Privacy Policy
This is the Register and Data Protection Statement of the company, prepared in accordance with the EU General Data Protection Regulation (GDPR).
Prepared on 25 November 2024.
1. Data Controller
Arctic Native Oy (3485645-6)
2. Contact Person Responsible for the Register
Alaoja Tuomas Kristian, info@arcticnative.fi
3. Name of the Register
Customer Register
4. Legal Basis and Purpose of Processing Personal Data
The legal basis for processing personal data under the EU General Data Protection Regulation is the individual’s consent (voluntary).
The purpose of processing personal data is communication with customers.
The data will not be used for automated decision-making or profiling.
5. Content of the Register
The register may contain the following data:
- Person’s name and contact details (phone number, email address)
- IP address of the internet connection
Data is retained as long as it is necessary for the purposes of personal data usage.
IP addresses of website visitors and cookies essential for the functioning of the service are processed on the basis of legitimate interest, for purposes such as ensuring security and collecting statistical data about website visitors. Where these are considered personal data, consent for third-party cookies will be requested separately when necessary.
6. Regular Data Sources
Data stored in the register is obtained from messages sent via contact forms, emails, phone calls, social media platforms, agreements, customer meetings, and other situations where the customer provides their information.
Information about contact persons of companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.
7. Regular Disclosure of Data and Transfer of Data Outside the EU or EEA
Data is not regularly disclosed to other parties. Data may be published to the extent agreed upon with the customer.
Data is not transferred outside the EU or EEA. Data will not be transferred to the United States without the explicit consent of the data subjects.
8. Principles of Register Protection
Care is taken in the processing of the register, and electronically processed data is adequately secured with appropriate digital security measures. The data controller ensures that stored data, server access rights, and other critical information related to personal data security are handled confidentially and only by employees whose job description includes such tasks.
9. Right to Access and Correct Information
Every person in the register has the right to check their stored data and request correction of any inaccurate or incomplete information. If an individual wants to check their stored data or request corrections, the request must be submitted in writing to the data controller.
The data controller may, if necessary, ask the requester to verify their identity. The data controller will respond to the customer within the time frame set by the GDPR (typically within one month).
10. Other Rights Related to Personal Data Processing
A person in the register has the right to request the deletion of their personal data from the register (“right to be forgotten”). Similarly, data subjects have other rights under the GDPR, such as the right to restrict the processing of personal data in certain situations.
Requests must be submitted in writing to the data controller. The data controller may, if necessary, ask the requester to verify their identity. The data controller will respond to the customer within the time frame set by the GDPR (typically within one month).
