Kajaanin Golf
Privacy notice
Privacy policy
Contents of the privacy notice
1. Data controller 2. Person responsible for the register and/or contact person 3. Name of the register 4. What your personal data is used for 5. What personal data we collect about you 6. Regular sources of data 7. How we use cookies 8. To whom we disclose your personal data 9. Do we transfer your personal data outside the EU 10. How long your data is retained 11. How your personal data is protected 12. Your rights as our customer 13. May this privacy policy be amended
1. Data controller
Kainuun Golfkenttä Oy Puistolantie, 87150, Kajaani toimisto@kajaaningolf.fi Business ID: 3527002-7
2. Person responsible for the register and/or contact person
Mikko Heikkinen
mikko.heikkinen@viesti.net
3. Name of the register
Customer data register of Kainuun Golfkenttä Oy, based on a customer relationship or other relevant connection.
4. What your personal data is used for
• Management, analysis and development of customer, member and stakeholder relationships
• Offering and developing products and services
• Delivery, processing and archiving of orders
• Analytics and statistical purposes
• Carrying out and monitoring customer, member and marketing communications.
• Processing, analysis and statistical compilation of customer feedback and the results of customer surveys and studies.
• Prevention and investigation of misuse and problem situations.
Under the EU General Data Protection Regulation, the legal basis for processing personal data is one of the following
• the data subject's consent
• a contract
• a legal obligation
• legitimate interest
5. What personal data we collect about you
The register may contain the following data and changes to them:
Basic customer data
• name details
• contact details (postal address, email addresses, telephone numbers)
• gender
• date of birth
• details of the occupation or position within the organisation of contact persons of corporate customers
• Customer's unique identifiers
• personal identity code
• customer number
• registration details for the controller's services (e.g. user IDs and passwords for the online shop and back-end system service)
• identifiers used in targeting marketing
Data relating to the customer relationship and other relevant connection, and to the use of services and content, such as:
• purchase data, such as data on products and services purchased, including product warranty information, and necessary data on payment, invoicing and debt collection, such as credit card details
• data relating to the use of products
• feedback and complaints
• data on participants in events and training
• location data (if the customer has given express permission for this)
• browsing data and other data on the use of the controller's electronic services and content, including technical data sent by the data subject's browser to the controller's server (IP address, browser) and cookies sent to the data subject's browser and related data, where personal data is linked to the cookies
• data relating to marketing and sales promotion, such as marketing measures targeted at the data subject, their use and data provided in connection with them, as well as direct marketing consents and prohibitions
• recordings of customer service calls and customer service email and online conversations, for example on social media channels
6. Regular sources of data
• Customer data is collected from the customer themselves when a contract is concluded, in the 'my details' section of the online service, in connection with the use of products and services, in connection with customer service, and when the customer takes part in product and service development, studies or surveys.
• Personal data may also be collected and updated from other registers of the controller and of companies belonging to the same group from time to time, and from authorities and companies providing personal data services, such as the Population Information System and other similar registers.
7. How we use cookies
• We use cookies and other similar technologies, such as the browser's local storage, to provide and develop our services. We also use cookies to personalise content and target advertising. Among other things, cookies allow us to offer more up-to-date and personalised services by showing content based on the user's interests. They also make it possible, for example, to log in and authenticate, to save personal settings and preferences, and to analyse how our websites work. When you use our online services, they collect data such as: your IP address, which links you use, which adverts or other content you have viewed, which page you came from and which pages you visit, the time of browsing, the type of your browser or app, and other similar data.
• You can control the use of cookies, for example, through your browser's settings. More information about cookies can be found in each browser's privacy or help documentation. Certain features of the services depend on cookies, so blocking and deleting cookies (browser and other settings) may impair the functionality and user experience of the web or mobile application service in question.
8. To whom we disclose your personal data
Personal data may be disclosed only within the limits permitted and required by the legislation in force at the time and in the manner required by the competent authorities. The controller may share your personal data with carefully selected third parties for joint or independent direct marketing purposes. Data may be shared for these purposes only where the third party's intended use does not conflict with the purposes defined in this privacy policy of the controller.
At its discretion, the controller may share the personal data of participants in the controller's events with other participants in the event in question, where this is appropriate owing to the nature of the event.
After the relevant connection has ended, the controller may transfer data to its own direct marketing register within the limits permitted by law.
The controller may share your personal data with third parties that perform services for the controller. These services may include, for example, customer service, software services, research, marketing and event production. The controller may share your personal data in order to collect payments for products and services, and may, for example, transfer or sell unpaid invoices to third parties providing debt collection services.
Protecting your personal data is important to us, which is why we do not allow these parties to use the data for any purpose other than providing the services in question, and we require them to protect users' personal data in accordance with this privacy policy and applicable legislation
Personal data is not regularly disclosed for purposes other than those mentioned above. However, the controller is entitled, as permitted by law, to disclose personal data in situations such as those relating to the sale of a business. In addition, the controller may disclose data for purposes such as statistics and analysis in such a way that the disclosed data cannot be linked to an individual person.
9. Do we transfer your personal data outside the EU
In providing its services, the controller may use resources and servers located in different parts of the world. The controller may therefore transfer your personal data outside the country in which the services are used, and possibly also to countries outside the EU whose data protection legislation differs. In such cases, the controller ensures that there is a legal basis for the transfer and that users' personal data is protected, for example by using (where necessary) standard contractual clauses approved by the relevant authorities and by requiring compliance with appropriate technical and other data protection measures
10. How long your data is retained
We retain your data for at least the duration of the customer relationship. After the customer relationship ends, the retention period depends on the data and its purpose. For example, your customer due diligence data is retained for five years after the end of the customer relationship, and data on potential customers is as a rule retained for six months from collection. We comply with statutory obligations on data retention. We aim to keep the personal data we hold accurate and up to date by deleting unnecessary data and updating outdated data. However, we encourage you to check from time to time that your data is up to date.
11. How your personal data is protected
We protect your personal data with great care using appropriate data protection and information security measures. Such measures include proactive and reactive risk management, the use of firewalls, encryption technologies and secure equipment facilities as well as access control and security systems, security planning, controlled granting and monitoring of access rights, ensuring the competence of staff involved in processing personal data through training and assessments, and careful selection of subcontractors. We continuously update our internal practices and guidelines as appropriate.
12. Your rights as our customer
We are committed to processing data in accordance with the Data Protection Regulation and offer our users the following choices and means of control relating to data protection:
Prohibition of direct marketing
Users have the right to prohibit the disclosure and processing of their data for direct advertising, distance selling and other direct marketing by contacting our customer service.
Right of access
Users have the right to access the personal data stored about them. At the user's request, we will rectify, erase or supplement personal data that is inaccurate, unnecessary, incomplete or outdated for the purpose of processing. Users can update and/or check their personal data by contacting our customer service.
Blocking cookies
Users can block the use of cookies by changing their browser settings. Blocking cookies may affect the functionality of our services.
Clearing cookies
Users can clear cookies in their browser settings. By clearing cookies at regular intervals, the user changes the identifier on the basis of which a profile of the user is built. However, clearing cookies does not stop data collection altogether; rather, it resets the profile based on previous behavioural data.
Consent to the use of location data
Users can give their consent to the use of location data in the settings of their device and application. Users can also withdraw their consent at any time through these settings.
13. May this privacy policy be amended
We are continuously developing our services and reserve the right to amend this privacy statement by giving notice of it in our services. Amendments may also be based on changes in legislation. We recommend that you review the content of this privacy statement regularly.