This is Emron Oy's register and data protection statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU's General Data Protection Regulation (GDPR).

Prepared on 20 May 2018. Latest change 30 August 2021

1. THE REGISTRAR

Name: Emron Oy

Y‑ID: 2863217–3

Address: Tehtaankatu 16

Postal code: 38700

Post office: Kankaanpää

Phone number: 040 130 0944

Email address: toimisto@emron.fi

2. PERSON MANAGING REGISTRY MATTERS AND DATA PROTECTION OFFICER

Company: Emron Oy

Name: Eija Kolehmainen

Address: Tehtaankatu 16

Postal code: 38700

Post office: Kankaanpää

Phone number: 040 130 0944

Email: eija.kolehmainen@emron.fi

3. Purpose of use of the register

Name of the register: Emron Oy's customer register.

The collected personal data is used for the preparation and delivery of the customer's orders and for the maintenance and development of the customer relationship. The basis for the processing of personal data is a legitimate interest and statutory obligations.

Marketing material is sent to newsletter subscribers. The legal basis for processing personal data is consent.

4. BASIS OF DATA COLLECTION AND PROCESSING

The customer's information is collected and processed when the order is placed, so that the order can be prepared and delivered. Marketing material is delivered to newsletter subscribers.

5. INFORMATION CONTENT OF THE REGISTER

Company name, Y-ID, person's name, e-mail address, telephone number, address information, information about ordered products or services, invoicing information.

6. INFORMATION STORAGE PERIOD

Personal data is stored as long as it is needed to implement the contract with the customer or to develop customer service.

7. REGULAR INFORMATION SOURCES

Information is collected in the register:

From the person himself. From the registers kept by the authority within the limits permitted by law (e.g. ytj.fi).

8. REGULAR TRANSFER OF DATA AND DATA TRANSFER OUTSIDE THE EU OR THE EUROPEAN ECONOMIC AREA

Information is not regularly disclosed outside the company. Some of the external service or software providers used by the company may store data outside the EU or the European Economic Area.

9. USE OF COOKIES

On our website, we use the so-called cookie function, i.e. cookies. A cookie is a small text file that can be sent to the user's computer and stored there, which enables the website administrator to identify visitors who visit the website frequently, to facilitate the login of visitors to the website, and to enable the compilation of composite information about the visitors. With the help of this feedback, we can constantly improve the content of our pages. Cookies do not damage users' computers or files. We use them in such a way that we can offer our customers information and services according to each of their individual needs.

If the user visiting our pages does not want us to receive the aforementioned information with the help of cookies, most browser programs enable the cookie function to be turned off. This is usually done through the browser settings. However, it is good to take into account that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we offer.

10. REGISTRY PROTECTION

The data is transferred over an SSL-protected connection.

Electronic information is protected by a firewall, usernames and passwords.

Only those persons employed by the data controller who need the data in their duties have access to the data.

11. AUTOMATIC DECISION MAKING

Automated individual decisions (Article 22 of the EU Data Protection Regulation) are not made.

12. RIGHTS OF THE REGISTRANT

The registered person has the right to check what information about him is in the personal data register

deposited. A written inspection request must be sent signed to the person in charge of registry affairs

to the person.

The right of inspection is free of charge once a year at most.

The registered person has the right to demand the correction of incorrect or outdated information or

removal. He also has the right to limit or object to the processing of his data by the EU

in accordance with articles 18 and 21 of the data protection regulation.

The registered person has the right to withdraw the previously given consent to data processing.

The registrant also has the right to deny the use of their data for direct marketing purposes.