1. Description of the register

Personal Data Act (523/99) Section 10
Created May 31, 2018

1.1. Registrar

JemesSport Oy
Vaeltajantie 1
95980 Ylläsjärvi
FINLAND

1.2. Responsible for registry matters

JemesSport Oy
Vaeltajantie 1
95980 Ylläsjärvi
Janne Pasma
janne@louru.fi
+358 400 8333 54

1.3. Name of the register

JemesSport Oy customer register

1.4. Purpose of processing of personal data (purpose of the register)

The personal data stored on the Jemessport.com User Register is used for customer relationship management, communications, marketing and other online service purposes.

1.5. Information content of the register

The register collects basic information about the data subject, such as:
– Name
– address
– phone
– Email.

1.6. Regular sources of information

The registrar registers information about the user of the jemessport.com website that the user personally discloses when using the website, for example through the Contact Us form or when making a rental reservation.

1.7. Regular disclosures and transfers of information outside the EU or the EEA

The company’s web services are located on Finnish servers. However, website user information is stored in the Google Cloud Visitor Tracking Google Cloud Platform, which may also be located outside the EEA (Privacy Shield countries). Otherwise, personal data will not be transferred outside the EU or the EEA.

Google Ads Data Protection Terms: Service Information

1.8. Registry security principles

The Jemessport.com user registry information is stored on a registrar system protected by operating system security software. Entering the system requires a user name and password. The system is also protected by firewalls and other technical means. Only certain, pre-defined employees of the Registrar will have access to, and have access to, the registry data stored in the system. The physical data contained in the register is located in locked and guarded premises.

1.9. Registered / Subscriber Rights

Pursuant to Articles 12 to 22 of the General Data Protection Regulation, you have the following rights:
• The data subject’s right of access
• Right of rectification
• The right to erasure (‘the right to be forgotten’)
• The right to restrict processing
• Notification obligation to correct or delete personal data or to restrict processing
• The right to transfer data between systems
• oppose
• Prohibit the processing and disclosure of information about him / her through direct mail, distance selling and other direct marketing, market and opinion polling
• In addition, the data subject has the right to object to data processing, automatic decision making and profiling.
The request for verification must be in writing, signed by the controller contact person, and include a copy of the photo ID

1.10. Data subject’s right of inspection

The user has the right to inspect the personal data stored in the register and obtain copies thereof. The request for inspection must be made in writing and addressed to the person responsible for registry matters. The user also has the right to ask the data controller to delete his or her data. “The right to be forgotten.”

1.11. Data correction and retention period

The Registrar shall, on its own initiative or at the request of the data subject, rectify, delete or supplement personal data contained in the Register which are inaccurate, unnecessary, incomplete or outdated for the purpose of processing. The data subject should contact the data controller of the controller in order to correct the information.

Jemessport Oy will remove customer data from the register when there is no longer any commercial basis for processing the data. Personal data will be processed for the duration of the customer relationship and thereafter for the duration of warranty and defect liability.
However, data will not be deleted unless otherwise required by law or if the competent authority has initiated a process that requires Jemessport Oy to retain the information, or if any other party has applied to the Finnish courts for a security decision on the information.
User-level and event-level data stored by Google Analytics will be automatically deleted from Analytics servers after 26 months.
Contacts shall be kept for a maximum of one year, after which they shall be removed from the registers, unless there are legal grounds for doing so pursuant to law or regulation.

1.12 Change

In addition to the website, we collect physical information about the customer along with the rental at our point of sale. This information will not be used in a digital format and will not be exploited in any commercial activity.

1.13 Acceptance of Privacy Statement

This privacy statement was approved on May 31, 2018, and updated on Jan 4, 2020.