1. The controller
Name: Gingercode Oy
Business ID: 3293376-1
Postal address: Metsäläntie 8B A34, 00240 Helsinki
2. The person responsible for the register
Name: Joona Penttilä
Telephone: 0408355751
Email: joona@gingercode.fi
3. Name of the register
Gingercode e-services customer register
4. Legal basis and purpose of the processing of personal data
Personal data of the customer may be processed for the following purposes:
- managing and administering a client or other relationship based on a material connection
- analysis and statistics
- planning, analysis and development of the business activities of the controller and of companies belonging to the same group as the controller.
- marketing by the controller and its affiliated companies, including direct marketing and targeting of the data subject's interest, for example through profiles created on the basis of the customer's purchase history or other data.
- other similar uses that do not conflict with the uses described above.
5. Data content of the register
Basic information about the data subject, such as:
- first name and surname
contact information (e.g. phone numbers, email addresses) - information on the profession or status in the workplace of the contact persons of business customers
- data relating to the customer and other material connection and to the use of services and content, such as: registration data relating to the controller's services.
- profiling and interest data provided by the data subject
- information on purchases, such as information on the goods and services purchased, and the necessary information on payment, invoicing and collection.
- customer communication data, including any call recordings
- feedback and complaints, including information relating to defects and product liability
- browsing and other data concerning the use of the controller's electronic services and content, including the technical data (IP address, browser) sent by the data subject's browser to the controller's server and the cookies sent to the data subject's browser and related data, if personal data are associated with the cookies.
- information relating to marketing and promotion, such as the marketing measures targeted at the data subject, their use and the information provided in connection with them, as well as direct marketing authorisations and prohibitions.
The IP addresses of visitors to the website and the cookies necessary for the functioning of the service are processed for legitimate interests, such as ensuring data security and collecting statistics on visitors to the website in cases where they can be considered as personal data. Third party cookies are subject to separate consent where necessary.
6. Regular sources of information
The information stored in the register is obtained from the customer through, for example, messages sent via web forms, e-mail, telephone, contracts, customer meetings and other situations where the customer discloses their information.
Information on contact persons of businesses and other organisations may also be collected from public sources such as websites, directory services and other businesses.
7. Regular disclosures and transfers of data outside the EU or EEA
Data is not regularly disclosed to other parties. Data may be published to the extent agreed with the customer.
Data may also be transferred outside the EU or EEA by the controller. Data will not be transferred to the United States without the express consent of the data subjects.
We use MailChimp for direct marketing
Mailchimp Privacy Policy
8. Principles of register protection
The register is processed with due care and the data processed by the information systems are adequately protected. Where the data are stored on Internet servers, the physical and digital security of their hardware shall be adequately ensured. The controller shall ensure that stored data, as well as access rights to servers and other information critical to the security of personal data, are treated confidentially and only by employees whose job description includes this.
9. Right of inspection and right to request correction of information
Every person in the register has the right to check the information stored in the register and to request that any inaccurate or incomplete information be corrected or completed. If a person wishes to check or request a correction of the data stored about him or her, the request must be sent in writing to the controller. The controller may, if necessary, ask the applicant to prove his or her identity. The controller will reply to the customer within the time limit laid down in the EU General Data Protection Regulation (as a general rule, within one month).
10. Other rights relating to the processing of personal data
A person in the register has the right to request the erasure of personal data concerning him or her from the register ("right to be forgotten"). Data subjects also have other rights to Rights under the EU General Data Protection Regulation such as limiting the processing of personal data in certain situations. Requests should be sent in writing to the controller. The controller may, if necessary, ask the applicant to prove his or her identity. The controller will respond to the customer within the time limits set by the EU General Data Protection Regulation (as a general rule, within one month).
Cookies
This website uses cookies, or "crackers". These cookies are small text files that are stored on your device when you visit the site. They collect information about how you use the site. Cookies are not harmful and do not cause any harm to your computer, files or use of the internet.
Cookies are used for a variety of purposes, such as website functionality, analysis and marketing.
The site is monitored by third party analytics and tracking services. These include Google Analytics and Hotjar. These provide statistics on user numbers, browsing habits and devices used, among other things. These allow us to see how the site is performing and to improve it.
This is also the kind of information that cookies collect:
- user IP address
- time of day
- used pages
- browser type
- from which web address the page was accessed
- from which server the page was accessed
- from which domain the page was accessed.
It is impossible to identify individuals from the analytics. Cookies are also used, for example, for registration and login purposes on the site.
For more information, visit About Google's cookie policy
For more information, visit about cookies in general
Removal and prevention of biscuits
You can block cookies from the Google Analytics web analytics service on your browser if you wish. with an add-on to be fitted. Other cookies can be disabled or blocked in the settings of the web browser you are using. Please note that some functions require cookies. Gingercode does not guarantee the full functionality of the site if such cookies are disabled on the site.
Updating the factsheet
This Privacy Policy may be updated as our operations evolve, as our privacy principles are updated or as legislation changes. Changes will be effective when they are published.