PRIVACY AND DATA PROTECTION STATEMENT

Based on the European Parliament and Council Regulation (EU) 2016/679 (GDPR)

Data controller: Kotimaailma Suomi Oy, Business ID 2830552-7
Address: Malmin raitti 9, 00700 Helsinki
Contact information and contact person: kotimaailma.com, Antti Junttonen, +358 504417555, keskus@kotimaailma.com
Name of the register: Customer Register
Data processor(s): Antti Junttonen (Article 13(1)(d))

Purpose of processing personal data

The personal data register has been established to manage potential customer and service relationships (Article 6, lawful basis for processing, points b and f).

Data collection related to accommodation activities to support official duties: Act on Accommodation and Catering Services, Articles 7 and 8.

Contents of the register

The register contains the name and necessary contact details of the potential customer of Kotimaailma Suomi Oy (individual or company) and their contact person, i.e., email address and/or phone number, as well as the customer’s/company’s address. If contact results in a customer relationship, the register is updated with information about the services ordered by the customer, their delivery, and invoicing.

User tracking

We use Leadoo user tracking to monitor how users navigate our website and combine this data with information collected through chat interactions, for example. Leadoo uses etag tracking, which differs technically from cookie-based tracking but is subject to the same legal regulations as cookies. Please review Leadoo Marketing Technologies Oy’s privacy policy (https://leadoo.com/privacy-policy/) to learn more about what is tracked. Regarding GDPR, we act as the controller and Leadoo as the data processor. If you do not want to be tracked, you can clear your browser cache. For more details on how Leadoo operates, see https://leadoo.com/privacy-policy-processor/.

Regular sources of data

Stored data is primarily collected through Kotimaailma Suomi Oy’s own activities, such as customers themselves (e.g., contact via email or phone), or through searches for potential customers conducted by Kotimaailma Suomi Oy (e.g., by browsing public registers such as Google, Finder, Fonecta, etc.).

Regular data disclosures

Kotimaailma Suomi Oy may disclose your data to an accounting office when necessary for bookkeeping and invoicing tasks.

Data transfer outside the EU or EEA

Kotimaailma Suomi Oy does not transfer customer data outside the EU or EEA.

Data protection principles

Kotimaailma Suomi Oy mainly processes data electronically. Any necessary temporary manual data is stored in locked premises. Electronic data is protected against unauthorized access outside the organization using firewalls and strong passwords.

Rights of the data subject

You have the right to request access to your personal data held by Kotimaailma Suomi Oy, the right to request correction or deletion of such data, the right to restrict processing or to object to processing, and the right to data portability. You also have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (Article 6(1)(a) or Article 9(2)(a)). Additionally, you have the right to lodge a complaint with a supervisory authority. Instructions for this can be found at tietosuoja.fi/etusivu (Article 13(2)(b, c, d)). You also have the right to be forgotten, i.e., to request that Kotimaailma Suomi Oy deletes your data (Article 17).

You can exercise these rights by sending a message to keskus@kotimaailma.com. We will take action immediately or at the latest within one month as required by the regulation.

Data retention period

Data may be retained for archival purposes in the public interest (Article 89). This enables the data subject, who wishes to be forgotten, to avoid accidental re-contact if their data appears in another context.