Privacy Policy Vomp & Friends on the processing of personal data Notice on the processing of personal data referred to in Article 14 of the EU General Data Protection Regulation This notice was prepared on: September 20, 2024 This notice was last updated on: - 1. DATA CONTROLLER AND CONTACT INFORMATION Varalan Palvelut/ Vomp & Friends (Business ID 2691694-9) Varalankatu 36 33240 TAMPERE asiakaspalvelu@vomp.fi 2. DATA PROTECTION OFFICER Laura Karintaus +358 44 4931 583 Laura@vomp.fi 3. PURPOSE OF THIS NOTICE This notice explains how Varalan Palvelut processes personal data for the purpose of providing the Vomp & Friends service. At the same time, it provides information in accordance with Article 14 of the EU General Data Protection Regulation (2016/679) to those persons whose data is processed by Vomp & Friends. In this notice, the term "person" refers to all persons whose data is processed. The word "process" is a term defined by law, which means, for example, only storage. 4. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA 1. Personal data is processed for the following purposes: a) To implement the contractual relationship or perform pre-contractual measures concerning the agreement between Vomp & Friends Varala Services and the individual. b) Compliance with legal obligations and exercising rights concerning the following types of obligations and rights related to the Vomp & Friends service: obligations and rights related to customer relationships; obligations and rights in the roles of value-added service provider, information society service provider, communications intermediary, and community provider as defined in the Electronic Communications Services Act; obligations and rights related to direct marketing; obligations and rights related to subcontractors. c) Personal data is used to fulfill storage, reporting, and inquiry obligations in accordance with the law and official regulations and guidelines. d) Personal data is also used for customer service and customer relationship management, as well as for the management and handling of any complaints and the handling of errors. d) Personal data may also be used for the further development of Vomp & Friends' business. 2. The legal grounds for processing personal data are as follows: a) The processing of personal data is necessary for the performance of the agreements referred to in section 4.1 or for taking steps at the request of the data subject prior to entering into an agreement. b) The processing of personal data is necessary for the performance of the Vomp & Friends service in accordance with the law. c) The processing of personal data is necessary for the purposes of the legitimate interests pursued by Vomp & Friends in situations such as: obligations and rights related to customer relationships and the marketing of Vomp & Friends services and products. 5. PERSONAL DATA TO BE PROCESSED 1. Vomp & Friends may process the following categories of personal data at most: location data, personal data, and special categories of personal data (i.e., information concerning race or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or genetic or biometric data, or information concerning sexual behavior and orientation) and profiling data. 2. Vomp & Friends does not require all the information mentioned in section 5.1, but individuals may enter such information when using the Vomp & Friends service. Individuals can therefore influence what information they enter into the Vomp & Friends service. 6. DISCLOSURE OF INFORMATION The information in the customer register is only used by Vomp & Friends, except when Vomp & Friends uses an external service provider to produce value-added services or to support credit decisions. However, the information will not be disclosed outside Vomp & Friends or for the personal use of its partners, except in matters related to credit applications, debt collection, or invoicing, and when required by law. Personal data will not be transferred outside the European Union unless it is necessary for the technical operation of Vomp & Friends or its partner. Registered personal data will be deleted at the user's request, unless legislation, open invoices, or collection measures prevent the deletion of the data. 7. REGISTER PROTECTION The register will not be disclosed to third parties. Access to the register requires user rights to Vomp & Friends' internal network. The register is located on Vomp & Friends' password-protected server, which can only be accessed by Vomp & Friends employees who need to use the member register in order to perform their work. 8. RIGHTS OF THE REGISTERED PERSON The data subject has the right to inspect the information stored about them in the personal data register. A signed written request for inspection must be sent to the person responsible for register matters. The right of inspection is free of charge and may be exercised no more than once a year. The data subject has the right to request the correction or deletion of incorrect or outdated data or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation. The data subject has the right to withdraw their previously given consent to the processing of data or to lodge a complaint with the supervisory authority regarding matters related to the processing of their personal data. The data subject also has the right to prohibit the use of their data for direct marketing purposes. 9. RIGHT TO TRANSFER DATA FROM ONE SYSTEM TO ANOTHER 1. If the processing of personal data is based on consent and is carried out by automated means, the individual has the right, upon request: a) receive the personal data concerning him or her that he or she has provided to the Vomp & Friends service in a structured, commonly used, and machine-readable format; b) transmit that data to another controller, where technically feasible.