Privacy Notice
Privacy notice in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and the Finnish Data Protection Act (1050/2018).
1. Data Controller
KultaRahaksi Oy (Business ID: 2345713-4)
Ateneuminkuja 2 LH 10
00100 Helsinki
Finland
2. Person Responsible for Register Matters
Kim Siren
c/o KultaRahaksi Oy
Tel: +358 29 000 1133
Email: asiakaspalvelu@kultarahaksi.fi
3. Name of the Register
Customer and stakeholder register of KultaRahaksi Oy based on a customer relationship or other relevant connection.
4. Purposeof Processing Personal Data
Personal data is processed for the management of customer relationships and customer communications, as well as for the development and analysis of KultaRahaksi Oy’s business operations and customer relationships. For these purposes, personal data may also be processed to detect, investigate, and take action regarding misuse.
Customer data contained in the register may be used by KultaRahaksi Oy, companies belonging to the same corporate group at any given time, and its cooperation partners for direct marketing, distance selling, or other direct marketing activities, as well as for opinion or market research or comparable addressed communications, unless prohibited by the data subject.
5. Data Content of the Register
The register may contain the following customer-related data of KultaRahaksi Oy:
– first and last names
– personal identity number
– contact details such as postal and email addresses and phone numbers
– bank account details
– information related to the use of services, such as the amount of gold delivered and the price paid, as well as the dates of orders and payment transactions
– descriptions and images of items submitted by the customer
– feedback, complaints, and other customer-related communication, correspondence, and actions
– data related to suspected or detected misuse, such as information received from law enforcement authorities and other similar data necessary for the preparation, presentation, defense, or resolution of legal claims
– information on direct marketing consents and prohibitions
-records of customer transactions
6. Regular Sources of Data
Personal data is collected primarily from the data subject themselves, as well as from the Population Information System and other similar public or private registers and data sources providing information services.
7. Disclosure of Data
KultaRahaksi Oy may disclose data within the limits permitted and required by applicable legislation, including the disclosure of personal data to competent authorities in cases of suspected misuse. Data from the register may be disclosed for marketing purposes to selected cooperation partners of KultaRahaksi Oy, unless the data subject has prohibited such disclosure.
Data is not transferred outside the European Union or the European Economic Area unless necessary for the provision of the service. In such cases, KultaRahaksi Oy ensures an adequate level of data protection in accordance with applicable legislation.
8. Protection of the Register
Electronically stored data is protected by firewalls and other technical measures, and databases and their backups are located in locked facilities. Access to the databases requires a personal username and password.
Manual materials containing personal data are stored in locked premises and destroyed securely. Unauthorized access to the data is prevented.
9. Right of Access
Pursuant to Section 26 of the Finnish Personal Data Act, the data subject has the right to know what personal data concerning them has been stored in the register. A request for access must be submitted to the data controller in writing and signed personally or otherwise reliably verified.
10. Right to Rectification and Prohibition
Data subjects have the right to prohibit the use of their personal data for direct advertising, distance selling, or other direct marketing purposes, as well as for market and opinion research, and the right to request the correction of incorrect data by notifying the data controller.