PRIVACY POLICY

This is a Register Data Description and Privacy Policy Statement of More Joy Oy under the Personal Data Act and the EU General Data Protection Regulation.

1. Controller:
More Joy Oy, Raittilantie 59, 39700 Parkano, FINLAND

2. Controller Contact Information:
Susanna Myllymäki, susanna (at) morejoy.fi, tel. +358 50 589 9799

3. Name of Registry:
More Joy Oy Customer and User Register

4. Registry Content:
Customer and/or company information (name, address, mail, telephone, business identity code/ID, billing information, webpage username and encrypted password, order and purchase history, contents of communication, and other information deemed relevant given by the user).

5. Processing of Personal Data:
The personal data of the customer is collected and processed in various stages of the customer relationship for the use of comprehensively and successfully managing the customer relationship. Customer relations begin, without exception, with the consent of the customer and per various agreements. Personal data is collected for use in e.g. trade fairs, the webstore, the various stages of processing purchase orders, informing the customer of our services and in other communications. A separate consent is always requested for direct marketing, and the customer can choose to terminate the direct marketing at any time through their own means. Personal data is not used for automated decision-making.

6. Securing and Maintaining Personal Data:
The information is kept in digital password-protected environments, which can only be accessed by designated customer service personnel via personally logging in. Collected information can be removed per written customer request, taking into account previous sales transactions and the Accounting Act in relations to them.

7. Disclosure of Information:
Customer information will not be sold nor disclosed to any third parties. In instances designated by law, customer information may be disclosed to the authorities per their specific request. Personal data will not be transferred outside the EU or EEA.

8. Right to Review and Right to Request Rectification:
A person/company within the EU, whose information is stored in our registry, has the right to request the deletion of information concerning the person from the registry. Furthermore, the data subject has the right to request the restriction of the processing of the data in certain situations (e.g. direct marketing). The request must be sent in written form to our controller and requires proof of identity. The controller will respond to the request within four (4) weeks.