Registrar:
Harriet Stengård
Kuningattarenkatu 9,
07900 Loviisa
1562503-8
Contact person responsible for the register:
Harriet Stengård
info@haijest.fi
Register name:
Highest Luxury customer register
Purpose of processing personal data:
The register is used to maintain the customer relationship between Highest Luxury and the customer and to provide a reliable customer experience.
Data content of the register:
The information stored in the register includes:
Regular sources of information:
The information stored in the register is obtained from the customer, for example, through online store orders, messages sent via web forms, email, telephone, social media services, contracts, customer meetings and other situations in which the customer provides their information.
Regular data transfers and data transfers:
Personal data will not be disclosed to third parties or transferred outside the EU or EEA. Data may only be disclosed to authorities based on applicable law or mandatory authority orders.
Principles of register protection:
The register is handled with care and the data processed is protected in an appropriate manner. The controller ensures that the stored data, server access rights and other information critical to the security of personal data are handled confidentially and only by employees whose job description requires it.
Right to inspect and right to request correction of information:
Every person in the register has the right to check their data stored in the register and to demand correction of any incorrect data or completion of incomplete data. If a person wishes to check the data stored about them or to demand correction, the request must be sent to the controller by email. The controller may, if necessary, ask the person making the request to prove their identity. The controller will respond to the customer within the time period stipulated in the EU Data Protection Regulation (generally within one month).
Other rights related to the processing of personal data:
A person registered in the register has the right to request that personal data concerning him or her be deleted from the register (“right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain situations. Requests should be sent to the controller by email. If necessary, the controller may ask the requester to prove their identity. The controller will respond to the customer within the time period specified in the EU Data Protection Regulation (generally within one month).