This is a statement on the processing of your personal data pursuant to the EU’s General Data Protection Regulation (679/2016).
Oravio Oy
Business ID: 3326910-2
Address: Hyttitie 6, 00700 HELSINKI
Phone: +358 449017446
Email: tuki@oravio.fi
We request that data subjects contact the Controller listed hereinabove for all questions related to the processing of personal data and situations related to the exercising of your rights.
The legal bases for processing personal data are legitimate interest and consent. If a contract has been made with the data subject or the company they represent, the legal basis is the contract. Personal data is collected for the purpose of managing customer relationships and meeting legal obligations.
The data controller collects only relevant and necessary personal data for the purposes described in this privacy statement.
The following personal data may be processed:
- First and last name of the person
- Mailing address
- Phone number
- Email address
- Name of the company for corporate customers
- Business ID for corporate customers
- Information on orders and purchased services.
The retention period for personal data is seven years after the end of the customer relationship. After this period, the data controller will delete or anonymize the data according to the deletion processes they follow. However, the data controller may be required by law or regulation to process some personal data in the register for a longer period.
The Oravio.fi website only uses cookies that are strictly necessary for the functioning of the website. A cookie is a small text file that is sent to the user's device when visiting a website. Cookies do not harm users' computers or files.
Users can choose to block all cookies in their device or browser settings if they wish to do so.
The data subject has the right to receive confirmation regarding whether personal data concerning them is being processed and, if it is, the right to receive a copy of their personal data.
The data subject has the right to request that inaccurate and erroneous personal data concerning them be rectified. The data subject also has the right to supplement incomplete personal data by submitting the required additional information.
The data subject has the right to request erasure of personal data concerning them if the personal data is no longer required for the purposes for which they were collected, or the personal data has been unlawfully processed.
The data subject has the right to restrict the processing of personal data concerning them if the data subject contests the accuracy of their personal data, or if the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead. The data subject also has the right to restrict the processing of personal data if the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment,exercise, or defense of legal claims.
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit this data to another controller.
The office of the Data Protection Ombudsman, operating under the Ministry of Justice, is the national supervisory authority for personal data matters. You have the right to bring your case to the supervisory authority if you consider that the processing of personal data concerning you is in violation of applicable law.