Privacy Policy

This privacy policy applies to the services provided by Evenrue Markkinointi Oy and explains how we process your personal data and your rights as a data subject.

1. Data controller

2. Purpose and legal basis for processing personal data

Personal data is processed for the following purposes:

• Managing and developing customer relationships
• Marketing and communications
• Delivering and developing services
• Fulfilling statutory obligations

The legal basis for processing is the performance of a contract, the data controller's legitimate interest, consent or a statutory obligation.

3. Personal data processed

The data processed in the register may include, among others:

• Name
• Contact details (address, phone number, email address)
• Information related to the customer relationship (e.g. order history, customer feedback)
• Information concerning use of the online service (e.g. data collected through cookies)

4. Data retention period

Personal data is retained only for as long as necessary to fulfil the purposes described above or for as long as required by law. For example, customer data is retained for the duration of the contract and thereafter for the period needed to perform the contract. Data processed for marketing purposes is deleted when the data subject withdraws their consent or objects to marketing.

5. Disclosure and transfer of data

Personal data may be disclosed only in situations permitted or required by law to the following parties:

• Authorities, in order to fulfil statutory obligations
• Service providers that process personal data on behalf of Evenrue Markkinointi Oy (e.g. IT service providers)

Data may be transferred outside the European Union or the European Economic Area only if the European Commission has determined by decision that the country in question ensures an adequate level of data protection, or if appropriate safeguards have been put in place. For transfers to the United States, approved transfer mechanisms such as the EU standard contractual clauses are used.

6. Rights of the data subject

The data subject has the following rights relating to their personal data:

• Right of access: the right to obtain confirmation as to whether data concerning them is being processed, and the right to access that data.
• Right to rectification: the right to request the correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): the right to request the erasure of their data in certain situations.
• Right to restriction of processing: in certain situations, the right to request the restriction of processing.
• Right to object to processing: the right to object to processing when it is based on the data controller's legitimate interest.
• Right to data portability: the right to receive the data in a machine-readable format when the processing is based on consent or a contract and is carried out automatically.

The data subject must submit requests relating to their rights in writing to the data controller. The data controller will respond to requests within one month at the latest.

7. Data security

Evenrue Markkinointi Oy observes the principle of due care in the processing and protection of personal data. We use appropriate technical and organisational measures to ensure the security of personal data and to protect it against unauthorised access, alteration or loss.

8. Contact

If you have any questions about this privacy policy or the processing of your personal data, you can contact us at info@evenrue.fi.

9. Changes to this privacy policy

This privacy policy may be updated as necessary. We recommend that you regularly review the current privacy policy on our website.