right to refer the matter to the supervisory authority if you consider that the processing of personal data concerning you violates the relevant legislation.