Privacy Statement 1.9.2020
Registrar and its contact details
T: mi mamaha (business ID: 3148423-9)
Malla Haapanen
Porvoonkatu 32A3
00520 Helsinki
info@bymamaha.com
What information is collected about me?
The customer's first name, surname, street address, postal code, post office, country, e-mail address, telephone number, language used in the transaction, currency used in the transaction are stored in the customer register. In addition, the company name, business ID and VAT ID are stored for the business customer.
In addition, the order information of the online store stores the information provided by the customer in connection with the order, such as the product content of the order, the method of payment and the method of delivery.
What is personal information used for?
Personal information is used:
- Customer relationship management
- For order delivery and processing, as well as archiving
- For statistical purposes
- For marketing purposes
The legal basis for the processing of personal data is an agreement, consent or legitimate interest.
The requirements set by the EU Data Protection Regulation, which will be complied with as of 25 May 2018, have been taken into account in the processing of personal data.
How long will my personal information be kept?
We will retain your personal information for as long as is necessary to fulfill the purposes of the register.
In addition, some information may be retained longer to the extent necessary to fulfill statutory obligations, such as accounting and consumer trade responsibilities.
Disclosure of information to third parties
We provide personal information to logistics and payment service partners to enable the operation of our online store.
Registry security principles
The register shall be stored on a secure server accessible only to the controller and to technical administrators authorized by the controller.
Customer rights
The data subject has the right to request from the controller access to personal data concerning him, the right to request the rectification of his personal data, the restriction of processing or the deletion of personal data and the right to object to the processing of his personal data. The data subject shall also have the right to receive personal data concerning him or her in a commonly used, machine-readable form and the right to transfer such data to another controller.
The data subject must contact bymamaha customer service by e-mail in all matters related to the processing of personal data and in situations related to the exercise of the data subject's rights. The controller will respond to the member within the timeframe set out in the EU Data Protection Regulation (generally within one month).
