Privacy Policy
Customer register of Nuppu Print Company Oy
REGISTRAR
Nuppu Print Company Oy
Vattuniemenkatu 15 A
00210 Helsinki
nuppu@nuppuprint.com / info@accidentalideas.com
045 697 4480
Business ID 2765417-8
Contact person: Jenni Sundberg
REGISTERED
Customers of Nuppu Print Company, registered customers, newsletter subscribers and contact persons for customer companies.
REASON FOR THE REGISTER
The Nuppu Print Company customer contact details and subscription information are saved in the register based on the customer relationship, alias, and the agreement. Details of registered customers will be saved only with the customer’s consent.
PURPOSE OF HANDLING AND REGISTERING PERSONAL DATA
Personal data will only be processed for predefined purposes:
- order delivery
- customer service
- reclamation and quality control
- marketing
- direct marketing
- service and product development
- providing additional services
- data analysis
- statistics
- customer service development.
RECEIVERS OF PERSONAL DATA AND PERSONAL DATA PROCESSORS
Personal data can be processed by our employees who have a legitimate reason for processing orders and for customer service.
PERSONAL DATA TO BE REGISTERED
The following personal information can be found in the register:
- first name, last name
- address
- email address
- phone number
- ordering and billing information
- contacts and customer feedback.
THE RIGHTS OF THE DATA SUBJECT
You have the following rights, requests for which must be made to the following address: nuppu@nuppuprint.com.
The right of inspection
You have the right to review your personal information and, if you notice any errors or omissions in your information, request to correct it.
The right to object
You have the right at any time to object to the processing of your personal data should you consider that we have treated it unlawfully or that we do not have the right to have it.
The right for deletion
You have the right to ask us to remove any information you consider to be unnecessary for our purposes. We will process your request, after which we will either remove your information or give you a reasoned reason why it cannot be removed, for example because of the requirements of the Accounting Act or excessive costs.
Right of appeal
You have the right to complain to the Data Protection Officer if you feel that we have broken the data protection legislation.
Right to transfer data
You have the right to request that your data be transferred to another system.
SOURCES OF INFORMATION
The information contained in the register has been obtained directly from the registered users by logging in to the e-commerce system or by e-mail, telephone, contact form on the website www.nuppuprint.com via the mobile application or similar means.
We also collect information using cookies or other similar techniques. We use tools from Google and Meta (Facebook) for tracking customers and targeting marketing.
User tracking
We use Leadoo’s tracking service to follow what users are doing on the site and combine this behavioral data with other data we can gather from e.g. chat interactions. Leadoo uses etag tracking in order to hook together the same users behavior over several sessions – in practice this works similarly to cookie based tracking. Please check out Leadoo Marketing Technologies Ltd’s Privacy Policy (https://leadoo.com/privacy-policy/) for more information on what is tracked and what your rights are. Leadoo works as the Processor and we work as the Controller for the data in terms of GDPR. You can stop the tracking by emptying your browser’s cache after the visit. For more on how Leadoo works as a GDPR compliant processor, see https://leadoo.com/privacy-policy-processor/.
DISSEMINATION OF DATA
We will only pass on information to third parties in the following cases:
- to partners or subcontractors for the service provided to the data subject
- for statistical purposes
- in the case of a merger within a new organization.
The information is disclosed to third parties where warranted by order processing and customer service or, for example, financial management. Third parties include, for example, the webshop platform administrator, the payment service provider, the transport service provider and the accounting firm.
TRANSFERRING DATA OUTSIDE OF THE EU
Data may be disclosed outside the EU to the following service providers who are committed to complying with the EU Data Protection Regulation by signing the Privacy Shield Agreement.
DURATION OF DATA PROCESSING
Personal data will be processed as long as the customership is in force or the company provides the services for which the customer has expressed an interest, and for a reasonable period of time after the customership has expired, however for a maximum of 10 years.
PRINCIPLES OF REGISTER PROTECTION
The use of the register is protected by a password and a username. The system in which the registry is located is also protected by a firewall and antivirus software.
Only those employees who need to implement the measures described in this report will have access to the system. Access to the register is limited by username.
The registry is back-up copied regularly.
This Privacy Policy has been compiled on May 24, 2018 and has been updated on April 14, 2021. The report may be updated from time to time.