Data Controller
Lumria
Business ID: 3207329–8
Tuureporinkatu 19
20100 Turku Finland
Lumria / Mira Penttilä
Sairashuoneenkatu 7 a 1
20100 Turku Finland
bylumria@gmail.com
+3584578745192
Data Subjects
The register includes customers who have contacted us and potential customers.
Purpose of Processing Personal Data
The personal data in the register is used only for predefined purposes, which are as follows:
- Managing customer relationships
Personal Data Stored in the Register
The customer register contains the following information:
- Name
- Email address
- Phone number
- Address (if the order is delivered by post)
- Information about purchased products/services
Rights of the Data Subject
Requests concerning the exercise of the following rights must be sent to: bylumria@gmail.com
Right of Access
The data subject has the right to check the personal data we have stored about them.
Right to Rectification
The data subject has the right to request correction of inaccurate or incomplete data concerning them.
Right to Object
The data subject has the right to object to the processing of personal data if they believe the data has been processed unlawfully.
Right to Prohibit Direct Marketing
The data subject has the right to prohibit the use of their data for direct marketing purposes.
Right to Erasure
The data subject has the right to request the deletion of their data if the processing of the data is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why the data cannot be deleted.
Please note that the data controller may have a statutory or other legal right not to delete the requested data. The data controller is obligated to retain accounting materials for the period specified in the Accounting Act (Chapter 2, Section 10), which is 10 years. Therefore, accounting-related materials cannot be deleted before the retention period has expired.
Withdrawal of Consent
If the processing of personal data concerning the data subject is based solely on consent and not, for example, on a customer relationship or membership, the data subject may withdraw their consent.
Right to Restriction of Processing
The data subject has the right to request that we restrict the processing of disputed data until the matter is resolved.
Right to Lodge a Complaint
The data subject has the right to lodge a complaint if they believe that we are violating applicable data protection legislation when processing personal data.
Regular Sources of Information
Customer data is regularly obtained:
- From the customer when the customer relationship is established
- From the customer via an online form
- From the customer via email or telephone contact
Regular Disclosures of Data
Data is not disclosed outside the company for marketing purposes.
However, data may be used, for example, for postal deliveries, in which case information is transferred to the shipping company.
Data Retention Period
Data is generally processed and stored for as long as the customer relationship is valid. For complaint purposes, work orders and the related contact details are stored for 6 months.
For custom-made orders, data and patterns are stored for 12 months.
Processors of Personal Data
Personal data and the customer register are processed by the data controller and their employees.
Transfer of Data Outside the EU
Data is not transferred outside the European Union or the European Economic Area.
Automated Decision-Making and Profiling
We do not use personal data for automated decision-making or profiling.