Privacy Policy
Data Controller
Eläinlääkäriasema Pups 'n Pets Oy (3203958-3)
Hereafter in this statement referred to asthe Company.
Person responsible for data protection and/or contact person
Name of the Personal Data Register
Eläinlääkäriasema Pups 'n Pets Oy customer and marketing register
This Privacy Policy applies to our website, marketing, and customer relationship management, as well as to the processing of personal data related to the products and services we provide.
Collected Personal Data and Sources of Information
We collect the personal data necessary for managing the customer relationship.
| Data Category | Examples of Data Content |
|---|---|
| Identification and contact details | Customer’s and/or representative’s name and contact information. |
| Information related to products, services, orders, and customer communication | Details of orders, delivery times, and information related to agreements, invoicing, customer communication, and complaints. |
| Information related to marketing (including direct marketing) and events, as well as consents and prohibitions given by the data subject | Contact details for marketing purposes and information collected in connection with events. Consents and prohibitions regarding direct marketing. |
| Information related to the use of the website and other electronic services | IP address, electronic communication identifiers, search and browsing history, browser and operating system information, and registration details. |
We collect personal data directly from the data subject, as well as from publicly available official registers and other external sources, such as the Trade Register or other similar public business registers. In addition, we collect the information provided through contact forms and use it for the above-mentioned purposes related to maintaining the customer relationship.
Purpose and Legal Basis for Processing Personal Data
Personal data is processed within the limits permitted by applicable legislation for the following purposes:
- delivery of products and services and the conclusion of customer agreements (contractual relationship or its preparation)
- management of the customer relationship (legitimate interest)
- providing information and guidance regarding services (legitimate interest)
- testing of online services (legitimate interest)
- development of products and services (legitimate interest)
- collection and analysis of user statistics (consent, legitimate interest)
- improving the user experience of our website and other services (consent, legitimate interest)
- invoicing, credit decisions, and debt collection (legitimate interest)
- marketing communications (legitimate interest)
- direct marketing, including electronic direct marketing and telephone marketing, as well as planning and measuring the effectiveness of advertising and marketing, and the combining and updating of personal data for direct marketing purposes (legitimate interest, consent)
- management of stakeholder relationships and cooperation with subcontractors and service providers (legitimate interest, contractual relationship or its preparation)
- internal reporting and other administrative actions (compliance with a legal obligation)
- handling warranty and defect liability matters, processing complaints, and managing legal and administrative procedures (legitimate interest)
- preventing and investigating misuse, and ensuring data security as well as the safety of individuals and property (legitimate interest)
- fulfilling other statutory obligations (such as accounting and tax-related duties) and reporting obligations
- and, when the processing of personal data is based on consent, the individual may withdraw their consent at any time by notifying the contact person mentioned above.
Processing of personal data may be necessary to fulfil the legitimate interests arising from the customer relationship between the Company and the data subject. The Company has a legitimate interest in processing personal data for marketing, service and customer analyses, and for service testing. Marketing purposes may also involve profiling. In such cases, the data subject has the right to object to the processing of their personal data.
When personal data is processed based on legitimate interest, we have assessed the benefits of the processing and any potential disadvantages to the data subject, and we consider that the rights and interests of the data subjects do not override our legitimate interest. Upon request, we will provide additional information on the processing of personal data based on legitimate interest.
Processors of Personal Data
Access to personal data is restricted to persons responsible for managing customer relationships and marketing.
Recipients of Personal Data
Various service providers and other third parties may also be involved in the processing of personal data, such as providers of technical solutions, server hosting services, or accounting and financial administration services. We ensure that appropriate data protection agreements required by data protection legislation are in place with all parties that process personal data on our behalf.
Personal data may be disclosed to third parties in situations required by law or authorities, or for the investigation of misuse and to ensure safety. In addition, personal data may need to be disclosed in connection with legal proceedings or similar legal processes.
If the Company is involved in a merger, business transaction, or other corporate arrangement, personal data may be disclosed to the parties involved or to parties assisting in the arrangement.
Upon request, we will provide additional information regarding the recipients of personal data.
Transfer of Personal Data Outside the European Economic Area
Personal data is not transferred outside the European Union or the European Economic Area unless it is necessary for the technical implementation of a service. In any situations where data is disclosed or transferred, the level of data protection required by data protection legislation and other necessary safeguards will be applied.
Upon request, we will provide additional information regarding the transfers of personal data and the protection mechanisms used.
Cookies
We use cookies and other similar technologies on our website. A cookie is a small text file that the browser stores on the user’s device. Cookies contain an anonymous, unique identifier that allows us to recognise and count different browsers visiting our site. The purpose of using cookies and similar technologies is to analyse and further develop our services to better serve users, as well as to target advertising. Users can manage their consent through the cookie tool available on our website.
Protection of Personal Data
We protect personal data using appropriate technical and organisational measures. The data is collected into databases that are protected by firewalls, passwords, and other technical security measures. The databases and their backups are located in locked and guarded facilities, and access to the data is restricted to specific, pre-designated individuals.
Retention and Deletion of Personal Data
Personal data is retained for as long as it is needed for the purpose for which it was collected and processed, or for the performance of a contract, or for as long as required by law and regulations. After this, the personal data will be properly destroyed.
Rights of the Data Subject
The data subject has the following rights:
- Right of access to personal data. The data subject has the right to obtain confirmation as to whether their personal data is being processed, as well as other information about the processing as required by data protection legislation. The data subject also has the right to receive a copy of the personal data.
- The data subject may request rectification of their data if the information is incomplete or inaccurate.
- The data subject may request the deletion of data when there is no reason for its processing as defined by data protection legislation that is independent of the data subject’s consent.
- The data subject has the right to restrict processing if the accuracy or legality of the data requires it, or if they request restriction based on their right to object, limiting the processing of the data to storage only. The data subject has the right to object to the processing of their data for direct marketing purposes when the processing is based on the Company’s legitimate interest.
- The data subject may request the transfer of data to another controller. The right to data portability generally applies to personal data provided by the data subject to the controller in a structured and machine-readable format, where the processing is based on consent or contract, and/or where the processing is carried out automatically.
- Right to withdraw consent. If the processing of personal data is based on the data subject’s consent, they have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
- Requests concerning the rights of the data subject must be submitted in writing or by email to the following contact details:
Eläinlääkäriasema Pups 'n Pets Oy
Request for access / other request concerning personal data
The identity of the person submitting the request may be verified before the request is processed. The Company will respond to requests within 1 month of receiving them, unless there are specific reasons to extend the response tim
The data subject has the right to lodge a complaint with the competent data protection authority if they believe that their personal data has been processed in violation of data protection legislatio
The contact details of the Finnish Data Protection Authority can be found here.