This Privacy policy explains how we collect, process and share the information we collect. This Privacy policy is in accordance to the Finnish Personal Data Act (523/1999) 10§.

Name of Registrar

Saggthem (Viihdekeskus Cosmic)
Torikatu 31
80100 Joensuu
Finland
Business ID: FI23184439

Person in charge of Registrar

Tomi Väänänen
Email: tomi.vaananen@cosmicjoensuu.fi

Name of register

Saggthem’s webshop Customer Register

Use of register

Customer personal data is used for fulfilling orders and requests for products, tracking of lost shipments, statistics, developing customer relations and planning and producing products and services. Saggthem and possible selected partners will be able to use the data for direct marketing, competition and research purposes.

Content of register

Personal details of customers:
Name and address
Email address
Telephone number
Purchase history
Order history
Tracking data of the posted orders

Sources of information

All information held consists of data given by the user during ordering process and customer transactions.

Recipients or groups of recipients of personal data

The information is stored on Hostingpalvelu Oy's servers, which meets the requirements of the EU data protection regulation. Saggthem – Metropoli Keilahalli Oy does not disclose information to outside parties.

Transfer of personal data outside the EU

The data is stored and processed on the servers of Hostingpalvelu Oy, which meets the requirements of the EU Data Protection Regulation (GDPR) regarding the processing of personal data.

Criteria for the retention period of personal data

Order information is destroyed one year after the last order.

About the rights of the registrant

As a general rule, the registered person has the right to find out what information about him is stored in the customer register. The controller may ask the registrant to specify in a sufficient manner which information or processing operations the registrant's request applies to.

The controller must, at the request of the data subject, delete the personal data concerning the data subject without undue delay, if the personal data is no longer needed for the purposes for which it was collected or for which it was otherwise processed.

The right to file a complaint with the supervisory authority

The data subject has the right to file a complaint with the competent supervisory authority if the data subject considers that the data controller has not complied with applicable data protection regulations in its operations.

Requests related to using the rights of the registered person

For questions related to the processing of personal data and in situations related to exercising one's own rights, the data subject can contact the controller's contact person mentioned in point 2.

A request regarding the right of inspection or other request regarding the exercise of the data subject's rights must be made to the controller in writing either by email or by post. The request must be signed by the registered person.

The controller may ask the registrant to specify in a sufficient manner which information or processing operations the registrant's request applies to.

If necessary, the controller may ask the person making the request to prove their identity with an official ID or in another reliable way, in order to ensure that personal data is not disclosed to anyone other than the registered person in connection with the use of the rights of the registered person.