Privacy policy in accordance with the Finnish Data Protection Act (1050/2018) and the EU GDPR.
Henrisilvan.com (Silvan Capital Oy, business ID 2769166-5, hereinafter "henrisilvan.com" or the "Site") stores and processes personal data in accordance with the EU GDPR and, correspondingly, the current Finnish Personal Data Act (523/1999) as set out below. We may change this privacy policy from time to time by publishing a new version online, so please check it regularly.
1 CONTROLLER
Silvan Capital Oy, 2769166-5
Astreankatu 7, 05900 Hyvinkää, Finland
2 CONTACT PERSON FOR REGISTER MATTERS
Henri Silvan
henri (a) silvancapital.fi
3 NAME OF THE REGISTER
henrisilvan.com customer register
4 PURPOSE OF PROCESSING PERSONAL DATA
The register is used solely to maintain the customer relationship between the Site and the customer. Placing an order does not require registration.
5 DATA CONTENT OF THE REGISTER
The customer's contact details (name, address, phone number, email address).
Information about the customer relationship, such as order history.
In addition, IP address data and data collected through cookies.
Any other data collected with the customer's consent.
6 REGULAR SOURCES OF DATA
Information received from the customer in conversations, by phone, via the internet, by email or in another similar way. Contact details, customer relationship data and IP address data are stored when the customer shops in the online store.
7 REGULAR DISCLOSURES OF DATA AND TRANSFERS OUTSIDE THE EU OR EEA
We disclose personal data to other parties to a limited extent. In practice this means the following:
We use email marketing tools. Only the name and email address are stored in them.
We use a CRM tool to manage customer relationships and purchases, in which we store a minimized set of data such as the person's name, address details, contact details and order history.
8 PRINCIPLES OF PROTECTING THE REGISTER
The controller's information systems and files are protected with standard technical security methods. Use of the register is instructed within the controller's organization, and access to the personal data register is restricted so that the right to use the register and access its data requires a personal username and password, granted only to the controller's employees who are entitled to it because of their duties. Data is retained in accordance with the legislation in force at any given time.
9 RIGHT OF ACCESS
The data subject has the right to check the data stored about them in the register. Requests concerning the right of access must be made in writing and signed, to the address mentioned above.
10 RIGHT TO DEMAND RECTIFICATION
If there are errors in the registered data, the data subject can send a request to correct the error to the email address given in section 2.
11 OTHER RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
Notwithstanding secrecy provisions, everyone has the right, after providing the information necessary to find the data, to know what data concerning them has been stored in the personal data register, or that the register contains no data concerning them. At the same time, the controller must inform the data subject of the register's regular sources of data and of what the register's data is used for and regularly disclosed to.
