REGISTRAR
Lappiporras Oy
Business ID 108 9731 – 7
Verkkokarinkatu 40B
94900 Kemi, Finland
Tel: +358 207 430 840

PURPOSE OF PROCESSING PERSONAL DATA
Personal data stored in the register is used to create, maintain and develop customer relationships. In addition, the data may be used in marketing and to help develop digitalisation. The personal data stored in the register may be used for direct marketing by Lappiporras Oy.

CONTENTS OF THE REGISTER
The data, required and used for the provision of services, is provided by the customer, collected and stored in the register. The data in the register includes e.g. name, mailing address, product shipping address, phone number, and email address. The data also includes additional information relating to the products being offered or ordered, such as the building supplier, floor plans, and builder, when relevant. The registrar will only input data in the register that has been provided by the customer to Lappiporras Oy when expressing interest in Lappiporras Oy’s products and services.

DISCLOSURE OF DATA IN ACCORDANCE TO REGULATION
The registrar shall not disclose the data in the register to the use of anyone other than Lappiporras Oy. Some data may be transferred or made available to reliable subcontractors, for example, for installation and billing purposes. The registrar requires subcontractors to comply, in minimum, with the same requirements as the processor of personal data under this agreement, or applicable laws.

PROTECTION OF THE DATA REGISTER
The data is stored in a system managed by the registrar or its subcontractor.  Username and password are required to access the system. Access to the system is further protected by firewalls and other technical means. Only authorised users have access to the data within the register. Archived paper records are kept in a locked storage.

DATA TRANSFER OUTSIDE THE EU OR THE EEA
The data in the register will not be transferred outside of the EU or the EEA.

THE RIGHT TO REVIEW, CHANGE OR REMOVE DATA
The data subject has the right to verify their personal data stored in the register or request a modification. Requests for revisions or changes must be made in writing or in person to the registrar. The data may be removed from the register when it is no longer needed by written or personal request from the data subject. Customers have the right to refuse direct marketing by giving written notice.

Data subjects: consumer and corporate customers.
Data types: Name and contact details; telephone number, email address, home address, site address. Site information, name and telephone number of site contact person.
Subcontractors: The data processor may use reliable subcontractors when processing personal data.
Sensitive personal data: Sensitive personal data is not processed.