The Personal Data Act (523/ 99) § 10
the date of issue 05.01.2012
1. The Registrar
Green Bouquet Ltd Hiidenkirnuntie 5 48770 KOTKA
2. Contact person / or person who is responsible for register
Kaija Sainio firstname.lastname@example.org
3. Name of the register
Green Bouquet Ltd's register of online-store users
4. Register's use purpose
Green Bouquet Ltd:s register of online-store users with personal customers' data is used for contact with customers, marketing and other e-commerce services related purposes.
5. Information content of register
Register's information content collecting basic information, such as:
- phone number
- E-mail .
6. Sources of Information
The registrar will register Green Bouquet Ltd's online store users' information which the website's visitors gave themselves.
7. Transfer of data to the EU or outside of European Economic Area
No regular information transfer to third parties. No disclosure of information to the EU or outside the EEA .
8. Principles of data protection
Green Bouquet Ltd's online user registry information is stored into the controller system, which is protected by operating system protection software. The system requires a user ID and password. The system is also protected by firewalls and other technological systems. Only certain employees have advance access to the information stored in the system registry. System registry information is stored in closed and guarded room.
9. Right for denial
Registered user has the right to prohibit the controller to process personal data for purposes of direct advertising, distance selling and other direct marketing, market research and public opinion surveys and for personal and genealogical research. The ban must be made in writing and sent to the person in charge.
10. Inspection right
Registered user has the right to inspect the register of stored data relating to him/her and to get a copy. The request must be made in writing and sent to the person in charge .
11. Correction of information
The Registrar shall rectify, delete or supplement the register, the reading erroneous, unnecessary, incomplete or outdated personal data on its own initiative or at the request of the registered user. Registered user must contact the registrar to correct any information.