Privacy policy

Peremmälle Oy Customer Register Data Protection and Privacy Policy
Finnish Data Protection Act (1050/2018) EU General Data Protection Regulation (GDPR) Articles 13-14 Updated: [Insert Current Date]
This privacy policy explains how Peremmälle Oy collects, uses, and protects customers' personal data, particularly regarding our customers located in the United States.
1. Controller Name and Contact Information

• Company: Peremmälle Oy
• Business ID: 3236037-7
• Address: Huvilakatu 1 A 10, 80200 Joensuu, Finland
• Telephone: +358 50 330 6120
• Website: www.peremmalle.fi

2. Contact Person Responsible for the Register

• Name: Katja Kareinen
• Email: katja@peremmalle.fi
• Telephone: +358 50 330 6120

3. Legal Basis and Purpose of Processing Personal Data The main purpose of processing personal data contained in Peremmälle Oy's customer register is to carry out measures related to managing the customer relationship, such as communication, invoicing, service delivery, and customer service.
As a company based in the European Union, we process personal data in accordance with the EU General Data Protection Regulation (GDPR). The legal basis for processing personal data is primarily the performance of a contract and the legitimate interest of the controller (managing the customer relationship). In some situations, processing may be based on your separate consent. You have the right to withdraw your consent at any time.

4. Data Content of the Register The data stored in the register includes: the person's name, contact information (telephone number, email address, and physical address if necessary), dates of customer meetings, billing and payment information, ordered services, and other information directly related to maintaining the customer relationship. Notes on customer meetings are stored as separate, confidential data.

5. Regular Data Sources The data stored in the register is obtained directly from the customer, for example, when you submit your information to Peremmälle Oy via our website, during an initial meeting, or when purchasing a service.

6. International Data Transfers (US to EU) Because our customers are located in the United States and our operations are based in Finland, the personal information you provide to us will be transferred to, processed, and stored in Finland (within the EU/EEA). We maintain appropriate safeguards as required by the GDPR to ensure your data remains protected. We do not disclose or transfer data to other third parties outside the EU/EEA unless explicitly required by law or necessary for the delivery of our services (e.g., using secure, compliant software providers).

7. Protection and Retention of the Register The register is handled with strict care, and all data processed using information systems is protected with appropriate technical and organizational measures. Physical and digital security (such as encryption and access controls) are strictly maintained. Data is handled confidentially and only by employees or authorized personnel whose job description requires it.
Personal data is stored only for as long as necessary to fulfill the purposes of the customer relationship or to comply with accounting and tax laws. Outdated and unnecessary data is deleted securely.

8. General Customer Rights (GDPR) Customers have the right to:

• Access and check what personal data is stored about them.
• Request the correction of inaccurate data.
• Request the deletion of their data ("right to be forgotten").
• Restrict or object to the processing of their data.
• Data portability (receive their data in a structured format).

If you wish to exercise any of these rights, please send a written request to the contact person listed in Section 2.

9. Additional Notice for U.S. Residents (State Privacy Rights) Depending on your U.S. state of residence (such as California, Virginia, Colorado, etc.), you may have specific rights regarding your personal information. Please note that Peremmälle Oy does not sell or share your personal data to third parties for cross-context behavioral advertising or monetary gain. We only use your data to provide the services you have requested from us.

10. "Do Not Track" Disclosures Some U.S. state laws require us to let you know how we respond to web browser Do Not Track (DNT) signals. Currently, there is no universally accepted standard for DNT signals, and our website does not currently respond to them.

11. Children's Privacy (COPPA) Our services and website are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information immediately.