1. Data Controller

Name: Lena Korkea-aho
Business ID: 3335269-4
Address: Kuusinevantie 11A
Postal Code: 02620
City: Espoo
Phone Number: +358 50 309 9909
Email Address: lena.korkea-aho@lumocon.fi

2. Person in Charge of Register Matters

Company: Lumocon
Name: Lena Korkea-aho
Address: Kuusinevantie 11A
Postal Code: 02620
City: Espoo
Phone Number: +358 50 309 9909
Email: lena.korkea-aho@lumocon.fi

3. Data Protection Officer

Company: Lumocon
Name: Lena Korkea-aho
Address: Kuusinevantie 11A
Postal Code: 02620
City: Espoo
Phone Number: +358 50 309 9909
Email: lena.korkea-aho@lumocon.fi

4. Purpose of the Register

The collected personal data is used for:

Customer identification and management of access rights, delivery of orders for registered users, and maintaining and developing the customer relationship.

5. Basis for Data Collection and Processing

Customer data is collected and processed with the customer’s consent or to execute an agreement made with the customer.

6. Register Data Content

Company Name, Business ID, Email Address, Phone Number, Personal Identification Number, Username, and Password.

7. Data Retention Period

Personal data is retained as long as necessary to execute the agreement made with the customer, maintain the customer relationship, or develop customer service.

8. Regular Data Sources

Data is collected:

From the individual themselves, from public registers maintained by authorities within the limits allowed by law (e.g., ytj.fi), and through the Google Analytics tool.

9. Regular Data Disclosures and Data Transfers Outside the EU or European Economic Area

Data is not regularly disclosed outside the company. Some external service or software providers used by the company may store data outside the EU or European Economic Area.

10. Use of Cookies

We use cookies on our website. A cookie is a small text file sent to and stored on a user’s computer, allowing the website administrator to recognize frequent visitors, facilitate their login to the site, and compile aggregate data about visitors. This feedback helps us continuously improve our website content. Cookies do not harm users’ computers or files. We use them to provide information and services tailored to each customer’s individual needs.

If a user visiting our website does not want us to obtain the above-mentioned information via cookies, most browser programs allow the cookie function to be disabled. This is usually done through the browser settings.

However, it is important to note that cookies may be necessary for the proper functioning of the website and the services we offer.

11. Register Security

Data is transferred over an SSL-secured connection.

Electronic data is protected by a firewall, usernames, and passwords.

Only those employees of the data controller who need the information in their tasks have access to the data.

12. Automated Decision-Making

Automated individual decisions (Article 22 of the EU General Data Protection Regulation) are not made.

13. Rights of the Data Subject

The data subject has the right to check what data about them has been stored in the personal data register. A written request for inspection should be sent signed to the person responsible for register matters.

The right of inspection is free of charge if exercised no more than once a year.

The data subject has the right to request the correction or deletion of incorrect or outdated data or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.

The data subject has the right to withdraw their consent to data processing previously given or to make a complaint to the supervisory authority about matters related to the processing of their personal data.

The data subject also has the right to prohibit the use of their data for direct marketing purposes.