This is the Company’s register and data protection statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR).
Updated on 1.7.2019.
Plan&Care Sports Oy
Business ID: 2845110-2
Kaviokatu 24 as. 4 15830 Lahti, Finland
Contact person for matters concerning the register
Name of the register
Plan&Care Sports Oy – Customer Register
Purpose of processing personal data
General conditions according to Section 8 of the Personal Data Act;
Management and maintenance of the customer relationship
Customer letters and newsletters
Marketing to own customers
Analysis and statistics
Content of the register
Basic customer information
Language of service
Customer identifiers related to the use of online services:
Customer IP address (for subscriptions and logging in to the service)
Regulatory data sources
Data provided by the customers themselves
Customer self-declaration of blocking
Regular disclosures of data
Data will not be disclosed outside the EU or EEA.
Duration of retention of personal and business data
Personal and business data will be kept for as long as necessary for purposes such as customer relationship management, domain name management and record keeping.
It will be deleted when it is no longer necessary to keep it.
Principles of register security
The data will be stored in a technically secure server room. Physical access to the server room where the data are located is prevented by access control and other security measures. Access to the data requires sufficient privileges and multi-factor authentication. Firewall technology, for example, is used to prevent external attacks and access to registry data. Registry data is backed up securely and can be restored if necessary.
Personal and company data is processed only by persons specifically designated by Plan&Care Sports Ltd and our partners, who are employed by Suomen Hostingpalvelu Oy. These persons will be authenticated to the systems with a personal user name and password. The users are bound by confidentiality.
A data subject in the register has the right to, among other things:
To request from the controller access to personal data concerning him or her and the right to obtain the rectification or erasure of such data or the restriction of processing, or to object to processing. The person concerned has the right to have any data relating to him/her which have been incorrectly recorded in the register amended.
in so far as the processing of personal data is based on the data subject’s consent, the right to withdraw consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of consent before its withdrawal
to lodge a complaint about the processing of personal data with a supervisory authority
Consents and prohibitions on direct marketing
The customer has the possibility to block all direct marketing by Plan&Care Sports Oy by sending an e-mail to [email protected]
Translated with www.DeepL.com/Translator (free version)