Privacy statement, record of processing activities, and statement on the use of cookies

Cloudboots products are sold by EV Lataus Oy (business ID 3100964-9).

This document constitutes a privacy statement and record of processing activities as laid down in sections 10 and 24 of the European Union’s General Data Protection Regulation (GDPR) and has been drawn up for EV Lataus Oy on 5 December 2019.

Registrar:

EV Lataus Oy

Lauhakuja 14

33870 Tampere

ville@evlataus.fi

Responsible person:

Ville Mäkelä
ville@evlataus.fi

Legal basis and purpose of processing personal data:

EV Lataus Oy collects personal data for customer relations management and marketing purposes. 

The processing of personal data is based on the contract concluded between EV Lataus Oy and the buyer (a purchase) and the resulting legal obligations. In order to enter into the contract with EV Lataus Oy, the buyer must provide their personal data to EV Lataus Oy. In other words, you cannot order products from our online store without providing us with your personal data. 

The legal basis for the processing of personal data is a contract in which the data subject is a party. EV Lataus Oy will not use your personal data for profiling or subject you to decisions made based on automatic processing.

Data types included in the register

The register includes the following types of personal data:

The data stored in the register consists of the following: the person’s name, their contact information (phone number, email address, street address), information regarding the ordered products, billing information, and other information related to the customer relationship and the ordered services.

Information related to managing the customer relationship, such as:

Customer communications (incl. feedback and reclamations)

Possible marketing activities directed towards the data subject, as well as other activities related to maintaining the customer relationship.

Direct marketing permits and prohibitions

Changes to the above-mentioned data or information.

Regular data sources

The data stored in the register is obtained from customers through, for example, messages sent using an online form, email communications, phone conversations, social media, contracts or agreements, customer meetings, and other situations where the customer provides data to the registrar.

Regular transfer of data and transfer of data outside the EU or EEA

Your personal data is transferred to the following parties:

– EV Lataus Oy

– The payment gateway service (Paytrail) that receives payment from you

– The transport company delivering the goods to you

– The accounting office that records your order in our bookkeeping system

– The auditor reviewing EV Lataus Oy’s bookkeeping

– The IT company maintaining EV Lataus Oy’s website (Ajaton Idea Oy), as well as any third-party applications it offers

The data is not regularly disclosed to any other parties. The data may be published to the extent that this has been agreed upon with the customer.

The registrar may also transfer the data outside the EU or the EEA.

Data protection policy regarding the register:

The online store is operated by Ajaton Idea Oy. Ajaton Idea Oy provides EV Lataus with a web-based e-commerce platform that allows EV Lataus Oy to sell its products. The data is stored on servers that are protected using firewalls.

The data contained in the register is only accessible to and access is only granted to named employees whose job description includes processing this data. These employees are bound by a duty of confidentiality.

We will store your personal data for the following durations:

– For five years in the online store

– For seven years in our email archive

– For seven years as a part of our accounting materials

Right of access and right to demand rectification

Each data subject is entitled to access the personal data stored about them in the register and to request that any incorrect or incomplete data be rectified. If a data subject wishes to access the personal data collected about them or request that it be rectified, they must submit a written request to the registrar. The registrar may require the data subject to prove their identity. The registrar is obliged to respond to the customer within the timeframe stipulated in the GDPR (generally within a month).

Right of access and right to demand rectification

Data subjects have the right to request the registrar to erase any personal data stored about them in the register (the so-called right to be forgotten). The GDPR also grants data subjects other rights, such as the right to restrict the processing of their data in certain situations. Any requests must be submitted to the registrar in writing. The registrar may require the data subject to prove their identity. The registrar is obliged to respond to the customer within the timeframe stipulated in the GDPR (generally within a month).

Please note that the right to be forgotten only applies in instances where EV Lataus Oy is not obligated to continue processing your personal data for statutory reasons.

Use of cookies

We use cookies to better communicate with our customers and to target and improve our services.

A cookie is a small text file saved on the your device when you visit a certain website. Cookies allow the administrator of the website to identify the visitor when they return to the website. They may also be used to identify the visitor on another operator’s website. In this case, the operator’s website may display an ad connected to the website on which the cookie originated. Visitor identifiers include information regarding the device used, choices the visitor has made, and the pages they have viewed.

The information stored in the cookies enables us to provide visitors with targeted content and enables the website to function more smoothly.

Cookies are not harmful to your device or your files.

However, your browser settings may prevent the use of cookies. You can disable or enable cookies by changing the settings. If you disable cookies altogether, please note that this may affect the functioning of the service.

We also use the Facebook pixel. You can read more about the pixel here: https://www.facebook.com/policy.php. If you do not want Facebook to track you, you can opt out of tracking in Facebook’s service. You can find more information regarding the cookies and other information storage technologies used by Facebook, as well as how to opt out of tracking, in Facebook’s Help Center.