This is the Register and Privacy Statement of Aurora Incoming Levi's Personal Data Act (sections 10 and 24) and the EU's General Data Protection Regulation (GDPR). Created on 08.05.2018.
Aurora Incoming Levi Ltd., Torikuja 10 A, 99130 Sirkka
2. The contact person responsible for the register
3. The name of the registry
Employer and Customer Register
4. Legal basis and the purpose of processing personal data
An up-to-date list of all services offered by Aurora Incoming Levi is always available at www.polarstartravel.fi The purpose of the register is to maintain Aurora Incoming Levi Oy's customer register and archive and process customer orders as well as customer relationship management. This information can be used for business development, statistical purposes, and more personalized targeted content on our online services. Personal data will be processed within the limits permitted and required by the Personal Data Act. The information in the register can be used in Aurora Incoming Levi's own registers to target advertising without giving personal information to third parties. Aurora Incoming Levi Oy may use partners to maintain customer and service relations. Part of the registration information may be transferred to partner servers for technical reasons. The information is only processed to maintain Aurora Incoming Levi's customer relationship through technical interfaces.
5. Information content of the register
The person register may contain the following information:
• First and last name of the person
• Email address
• Postal address
• Phone number
• Details of orders processed
Information about customer relationship and other relevant contexts, such as
- customer number
- the information required at any time in the cooperation agreements between the controller and other undertakings
- transaction and usage information, for example information on transactions within customer relationship and service usage order information, such as subscriber and recipient information, product information, bidding information, price information, billing information, delivery information, payment information, cancellation information, refund information, supply bans and complaint data,
- consent for direct mail marketing via email, text messaging and other automated systems, direct marketing prohibitions and information on the address
Details of the details specified above. The information is stored as long as the work or customer relationship lasts
6. Regular sources of information
Personal data is added to the register by users themselves, for example, when starting Aurora Incoming Levi Services. The information stored in the register is obtained from the customer, among others. via email, phone, social media, contracts, customer meetings and other situations where the customer delivers their information. In addition, they can be collected from Aurora Incoming Levi Oy companion information systems when a registered person registers for services or uses services, as well as social media related to the registrar's activities.
7. Ordinary transfers of data and transfer of data outside the EU or EEA
The information contained in the Customer Register is only available to Aurora Incoming Levi, except when Aurora Incoming Levi uses an external service provider who needs specific information about the service. However, the information is not ordinarily disclosed to Aurora Incoming Levi Ltd or to its own use by its partners, except in the case of the obligation to do so or when required by law. The information may also be published in so far as this has been agreed with the customer.
Personal data will not be transferred outside the European Union unless it is necessary to ensure the technical implementation of Aurora Incoming Levi Oy or its partner.
Data may be transferred outside the EU or the European Economic Area, as permitted by the Personal Data Act.
Registered personal data will be disposed of at the request of the user unless legislation, open invoices or recovery operations prevent the deletion of data.
Personal information will be disclosed only to companies that have cooperated with Aurora Incoming Levi Oy. The information is provided through technical use, as a technical record or as a paper printout.
The controller may disclose information, within the limits permitted and mandated by the applicable legislation, to, amongst other things, the registrar's selections to partners for marketing purposes unless the data subject has denied such disclosure.
8. Principles of registry protection
The data controller and files of the controller are protected by the technical protection methods normally used in the business. The register will not be handed over to third parties. Access to the register requires a personal username and password that are only granted to a registrar's staff whose status and duties are associated with the access.
A. Manual material
The information is stored in the registrar's premises that are locked.
B. Information deposited with ATK
The electronic register is located on user-protected secure servers. The registry only has access to those who are in the service of the registrar and other people who are in need of information in their duties. They have usernames and passwords. The information is technically protected by a firewall. Recordings will be kept for the duration of the personal use.
9. The right of inspection and the right to demand correction
A person entered in the register can check what information has been entered in the register or that the register does not have information about him. The request for verification of the information must be submitted in writing to Aurora Incoming Levi Oy.
The controller may, if necessary, request the applicant to prove his identity. The controller is responsible for the customer within the time limit set in the EU Data Protection Regulation (usually within one month).
If there is an error in the registered data, the registrar may submit Aurora Incoming Levi Oy a request for correction of the error.
Right of Refusal
The advertiser has the right to deny access to his / her data for direct mail, distance selling or other direct marketing, opinion and market research and the right to claim for correction of incorrect information by contacting the person responsible for the register or by informing the registrar's customer service.
10. Other rights related to the processing of personal data
A person in the register has the right to request the deletion of his / her personal data from the register ("the right to be forgotten"). Also, those who are registered have other rights under the EU's general data protection regulation such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the registrar. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible for the customer within the time limit set in the EU Data Protection Regulation (usually within one month).
If a registrar wants more information on his / her personal data processing at Auroa Incoming Levi Oy, he may send a letter to the above address or call 010 325 40 40.