Bonge Oy's Privacy Statement
bonge.fi is Bonge Oy's marketplace.
Bonge Oy is committed to protecting the privacy of its online services and newsletter subscribers. This privacy statement describes what kind of information is collected about the user of the online services, what it is used for and what influence the user has.
According to the data protection regulation, the controller has an obligation to clearly inform the data subjects. This statement fulfills the obligation to inform.
1. Registrar
Bonge Oy
Itälahdenkatu 25
00210 Helsinki
Contact information for registry matters:
Bonge Oy / Joonas Teeriaho
Itälahdenkatu 25
00210 Helsinki
010 440 9180
kaskapalvelu@bonge.fi
Depending on the case, the contact information of the possible data protection officer:
Joonas Teeriaho
c/o Bonge Oy
Itälahdenkatu 25
00210 Helsinki
010 440 9180
firstname.surname@bonge.fi
2. Registered
The register contains potential and active consumer customers of the brands represented by Bonge Oy, as well as retailers and media partners.
3. Basis for keeping the register and purpose of use
Basis for keeping the register:
-
Personal data is processed based on the registered customer relationship
-
Personal data is processed on the basis of consent (e.g. a mailing list collected at trade fairs for those interested, the form asks permission for marketing)
Purpose of personal data processing and register
Personal data is only processed for predefined purposes, which are as follows:
- Improving supply and services
- Enabling referrals
- Improving the operation of the site
- Telling about the services
- Communicating news
- Targeting the right type of communication
4. Personal data to be stored in the register
The customer register contains the following information:
Contact information:
- the necessary contact information provided in connection with the order
- name
- address and phone number
Other information:
- the date when the customer's information was recorded in the list
- consent to direct marketing
- Order history
5. Rights of the data subject
The registrant has the following rights, requests for the use of which should be made to the address kaskapalvelu(a)bonge.fi or
by calling 010 440 91 80
Right of inspection
The registered person can check the personal data we have stored.
Right to rectification of data
The registered person can ask to correct incorrect or incomplete information about him.
Right to object
The registered person can object to the processing of personal data if he feels that the personal data has been processed unlawfully.
Ban on direct marketing
The registrant has the right to prohibit the use of data for direct marketing.
Right of deletion
The registered person has the right to request the deletion of data if data processing is not necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.
Withdrawal of consent
If the processing of the data subject's personal data is based only on consent, and not on e.g. customership or membership, the data subject can withdraw the consent.
The registered person can appeal the decision to the Data Protection Commissioner
The registered person has the right to demand that we limit the processing of disputed data until the matter is resolved.
Right of appeal
The registered person has the right to file a complaint with the data protection commissioner if he feels that we violate the current data protection legislation when processing personal data.
Contact information of the data protection officer: www.tietosuoja.fi/fi/index/yhttstietod.html
6. Regular sources of information
Customer information is received regularly:
- From contact lists collected from trade fairs, with marketing permission, e.g. Messomasiina
- From the customers themselves when the customer relationship is created
- From the customer himself via an online form
7. Regular disclosures of information
As a general rule, information is not disclosed outside of Bonge Oy for marketing purposes.
We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:
Marketing-related service providers
- Shopify
- Klaviyo
Service providers related to payments and payment processing
- Paytrail
- Stripe Payments
Service providers related to transportation and transportation processing
- Postal
- Postnord / DPD
- UPS
8. Data storage and duration
Collected information is stored in databases that are protected by e.g. with firewalls, encryption technologies and limited access control and access rights. Collected information is kept only for as long as is necessary in accordance with current legislation. For example, due to accounting legislation, some personal data is stored even after the end of the customer relationship.
As a general rule, personal data is processed as long as the customership is valid
The registrant can unsubscribe from our marketing list via the link in each of our marketing e-mails.
9. Personal data processors
The controller and its employees process personal data. We can also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data will be processed in accordance with valid data protection legislation and otherwise appropriately.
10. Data transfer outside the EU
Personal data is not transferred outside the EU or the European Economic Area.
11. Automatic decision-making and profiling
We do not use the data for automatic decision-making or profiling.