PRIVACY POLICY

Register and Privacy Statement

This is Lilja C Oy’s registration and data protection statement in accordance with the EU General Data Protection Regulation (GDPR). Prepared on 15 May 2023. Latest change 15.05.2023.

1. Registrar

2. The contact person responsible for the register

3. Register name

Lilja C website user register and marketing and customer register.

4. Legal basis and purpose of personal data processing

According to the EU’s General Data Protection Regulation, the legal basis for processing personal data is the person’s consent.

The register is used to manage customer and partnership relationships.

Our basis for processing is a legitimate interest in terms of marketing and the execution of the contract between you and us in terms of customer relationship management.

The purpose of personal data processing is marketing and communication with customers and maintenance of customer relations.

The information is not used for automated decision-making or profiling.

We store personal data as long as it is necessary to fulfill the purposes defined in this register.

5. Data content of the register

The information to be stored in the register is the following information:

Company name and social security number
User's first and last name
User's email address (not public)
User role (not public)
Comments added by the user
The IP address of the network connection

Information stored about Lilja C’s newsletter subscribers is:

IP addresses of website visitors and cookies necessary for the functions of the service are processed on the basis of a legitimate interest, e.g. to take care of data security and for the collection of statistical data of website visitors in those cases when they can be considered as personal data. If necessary, consent is requested separately for third-party cookies.

6. Regular sources of information

The information to be saved in the register is obtained from the customer, e.g. From messages sent via web forms, by e-mail, by phone, via social media services, contracts, customer meetings and other situations where the customer gives out their information.
Contact information for companies and other organizations can also be collected from public sources such as websites, directory services and other companies.

7. Regular transfers of data and transfer of data outside the EU or EEA

8. Principles of registry protection

Care is taken when processing the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

9. Right of inspection and right to demand correction of information

Every person in the register has the right to check their information stored in the register and demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about him or demand correction, the request must be sent in writing to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).

10. Other rights related to the processing of personal data

A person in the register has the right to request the removal of personal data about him from the register (”the right to be forgotten”). Those registered also have other rights according to the EU’s General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests must be sent in writing to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).

11. Cookies

On our website, we use the so-called cookie function, i.e. cookies. When using the site, the user of the site (Visitor) gives his consent to the use and storage of cookie files related to the site as described below.
Cookies are used e.g. for measurement and research purposes to determine the type and amount of use of the website. A cookie is a small text file that can be sent to the user's computer and stored there, which enables the website administrator to identify visitors who visit the website frequently, to facilitate the login of visitors to the website, and to enable the compilation of composite information about the visitors. With the help of this feedback, we are able to constantly improve the content of our pages. Cookies do not damage users' computers or files. Cookies do not enable viewing or copying data on the storage device of the user's terminal such as the hard drive.
We use them in such a way that we can offer our customers information and services according to the individual needs of each. If the user visiting our pages does not want us to receive the aforementioned information with the help of cookies, most browser programs enable the cookie function to be turned off. However, it is good to take into account that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we offer. The visitor can also delete the cookie files saved by his Internet browser from his terminal device at any time.
You can find more information about cookies on the cyber security cookies page.
Cookies can also be used for direct marketing aimed at companies or marketing based on user lists, as well as for remarketing.