This is a privacy policy and register description for Deliciosa Oy (2991575-7). The latest amendment was made on 23.03.2023.

1. Register holder: Deliciosa Oy (2991575-7), Tourulankatu 9, 37150 Nokia.

2. Register name: The company’s customer register, marketing register, and user register for online services.

3. Legal basis and purpose of personal data processing: The legal basis for processing personal data is as follows:

– Consent of the person concerned (documented, voluntary, individual, informed, and unambiguous)
– Contract in which the registered person is a party
– The legitimate interest of the register holder (customer relationship, employment relationship)

The purpose of personal data processing is communication with customers, maintaining customer relationships, and marketing. The data is not used for automated decision-making or profiling.

4. Register contents: The register contains the following information: name, position, company/organization, contact details (telephone number, email address, address), website addresses, IP addresses for internet connections, profiles on social media services, information about ordered services and their modifications, billing information, and other information related to customer relationships.

5. Regular data sources: The data is obtained from the customer through website forms, email, telephone, social media, contracts, customer meetings, and other situations where the customer provides information.

6. Regular disclosures of data and transfer of data outside the EU or EEA: Data is not regularly disclosed to other parties. Information may be published to the extent agreed upon with the customer. Data may be transferred outside the EU or EEA by the register holder.

7. Principles of register protection: The data is handled with care, and information systems are used to protect the data appropriately. When register data is stored on internet servers, their physical and digital security is taken care of accordingly. The register holder ensures that the stored data and access rights to the servers and other information critical to the security of personal data are handled confidentially and only by employees whose job it is.

8. Right to inspect and request correction of data: Every person in the register has the right to check the information stored about them and to request correction of any incorrect information or completion of any incomplete information. If a person wishes to check the information stored about them or request its correction, they must send a written request to the register holder. The register holder may ask the requester to prove their identity if necessary. The register holder responds to the customer within the time limit set by the EU’s data protection regulation.