Privacy Policy
This privacy notice is a register and data protection statement in accordance with the Finnish Data Protection Act and the EU’s General Data Protection Regulation (GDPR). It was updated on the 5th of May 2024.
The Register Keeper and Personal Data Processor
Colourful Harmony / Minna Eriksson
Business ID: 3335665-2
PO Box 8, 01601 Vantaa
minna@colourfulharmony.com
The Names of the Registers
Colourful Harmony’s client and photo register
The Purpose of Processing Personal Data
The purpose of processing personal data is to manage customer relationships, instantiate the rights and obligations of the customer and the company, and processing of the personal data in accordance with the Personal Data Act, marketing and communication.
Content of the Register
The register may include the following data:
- Name
- Address
- Phone number
- Company and its address
- Purchased products and services
The Register’s Statutory Data Sources
Statutory sources of information are information provided by the customer when making an order, as well as information generated when getting in touch with customer service, contacting (via e-mail) or using products and services.
Cookies
The website of Colorful Harmony uses cookies to improve the user experience. Cookies are used to collect information about the usage of the pages. The users are not identified with cookies. The user can disable cookies or decline the usage of cookies. This may, however, have an impact on the site’s operation and user experience.
Personal Data Processors and Disclosure of Data
Only the entrepreneur has access to the information contained in the registers. Information from the registers are not disclosed statutorily. Personal data can be disclosed to the authorities in accordance with the law of Finland.
The online store of Colorful Harmony is hosted on the Vilkas e-commerce platform, through which the data of customers is processed.
Personal Data Retention Period
Generally, we process personal data only as long as the basis for processing exists, i.e. as long as the customership stands. The customer register is reviewed annually, and personal data is destroyed in accordance with the retention periods required by law. The retention periods of personal data are affected, for example, by the Accounting Act. Thus, accounting-related material cannot be destroyed before the period determined by the Accounting Act expires.
Customer Rights
The customer has the following rights, and requests for their use should be performed by emailing our customer service at minna@colourfulharmony.com.
- Right to inspection: The customer can inspect the personal data we have stored about them.
- Right to rectification: If the customer notices errors or deficiencies in their data, they have the right to ask us to correct or supplement the data.
- Right to object: The customer has the right to object to the processing of their personal data.
- Prohibition of direct marketing: The customer can prohibit the use of their data for direct marketing.
- Right to request deletion: The customer has the right to request the deletion of their data if processing the data is not necessary. We process the deletion request, after which we either delete the data or state a legitimate reason why the data cannot be deleted.
- Right to restriction: The customer has the right to demand that we limit the processing of disputed data until the matter is resolved.
- Right to appeal: The customer has the right to file a complaint with the Data Protection Authority if they consider that we violate the applicable data protection legislation when processing their personal data.
Data Transferring Outside the EU or EEA
As a general rule, personal data is not transferred outside the European Union or the European Economic Area.
Principles of the Register Protection
Personal data is kept confidential. The information network of Colourful Harmony and the hardware in which the register is located are protected by a firewall and other necessary technical measures.
