register based on customer relationship

DESCRIPTION OF THE FILE

According to the Finnish Personal Data Act (523/1999), Section 10

1. Controller

Iittala Group Ltd (Business ID: 1903608-9)
Hämeentie 135
00560 Helsinki
FINLAND
Tel: +358 204 39 10
Fax: +358 204 39 5180

The purpose for processing the personal data is managing customer and other co-operation relationships and marketing as well as planning and developing the business activities of Iittala Group Ltd, companies at the time belonging to the Iittala group of companies and companies belonging to the Iittala franchise chain.

Information included in the following groups is processed in the register:

Basic information, such as name, addresses, phone numbers, e-mail addresses, date of birth, gender, language, profession or title, name and contact information of the company, marital status and family size.

Information related to the customer relationship or other co-operation, such as information of the interests and objects of collection announced by the data subject, the benefits, services and campaigns directed and offered to the data subject and the use thereof; feedback, claims and other communication and measures related to the customer relationship; information related to invoicing, collection and guarantee.

Direct marketing permissions and prohibitions.

Recordings of the customer calls.

In respect of the on-line shop and mail-order customers also the following information is processed:

Customer number, user id and password.

Information of the data subject is collected from the data subjects themselves. Information related to the customer relationship and other co-operation relationship is collected from Iittala Group Ltd, companies belonging at the time to the Iittala group of companies and companies belonging to the Iittala franchise chain as well as from public directories and other public sources of information.

Updates of the personal data are also received from authorities, organizations and companies offering updating services.

Iittala Group may disclose the data within the limits of the applicable legislation. Data may be disclosed from the register for the marketing purposes of the co-operation partners chosen by Iittala Group, unless the data subject prohibits such disclosure of the data.

Iittala Group may in addition disclose and transfer data to such companies operating outside EU / EEA with which Iittala Group has agreed in writing upon the complying with the level of the Finnish data protection in a way required by the legislation.

Only appointed personnel of Iittala Group and companies operating by Iittala Group’s assignment or on behalf of Iittala Group shall have access to the customer database applications with the personal right of use granted by the controller. The system is protected with a fire-wall which protects it from contacts outside Iittala Group.

The access to manually processed documents including customer data is prevented from outsiders.

The data subject has the right of access to the data concerning the data subject saved to the register. The request for right of access shall be made in writing by contacting the person in charge of the register. The request for the right of access must be signed. The request for right of access can also be presented in the main office of the controller at the address 135, 00560 Helsinki.

The data subject has the right to prohibit the controller to process his/her personal data for purposes of direct advertising, distance selling, other direct marketing, market research and opinion polls by contacting the controller.