The personal data of Urumi Oy’s customers is collected in connection with registration and ordering in the customer register. This register statement explains what information is collected and what it is used for.

1. Register holder
Urumi Oy
Vuorikatu 30
70100 Kuopio
asiakaspalvelu@urumi.fi
www.urumi.fi

2. Name of the register
Urumi Oy’s customer register.

3. Purpose of use of the register
The register is used for processing customer orders, other customer relationship management and direct marketing. The information in the register is only used for Urumi Oy’s own direct marketing, unless the customer has prohibited direct marketing. The information in the register is not disclosed to external parties. Urumi Oy uses customer data and other data generated during the customer relationship only in its own operations and does not pass them on to third parties.

4. Data content of the register
The customer register consists of the data sets stored about the customer as follows: Online store customers identification data: the customer register stores the data that the customer has filled in when registering as a customer of Urumi Oy’s website or placing an order. Mandatory information is first name, last name, street address, zip code, post office and email address. In addition, subscribers to the newsletter, information on customer orders, deliveries, returns, points and special services (e.g. duplicate guarantee) are stored. The website also automatically saves the IP address from which the customer registers or places an order.

The customer’s payment information (bank, credit card, PayPal, etc.) is not stored in our system, but is processed by the Checkout.fi service.

The site uses cookies, for example, to guarantee the functionality of the shopping cart, login and registration.

5. Regular sources of information
The register’s contact and customer information is obtained from notifications made by the customer to the controller or changes made by the customer when the customer relationship is created and during it. A customer relationship is created when
1) the customer registers as an online store customer or
2) orders goods.
3) orders an electronic newsletter

When registering, the customer can decide whether he subscribes to an electronic newsletter or does he prohibit direct marketing.

6. Regular disclosures of information and transfer of information outside the EU or the European Economic Area
Name and address information from the customer register is not disclosed to outsiders. Data is stored on a Siteground server located in the United States.

7. Register protection principles
Only specially designated representatives and employees of Urumi Oy are entitled to use the computerized system containing customer data and to change customer data. The customer register and the information system hardware that processes it are located in locked rooms that are closed to outsiders.

The information is regularly backed up. The system in which personal data is stored and processed is protected by a firewall against outside contacts. The duty of confidentiality binds representatives of Urumi Oy who process customer register data. Information is shared or disclosed to outsiders only due to the notification obligation based on law.

8. Where the personal information is obtained

Urumi Oy’s personal information is stored and disclosed by the customers themselves. Personal information is not purchased from third parties.

If you suspect that someone has registered or placed orders with your personal information without your permission, please contact customer service: kaspalvelu(a)urumi.fi.

9 . Personal data storage period
Personal data is stored as long as it is necessary in terms of the purposes of personal data processing or to comply with the legal obligations of the controller. The personal data of inactive customers is deleted regularly. The individual inactive order information of active customers is deleted when it is more than 2 years old.

10. Security of personal data processing

Personal data is stored in the controller’s electronic system, to which only employees of Urumi Oy have access. The system is protected by firewalls and other technical means.
11. Customer rights

The customer has the right:

* The right to see the information stored about him< /p>

* The right to correct data stored about him/her

* The right to delete data

* The right to file a complaint with the supervisory authority

If the customer wants to see, correct or delete information, he should contact customer service: kaspalvelu(a)urumi.fi . The data can be deleted if the customer has no unprocessed orders in his account. No separate reason is required for seeing, correcting or deleting information. The customer’s information is verified via e-mail, address, phone number or old orders before entering, changing or deleting the information.
The customer has the right to file a complaint with the supervisory authority if the customer considers that the processing of personal data has violated the customer’s rights based on the data protection settings. In Finland, the supervisory authority is the office of the Data Protection Commissioner.