Privacy Statement - GDPR

The registrar and the person who manages the register:

Handshake Finland Oy 
Business ID: 2304112-0

Petrus Saari, Handshake Finland Oy, privacy@handshake.fi

Name of the register

Handshake Finland Oy - Customer Register

Grounds for and purpose of keeping the register

The purpose of the register is to process and archive orders from Handshake Finland Oy's customers and to maintain customer relations. The data may be used for operational development and statistical purposes. Personal data is processed within the limits allowed and required by the Personal Data Act.

Information contained in the register

The personal register may contain the following information

• First and last name of the person
• E-mail address
• Postal address
• Telephone number
• Company/organisation
• Details of orders processed
• Payment information, including credit agreements and other billing information
• Delivery details
• Product reviews
• E-commerce browsing data
• Terminal identification data

Purpose of the personal data register

The register of personal data is used for the following purposes

• Maintenance and management of the customer relationship
• Delivery, processing and archiving of orders
• Improving the customer experience
• For analytical and statistical purposes
• To prevent misuse
• Delivering targeted content and marketing

Data storage and protection

The personal data register is protected against unauthorised access and is processed with care. Handshake Finland Oy ensures that stored data, server access rights and other information critical to the security of personal data are handled confidentially and only by employees whose job description includes this.

The retention period of personal data is determined by its purpose and the obligations imposed by law.

Regular data sources

The information in the personal data register is obtained from the customer through messages sent via web forms, e-mail, telephone, social media services, contracts, customer meetings and other situations where the customer discloses his/her data. Occasionally, we may use the address service of the Finnish Post and the Population Register Centre.

Regular disclosures of data

We may disclose information to 3rd parties to guarantee payment and delivery, analytics and statistical partners and, where appropriate, to public authorities. Handshake Finland Oy ensures a high level of data security when transferring and processing data. The level of data processing by third parties is ensured by means of a Privacy Shield agreement or other approved method in accordance with the EU Data Protection Regulation.

Transfer of data outside the EU or EEA

Data will not be transferred outside the EU or EEA unless the partner is covered by a Privacy Shield agreement approved by the European Commission.

Rights of the data subject

A person in Handshake Finland Oy's customer register has rights to the following requirements:

Right to review - The data subject has the right to review his/her data in our register. Handshake Finland has the right to access the register of personal data. The data can be checked at the company's head office where the register is kept. If a person wishes to check the data stored about him/her, the request must be made in writing to the controller. The data subject must be able to prove his or her identity when checking the data.

Right to rectification - The data subject has the right to request the rectification of his/her data. The data may be rectified at the head office of the company where the register is kept. If a person wishes to rectify data recorded about him or her, the request must be made in writing to the controller. The data subject must be able to prove his or her identity when the data are corrected.

Right to erasure of personal data - Data subjects have the right to request the erasure of their data from the register. The request for erasure must be made in writing at the head office of the company where the register is kept. If a person wishes to have data stored about him/her deleted, the request must be made in writing to the controller. The data subject must be able to prove his or her identity when requesting the erasure of data.

The controller will reply to the customer within the time limits laid down in the EU General Data Protection Regulation (as a general rule, within one month).

Cookies

From time to time, so-called cookies may be transferred to the visitor's computer ("cookies"). Cookies can be used to collect information such as the page you came from, which of our web pages you have browsed and when, the browser you are using, the resolution of your screen and operating system, and the IP address of your computer, i.e. the Internet address from which the information you send comes and where it is received.

The site uses cookies for site functionality, such as shopping cart functionality. For example, cookies remember which products you have added to your shopping basket, whether you have visited a particular page in the past and which products you have browsed. Cookies help us to get an overview of your visit so that we can optimise the site and tailor it to your needs and preferences. We also use cookies for targeted advertising on other websites. In general, we use cookies as part of our service because we want to provide you with the most interesting content possible.

Cookie data allows Handshake Finland Oy and its partners to track visitor numbers and to analyse and develop the service to better serve visitors. In addition, Handshake Finland Ltd's partners may use cookies to collect information about visitors' visits to this and other sites in order to target advertising.

The information collected through cookies is used to deliver targeted advertising based on the visitor's interests. When targeting advertising using cookies, the visitor is not identified and the information is not combined with any personal information that may be obtained from the visitor in any other context. The visitor has the possibility to prevent the use of cookies by changing his/her browser settings so that the browser does not allow cookies to be stored.  The visitor accepts that for some services, however, the functionality of the service may be affected if cookies are disabled.

The storage time of cookies on your device will vary. When a cookie expires, it will automatically disappear from your device.

You can block all cookies and/or third-party cookies at any time by changing the browser settings on your computer, tablet or smartphone. The location of these settings depends on the browser you are using. However, please remember that if you block all cookies and/or third-party cookies, you will not be able to use all the functions and services of the site (as they are based on cookies).

The cookies we use:

• Cookies necessary for the use of the online shop (for shopping cart and other functionalities)
• Local storage - notifications and selections on the website.
• Criteo retargeting (marketing)
• Google analytics (statistics)
• Facebook (marketing)

Changing the security statement

We reserve the right to amend this privacy statement in case of changes in legislation or to improve the development of our operations. This Privacy Statement replaces the previous Privacy Statement.