Privacy Policy

Version compliant with the EU General Data Protection Regulation (679/2016)

Data Controller

Lykke Kahvitilat / Record Coffee Company Oy
Business ID: 2843459-9
Address: Kiveläntie 4A, 70460 Kuopio
Phone: +358 50 5745787
Email: moi@lykkekahvitilat.fi

 

Data Protection Contact Person

Jesse Parkkali
Phone: +358 50 574 5787
Email: jesse@lykkekahvitilat.fi

 

Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data is:
A contractual relationship between the data subject and the data controller.

Personal data is used for fulfilling, returning, and handling inquiries related to online store orders. Additionally, if the customer has consented to email and/or SMS marketing, marketing messages may be sent to them.

Regular Sources of Data

Information recorded in the personal data register is obtained regularly from the data subject themselves.

Disclosure of Personal Data

Personal data is not disclosed on a regular basis and is therefore not transferred outside the EU or the European Economic Area.

Data may, however, be disclosed to authorities on the basis of a statutory requirement.

Protection of Personal Data

Personal data is stored technically in the online store's cloud service, whose administration interface is protected by SSL encryption and individual user credentials and passwords. The technical security of the cloud service is the responsibility of Shopify Inc.

Data Retention Period

Data is retained in the online store's database indefinitely. Data is not deleted on a regular basis.

Profiling

The following personal data may be used for targeted marketing: the customer's name, date of birth, gender, purchase history, address information, and behavior in the online store — for example, if a customer has abandoned a purchase, a reminder about the incomplete order may be sent, or if a customer has browsed certain products, marketing may be targeted accordingly.

Rights of the Data Subject

Right of access

The data subject has the right to obtain confirmation as to whether personal data concerning them is being processed, and if so, the right to receive a copy of that data.

 

Right to rectification

The data subject has the right to request that inaccurate or incorrect personal data be corrected. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.

Right to erasure

The data subject has the right to request the deletion of their personal data if:
A) the personal data is no longer necessary for the purposes for which it was collected; or
B) the personal data has been processed unlawfully.

Right to restriction of processing

The data subject has the right to restrict the processing of their personal data if:

A) the data subject contests the accuracy of their personal data;
B) the processing is unlawful and the data subject opposes erasure and requests restriction of use instead; or
C) the data controller no longer needs the personal data for the original purposes of processing, but the data subject requires it for the establishment, exercise, or defence of legal claims.

Right not to be subject to automated decision-making

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

The above does not apply if the decision is necessary for entering into or performing a contract between the data subject and the data controller, or is based on the data subject's explicit consent.

Right to data portability

The data subject has the right to receive personal data concerning them, which they have provided themselves, in a structured, commonly used, and machine-readable format, and the right to transmit that data to another data controller.

Right to lodge a complaint with a supervisory authority

The national supervisory authority for personal data matters is the Data Protection Ombudsman, operating under the Ministry of Justice. You have the right to bring a matter before the supervisory authority if you consider that the processing of personal data concerning you violates applicable legislation.

Contact

For all questions related to the processing of personal data and the exercise of your rights, the data subject should contact the person responsible for register matters by email at jesse@lykkekahvitilat.fi or by post at Record Coffee Company Oy, Kiveläntie 4A, 70460 Kuopio.