NettiKulta - Data protection policy

1. Combined register description and information document

Personal data law (523/1999) 10 § and 24 §

NettiKulta
Lapinlahdenkatu 19 A
00180 Helsinki
Y-tunnus: 2494243-0

2. Contact person for register matters

Customer service

asiakaspalvelu[a]nettikulta.fi

3. Register name

User register for NettiKulta's online service

4. Purpose of the processing of personal data (purpose of the register)

The personal data stored in the user register for NettiKulta's online service is used to send gold sales packages, manage contacts and for other purposes related to the online services. The personal data in the customer register can also be used for marketing purposes by the data controller or third parties in accordance with the Personal Data Act and the instructions from the data protection officer. The customer can prohibit the use of their data for marketing purposes by sending the ban via e-mail to asiakaspalvelu@nettikulta.fi

5. Information content of the register

The register collects basic information about the registered person:

- name
- address
- phone
- email
- IP address

6. Regular sources of information

The registrar registers the information about the user of the NettiKulta's online service that the user himself provides when he uses the website.

7. Regular data transmission and data transmission outside the EU or the European Economic Area

No regular information to third parties. No data transfers outside the EU or EEA.

8. Principles for registry security

The user register information for the NettiKulta's online service is stored in the registrar's system, which is protected by the system's security software. To gain access to the system, a username and password are required. The system is also protected by firewalls and other technical means. Only certain predefined employees of the controller have access to and have the right to use the information in the register stored in the system. The information in the register is available in locked and guarded premises.

9. Right to a ban for the data subject

The registered person has the right to prohibit the data controller from processing personal data about him / her for direct advertising, distance selling and other direct marketing, as well as for market and opinion polls as well as for personal registration and genealogy. The ban must be made in writing and addressed to the persons responsible for registration.

10. The right to inspect the data subject

The data subject has the right to inspect the personal data stored in the register and obtain copies of them. Requests for inspections must be made in writing and addressed to the person responsible for registration matters.

11. Correct information

The data controller shall correct, delete or supplement personal data in the register that are incorrect, unnecessary, incomplete or out of date for processing on his own initiative or at the request of the data subject. The data subject must contact the controller's controller to correct the information.