Privacy statement

Dated 22.9.2021
Combined register description and information document

We apply data protection legislation when processing personal data.
Personal Data Act (523/1999) Section 10
European Union General Data Protection Regulation (2016/679)

1. Controller

Name: Latvo Oy
Company ID: 3018436-5
Street address: Veitsillantie 84
Postal address: 19110 Vierumäki

2. Person in charge of the register

Name: Antti Selonen, Latvo Oy
Phone: +358445354379
Email: antti@latvo.fi

3. Name of the register

Latvo Ltd Customer Register

4. Purpose of the register

The personal data stored in the customer register of Latvo Ltd is used for billing, customer relationship management, marketing purposes and other purposes related to online services.

5. The following information about the customer is collected and stored in the customer register of Latvo Ltd:

• Contact information (name, address, telephone, e-mail)other information relating to the customer relationship (e.g. make and model of ATV)
• Other information relating to the customer relationship (e.g. make and model of ATV)

Through the use of cookies and other similar technologies, the website of the data controller collects information about the user’s movements and actions, the consent and refusal of the person, and any other information provided by the person himself/herself.

6. Regular data sources

The information to be recorded in the register is obtained from the customer himself through messages sent via online forms, e-mail, telephone, social media services, contracts, customer meetings and other situations where the customer discloses his data. The register is updated with information from the customer and at different stages of the customer relationship. Personal data may also be collected and updated from paid address registers and other similar registers or from public data sources such as the internet, which are available free of charge.

7. Disclosure of customer information

Personal data may be disclosed from the customer register to the extent permitted by applicable law.

8. Transfer of personal data outside the EU or the European Economic Area

Data will not be disclosed to other parties as a rule. Data may be published to the extent agreed with the customer. The data will not be transferred by the controller outside the EU or EEA.

The services or service providers used by Latvo Ltd may outsource the processing of personal data to their subcontractors and partners, who are also located outside the EU and EEA, such as in the USA. In these cases, the service/service provider will ensure adequate data security and processing through the EU-U.S. Privacy Shield arrangement, or contractually through standard contractual clauses approved by the EU Commission.

9. General principles on the use and protection of personal data

The register will be processed with due care and the data processed by the information systems will be adequately protected by personal identifiers and passwords. Where data is stored on servers, the physical and digital security of the servers’ hardware is adequately ensured. The controller shall ensure that stored data, access rights and other information critical to the security of personal data are treated confidentially and only by employees whose job description includes this.

10. Data retention periods, or criteria for determining such periods

We keep personal data for as long as necessary for the purpose for which the data is used. The retention period (or criteria for determining it) may also be derived from mandatory (statutory) retention periods and the controller’s industry code of conduct.

We assess the necessity of data retention internally, taking into account the applicable legislation. Individuals have the right to request the removal of their data from the register.

11. Right of access and rectification

Every person in the register has the right to check the data recorded in the register and to request the correction of any inaccurate data or the completion of incomplete data.

Rights of the data subject:

• Right of access to personal data
• Right to rectification of data
• Right to access to personal data
• Right to restriction of processing
• Right of reply
• Right to data portability

A person on the register has the right to request the erasure of personal data concerning him or her from the register (“right to be forgotten”). They also have the right to withdraw their consent or agreement at any time. If a person wishes to check or request rectification of the data stored about him/her, the request must be sent in writing to the controller. The controller may, if necessary, ask the applicant to prove his or her identity. The controller will reply to the customer within the time limit laid down in the EU General Data Protection Regulation (as a general rule, within one month).