Privacy Policy
1 Data Controller
Arho Foods Oy
Business ID: 1754730-1
Aleksis Kiven katu 17, 00510 Helsinki
09 4319 0060
2 Contact person for matters concerning the register
Outi Kokkonen
Aleksis Kiven katu 17, 00510 Helsinki
09 4319 0060
myynti@arho.fi
3 Data Protection Officer
The Data Protection Officer for Arho Foods Oy is Outi Kokkonen.
4 Name of the register
Arho Foods Oy’s customer register and register of potential customers.
5 Purpose of processing personal data
The purpose of keeping the register:
Personal data is collected for a specific, explicit and legitimate purpose in order to fulfil the contractual obligations of the customer relationship. The register collects information from customers and stakeholders.
Personal data may also be collected on the basis of the customer’s consent (e.g. contact information collected at trade shows or forms filled in by the customer whereby the customer gives consent to receive marketing correspondence).
Ther purpose of processing personal data and of the register:
Personal data are collected only for the following predefined purposes:
Customer relationship management (maintenance of the customer relationship, information about products or services, and matters relating to the implementation of the contract and billing).
Providing information about our services to those who have given their consent thereto (targeted advertising and providing information about products, services and events).
6 Content of the register
The register contains information about Arho Foods Oy’s customers, which includes the company’s or individual’s name, address, business ID, contact person’s name, e-mail address, telephone number, billing information and delivery terms and conditions. Details about products/services purchased is also kept in the information about the customer.
The register of potential customers may contain the name, address, telephone number and e-mail address of those who have given their consent.
7 Sources of data in the register
The personal data in the customer register is collected from the customer at the time of the establishment of the customer relationship with the customer or through the customer’s submssion of an online form.
We also collect information through Google Analytics on our website in order to track visitors to the site, to make use of targeted advertising and to make our website more user-friendly. The data collected by cookies is anonymous to us. For more information about Google’s cookie and privacy policy, please refer to Google’s own privacy policy.
8 Disclosure of personal data
Personal data is processed by the staff of Arho Foods Oy for the purposes detailed in this Privacy Policy during the course of their work.
We may also disclose personal data to our service providers to whom we have partially outsourced the storage or processing of personal data (e.g. financial management). These service providers have a contractual relationship with us and use the data as part of the services they provide to us in accordance with data protection legislation.
In individual cases, Arho Foods Oy will disclose customer or stakeholder data to the designated party if the party in question requests Arho Foods Oy to do so, or if, based on legislation, a legally binding authority requires Arho Foods Oy to disclose separately identified data from a database held by Arho Foods Oy.
9 Transfer of data to a third country or international organisation
Arho Foods Oy has decided not to automatically transfer data held by Arho Foods Oy to third countries or international organisations.
Arho Foods Oy will transfer data to third countries or international organisations in individual cases if the customer or stakeholder has given Arho Foods Oy a mandate to act in the above-mentioned manner for this purpose. When data is transferred outside the EU and EEA, we ensure an adequate level of protection of personal data, including by agreeing on issues related to the confidentiality and processing of personal data as required by law.
10 Right to access
The data subject has the right to inspect what data concerning him or her has been recorded in the register. The data subject also has the right to access the data concerning him or her and to the data contained in the records, following a sufficiently precise and specific request for inspection.
The request for inspection must be made in writing, signed and accompanied by a copy of a photo ID to the following address:
Arho Foods Oy
Outi Kokkonen
Aleksis Kiven katu 17
00510 Helsinki, Finland
The data controller will reply to the customer within the time limit laid down in the EU General Data Protection Regulation (as a rule, within one month).
11 Right to rectification and erasure of data
The data controller must correct any inaccurate information in the register of personal data when made aware thereof by the data subject. The data controller is also obligated to check the accuracy and timeliness of the data in the register through his or her own activities. The data subject may also request that the data controller delete data concerning him or her from the register. The Data Protection Officer will be in charge of carrying out this procedure.
12 Other rights relating to the processing of personal data
The data subject has the right to request the restriction of the processing of his or her personal data. The data subject also has the right to receive personal data concerning him or her which he or she has provided to the data controller in a structured, commonly used and machine-readable format and the right to transmit such data to another data controller. In addition, the data subject has the right to object to processing, automated decision-making and profiling.
13 Deletion of data and retention period
Arho Foods Oy shall delete the customer’s data from the register when there is no longer a business reason to process the data or if the data subject him or herself requests that Arho Foods Oy delete the data concerning him or her on the basis of the law. The data will be deleted when there is no longer a justification for the processing or storing of the data. However, the data will not be deleted if the law provides otherwise, or if a competent authority has initiated proceedings requiring that Arho Foods Oy retain the data, or if another party has requested a data protection decision from Finnish legal authorities.
14 Approval of the Privacy Statement
This Privacy Statement has been approved on an ongoing basis and was last reviewed on 7.1.2022