Visit Lakeland Finland Project, email@example.com
Legal basis and purpose of personal data processing
The purpose of the register is to guarantee the security of the Lakeland website. The information obtained (IP address) is only used in the event of a failure or in connection with the investigation of data breaches.
The basis for processing is a legitimate interest.
Basis of legitimate interest
General online safety and manners. The legitimate interest of the controller in the processing of collected and used personal data is based on the freedom to conduct a business.
Purpose of personal data processing and basis for processing
Processing tasks may be outsourced to third party service providers in accordance with the data protection legislation and the boundaries imposed by same.
Data content of register
The personal register contains the following information:
- IP address
- Roaming time
- The pages the visitor has visited
Regular sources of information
Information is obtained from the customer about online visits to the organization’s website.
Personal data retention period
Data is never deleted separately.
Transfer of data outside of the EU or EEA
The information in the register is only available to Lakeland’s responsible persons, not only when using an external service provider, but also for their use. Information will not be released outside the Hyvä miels workplace brand or for use by its partners, except in connection with data breaches and the like.
The website uses Google Analytics cookies, the data of which is transferred and stored on servers that may also be located outside the EU and EEA.
Principles for protecting the register
Only designated employees of the Lakeland project and acting on its behalf have the right to use the website maintenance server. Each defined user has his own personal username and password. The system is protected by a firewall that protects external connections to the system. In the protection and processing of data in the register, the provisions and principles of the Data Protection Act, regulations of the authorities and good data processing practices are followed.
Rights of the registrant
Right of inspection: The registered person has the right to check what information about him is in the register. The inspection request must be made in writing by contacting firstname.lastname@example.org or the registry’s contact person in Finnish or English. The inspection request must be signed. The registrant has the right to prohibit the processing and disclosure of his data for direct advertising, distance sales and direct marketing as well as market and opinion research by contacting the company’s customer service point.
The right to transfer data from one system to another: The registered person has the right to transfer their own data from one system to another. The transfer request can be addressed to the registry’s contact person.
The right to demand correction of information: Personal information in the register that is incorrect, unnecessary, incomplete or outdated in terms of the purpose of the processing must be corrected, deleted or supplemented. The correction request must be made by hand with a signed written request to email@example.com or to the administrator of the personal register. The request must specify which information is required to be corrected and on what basis. The repair will be carried out without delay. The person from whom the incorrect information was received or to whom the information was given will be notified of the correction of the error. When a correction request is denied, the person responsible for the registry issues a written certificate stating the reasons why the correction request was denied. The person concerned can refer the refusal to the data protection commissioner for resolution.
Right to restriction: The registered person has the right to request the restriction of data processing, e.g. if the personal data in the register is incorrect. Contacts for the person responsible for the register.
Right to object: The registered person has the right to request personal data concerning him and the registered person has the right to request the correction or deletion of personal data. Requests can be addressed to the registry’s contact person. If you act as a contact person for a company or organization, your data cannot be deleted during this time.
The right to file a complaint with the supervisory authority: If you believe that the data protection regulation has been violated in the processing of your personal data, you have the right to file a complaint with the supervisory authority. You can also file a complaint in the Member State where you have a permanent residence or place of employment.
The contact details of the national supervisory authority are:
Office of the Data Protection Commissioner
029 56 66700
The registered person has the right to prohibit the disclosure and processing of their data for direct advertising and other marketing purposes, to demand that the data be anonymized as appropriate