1. Data controller
Contact details for matters concerning our data register: firstname.lastname@example.org
Notice that all the PayPal transactions will be charged via email@example.com.
2. Data subjects
We collect and store the personal data of our customers, partners in cooperation, staff and potential future customers for marketing purposes.
3. Basis for maintaining the data register and its purpose
We maintain our data register to maintain customer relationships and to conduct marketing activities.
PURPOSE OF PROCESSING PERSONAL DATA AND OF THE DATA REGISTER
We store personal data of our customers for preparing their order, billing, marketing and follow-up marketing.
Partners in cooperation
We store personal data of our partners in cooperation for subcontracting and ordering goods.
We collect contact details of potential customers for establishing customer relationships and for marketing activities.
4. Personal data saved in the data register
The customer data register contains the following data:
– email address
– telephone number
– (business ID)
– billing details
– information on purchased products/services
– realized price of the order
Rights of the data subject
The data subject has the following rights which they can exercise by sending their requests to firstname.lastname@example.org.
Right of access
The data subject has the right to access the personal data we have saved on them.
Right to rectification
The data subject has the right to request rectification of inaccurate or incomplete personal data concerning them.
Right to object
The data subject has the right to object processing of their personal data if they consider the processing to be unlawful.
Prohibition on direct marketing
The data subject has the right to prohibit the use of their personal data for direct marketing purposes.
Right to erasure
The data subject has the right to request the erasure of their personal data if the processing of the data is not necessary. We will process the request for erasure after which we will either erase the data or inform the data subject of legitimate grounds based on which the data cannot be erased. It must be noted that the data controller may have a legal or other right not to erase the data that has been requested to be erased. The data controller has the obligation to retain its accounting materials in accordance with the 10-year period set out in the Finnish Accounting Act (1336/1997, Chapter 2, Section 10). For this reason, materials related to accounting cannot be erased before the end of this period.
Withdrawal of consent
If the processing of personal data concerning the data subject is only based on consent and not on e.g. customership or membership, the data subject has the right to withdraw their consent. The data subject may appeal against a decision to the data protection supervisor in their country. The data subject has the right to demand us to restrict the processing of controversial data until the matter is resolved.
Right of complaint
The data subject has the right issue a complaint to the data protection supervisor in their country if they consider that we violate the provisions of the General Data Protection Regulation or other applicable data protection legislation related to the processing of personal data.
Regular sources of data
We obtain customer data regularly: We collect personal data through the order form on our website and when the customer contacts us by email or through social media.
Regular disclosure of data
Cityman Productions. does not disclose data to third parties for marketing purposes. However, if we are obligated to disclose data for marketing or communications purposes, we will ensure that all our service providers comply with the provisions of the General Data Protection Regulation or other applicable data protection legislation.
Duration of processing
Personal and customer data as well as billing details are stored for the entire duration of the customer relationship.
Processors of personal data
Cityman Productions acts as the processor of personal data.
Transfer of data outside the EU
Cityman Productions does not transfer personal data outside the EU or the European Economic Area (EEA). However, if we are obligated to transfer data outside the EU or EEA, we will ensure sufficient level of protection for the personal data by agreeing on matters related to the confidentiality and processing of personal data as stipulated by legislation, among other measures.
Automated decision-making and profiling
We do not use personal data for automated decision-making or profiling.