Register and privacy statement

Data protection and cookies

This is in accordance with the Autotalliolli Oy’s Personal Data Act (Sections 10 and 24) and the EU’s General Data Protection Regulation (GDPR) register and data protection statement. Latest change 1 February 2024.

Autotalliolli Oy

Register and privacy statement

1. Registrar

Autotalliolli Oy
Y-tunnus: 2873989-4
Toivonkuja 5, 71800 Siilinjärvi, Suomi
original@okwinder.fi

2. Contact person responsible for the register

Olli Kääriäinen
Toivonkuja 5, 71800 Siilinjärvi, Suomi
original@okwinder.fi

3. Register name

Autotalliolli Oy’s customer register

4. Legal basis and purpose of personal data processing

The general condition for the processing of personal data according to the Personal Data Act is a legitimate interest, customer relationship, customer consent, order placed by the customer, assignment given by the customer or Rights and fulfillment of obligations.

The purpose of the register is to manage Autotalliolli Oy’s customer relations, marketing, and service development. The information in the register can be processed by customers for treatment and marketing purposes. Our processing basis is a legitimate interest in marketing and regarding the management of customer and partner relations, the implementation of our agreement between you and us. Personal data is also processed to investigate possible complaints and other claims for the purposes required.

In addition, personal data is processed in communications aimed at customers, such as for information and news purposes as well as marketing, as part of which personal data is also processed for purposes related to direct marketing and electronic direct marketing. Both for our customers and we may also send newsletters, advertisements, and direct mail to our potential customers contacts by phone, text message, e-mail or social media services such as via Instagram, LinkedIn and X. The customer has the right to refuse direct marketing aimed at him.

The controller processes the data himself and uses personal data in the processing on behalf of the controller and service providers operating on behalf of (Nettitakamo, Elementor, Cookiebot).

5. Information content of the register

• Personal information revealed in connection with the use of the online store order (okwinder.com): Name information (person name/company name), email address, person’s title/area of responsibility, phone number, cookies, location information, IP address and possible media file.
• Personal information revealed during the customer relationship.
• Information related to online behavior on the okwinder.com website.
• Technical data and the registered cookies and related information sent to the browser.
• Appeared during marketing measures personal information.

6. Regular information sources

• Personal data stored on Autotalliolli Oy’s (okwinder.com) website, e.g. cookies and Google Analytics data (e.g. location data, IP address).
• Personal information that came up in connection with customer relations, which is needed to manage the customer relationship. During the customer relationship, personal data may be enriched (profiling) e.g. through contacts and/or in the form of discussions. Enriching personal data is always related to handling the customer case in question.
• Personal information revealed in connection with marketing measures. Personal data may be enriched e.g. in the form of contacts and/or discussions.
• Personal data obtained from commercial registers. Personal data may be enriched, e.g. in the form of contacts and/or discussions.

7. Regular transfer of data and transfer of data outside the EU or EEA

Information can be disclosed within the limits permitted and required by the applicable legislation. We use cloud services (e.g. Microsoft Office 365) for data processing. Autotalliolli Oy (okwinder.com) can hand over personal data to partners in matters related to marketing or customer relationship management.

As a general rule, Autotalliolli Oy does not transfer or hand over the customer’s personal data to the European Union or Europe outside the economic zone. However, if necessary, data can be transferred or disclosed to the European Union or Outside the European Economic Area in the ways permitted by the Personal Data Act if:

• the data is transferred to a country where the European Commission has determined that the level of data protection is adequate, or
• contractual arrangements can guarantee an adequate level of data protection, or
• if the customer has given his consent.

The international online service providers used by the company take care of the information security of its own services in accordance with EU.

8. Registry protection principles

Data security of Autotalliolli Oy’s customer register and the confidentiality, integrity and usability is ensured by appropriate technical and administrative measures. Information and service are protected, for example, by the firewall, protection of physical equipment spaces, access control, user rights and through encryption technologies and active monitoring mentioned above. Personal information is protected from unauthorized access and illegal or accidental data processing.

9. Right of inspection and right to demand correction of information

A person whose data is stored in Autotalliolli Oy’s customer register has the right to check his data validity. The inspection request must be addressed to Autotalliolli Oy’s contact person in writing and/or orally and a record must be made of it. Autotalliolli Oy’s duty is to ensure the correctness of the request and submit personal data in electronic or paper form within one month (30 days).

A person whose data is stored in Autotalliolli Oy’s customer register has the right to check his data correctness and, if necessary, request a correction to them. The inspection request and/or correction request must be indicated to Autotalliolli Oy’s contact person in writing and/or orally and a record must be made of it Autotalliolli Oy the obligation is to ensure the correctness of the request and to provide personal information in electronic or paper form within one month (30 days).

If personal information is no longer needed to manage the customer relationship, the person in question has the right to request the removal of their data from Autotalliolli Oy’s customer register. The deletion request must be sent to Autotalliolli Oy’s contact person in writing and/or verbally and it must be done recording. Autotalliolli Oy’s obligation is to ensure the correctness of the request and to provide personal information in electronic or paper form within one month (30 days).

10. Other rights related to the processing of personal data

The right to refuse marketing communications: You have the right to refuse to receive them marketing communications from Autotalliolli Oy by acting as follows: Contacting us by email.

If you refuse to receive marketing communications, you can still receive administrative communications from Autotalliolli Oy notifications, such as order confirmations and notifications about transactions in your user account (for example, confirmations and notifications about changing the password). By ordering from the Okwinder.com online store, the customer accepts the above data processing in accordance with the register statement.

11. Collection of cookies

Our website uses cookies. This information based on cookies can be e.g. made on the site functions, page visits or information about the devices used by the user. The information is used to improve the web pages functionality and content, business is developed, and marketing is targeted. On our website Google Ads and Google Analytics services are used, which use cookies in their operation.

Cookies are user-specific, and the user’s identity cannot be recognized based on them. The user can himself influence the use of cookies through the cookie service on the website (GDRP Cookie Compliance) or by changing the settings of your own web browser such as disabling cookies or by clearing their browser’s cookie data.

It should be noted that cookies may be necessary for the proper functioning of some services.