1. Register Description

Personal Data Act GDPR
Date of preparation: 2022

​

1.1. Data Controller

Hiisi Products Oy
Ullavantie 165
69100 Kannus

​

1.2. Contact Person for Register Matters

Hiisi Products Oy
Business ID: 3317702-1
Ullavantie 165
69100 Kannus
FINLAND

​

1.3. Name of the Register

User register of the online store hiisiproducts.com

​

1.4. Purpose of Processing Personal Data (Purpose of the Register)

The personal data stored in the hiisiproducts.com online store’s user register are used for managing customer relationships, handling contacts, marketing purposes, and other purposes related to online services.

​

1.5. Data Content of the Register

The register collects basic information on registered users, such as:

1. name

2. address

3. phone number

4. email

5. other possible sales-related information, such as the make and model of the ATV

 

1.6. Regular Sources of Data

The data controller records in the hiisiproducts.com online store’s user register the information that the user provides when using the website. Information may also come to the company’s knowledge via email, phone, chat, or other means.

​

1.7. Regular Disclosure of Data and Transfer of Data Outside the EU or EEA

No regular disclosures of data to third parties. No transfers of data outside the EU or EEA.

​

1.8. Principles of Register Protection

The data in the hiisiproducts.com online store’s user register are stored in the controller’s system, which is protected by the security software of the operating system. Access to the system requires entering a username and password. The system is also protected by firewalls and other technical measures. Only certain pre-defined employees of the controller have access to and the right to use the data stored in the system. The data contained in the register are located in locked and guarded premises.

​

1.9. Right to Object

The data subject has the right to prohibit the data controller from processing their personal data for direct marketing, distance selling, other direct advertising, and for market and opinion research, as well as for personal directories and genealogical research. The prohibition must be made in writing and addressed to the person responsible for register matters.

​

1.10. Rights of the Data Subject

The data subject has the right to inspect the personal data stored about them in the register and to receive copies of them. The inspection request must be made in writing and addressed to the person responsible for register matters.

​

The data subject has the following rights:

1. right to access personal data

2. right to rectification of data

3. right to restriction of processing (e.g., prohibition of marketing)

4. right to object to processing

5. right to withdraw consent (e.g., withdraw consent to marketing)

6. right to lodge a complaint with the supervisory authority

Please note that you have the "right to be forgotten" only if we have no statutory obligations to continue processing your personal data.

​

1.11. Rectification of Data

The controller will, on its own initiative or at the request of the data subject, correct, delete, or supplement any personal data in the register that are incorrect, unnecessary, incomplete, or outdated for the purpose of processing. The data subject must contact the person responsible for register matters to request rectification.

​

1.12. Recipients of Your Personal Data

Our company and its employees, payment intermediary Klarna, transport company and its subcontractors Matkahuolto, Posti, DHL, DPD, Postnord, Fedex, online store administrators wix.com, Google, and Facebook.