PRIVACY STATEMENT

 

According to the Data Protection Regulation, the data controller has a duty to clearly inform data subjects. This leaflet fulfills the information obligation.

Contents of the Privacy Statement  can be changed by publishing a new version online. That is why we recommend that you read our privacy statement regularly.  

1. The controller shall:

ILONION CARE OY

Contact information:
First Line 1
00530 HELSINKI
business ID: 2920160-7

​

Contact information for the register

Justus Helo
+358 500806801
info@ilonioncare.fi

 

2. Name of the register:

Related to Ilonion Care Oy's customer relationship management  register  

 

3. Grounds for keeping the register:

In the register  The retention of existing information is based on either a contractual relationship with our company, from a person  consent to the storage of data or to the legitimate interest of our company in collecting  information for the purpose of our business.  

We collect and store information about potential new customers based on customer relationships or business. The collection of data from new potential customers is based on business operations and we collect the data ourselves.  

​

4. Purpose of the register:

We process personal data for customer relationship or other material contact, handling and analysis  marketing.  

Our operations are based on legitimate business, so we also comply with EU legislation  on the storage of personal data:  

• Information provided by the person  our records are legal, reasonable and transparent  processing. This  means that  you can make your information available at any time.

• Information has a purposefulness - for example, information about individuals  we collect are for a specific purpose only. We will not disclose your information to third parties unless there is a proper reason to do so.  

• We minimize the information we store - we only store what is necessary  

• We strive to keep our information accurate  

5. Personal data to be stored in the register:

The customer register contains the following information:

• First and last name  

• Title  

• Contact information

• Customer related  other textual information  

• Marketing Authorization or Prohibition  

 

6. Sources of information:

Information about the customer is obtained regularly:  

• from the customer himself when the customer relationship arises

• from the customer themselves via the online form

• e-mail

• telephone and text messages

 

7. Rights of the data subject:

The data subject has the following rights, which must be requested at:
Ilonion Care Oy
info@ilonioncare.fi
 

Right of inspection:

The data subject can check the personal data we have stored.  

​

Right to rectify data

The data subject may request the correction of incorrect or incomplete information concerning him.

​

Right of objection

The data subject may object to the processing of personal data if he or she feels that the personal data has been processed unlawfully.  

Prohibition of direct marketing

The data subject has the right to prohibit the use of the data for direct marketing.

​

Right of removal

The data subject has the right to request the deletion of his or her data if the processing of the data is not necessary. We will process the deletion request, after which we will either delete the data or provide a valid reason why the data cannot be deleted.

It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) specified in the Accounting Act (Chapter 2, Section 10). Therefore, the accounting material cannot be deleted before the deadline.

​

Withdrawal of consent

If the processing of personal data concerning the data subject is based only on consent and not on the basis of, for example, customer relations or membership, the data subject may withdraw consent.

The data subject may appeal against the decision to the Data Protection Officer

The data subject has the right to demand that we therefore limit the processing of the disputed data until the matter is resolved.

​

Right of appeal

The data subject has the right to lodge a complaint with the Data Protection Officer if he or she feels that we are in breach of the applicable data protection legislation when processing personal data.

Contact details of the Data Protection Officer:  www.tietosuoja.fi/fi/index/yhteoduction.html

 

​

8.  Regular disclosures:

As a rule, the information is not disclosed for marketing purposes outside Ilonion Care Oy. The disclosure of information to partners is only for purposes that support the business concept of the registry.  

We have ensured that all of our service providers comply with data protection laws. We regularly use the following service providers:

• We use an email marketing tool (WIX Shoutout). Only the name, company and  email address.  

• We use the CRM tool (SuperCRM) to manage customer relationships, where we store minimized e.g. of which: name, contact details and  customer relationship related activities such as meetings and other activities.  

• We use an invoicing program (Airue). Stored here are your name, company, business ID, address, phone number, and email address.

9. Duration of processing:

• As a general rule, personal data is processed for as long as the customer relationship is valid

• The subscriber can unsubscribe from our marketing list via the link in each of our marketing emails.

10. Processors of personal data:

The customer register is handled by Ilonion Care Oy's employees and the information can only be accessed using passwords.

We may also partially outsource the processing of personal data to a third party, in which case we will ensure through contractual arrangements that the personal data will be processed in accordance with applicable data protection law and otherwise in an appropriate manner.

 

11. Data transfer outside the EU:

As a general rule, personal data will not be transferred outside the EU or the European Economic Area.

If data is transferred outside the EU and the EEA, we will ensure an adequate level of protection of personal data, including by agreeing on matters relating to the confidentiality and processing of personal data as required by law.

​