Abstract

Meriser Oy is committed to protecting the privacy of its customers. This privacy policy is used to inform our clients about the processing of their personal data. The customer must accept the terms of this privacy policy in order to use the services of Meriser Oy. The data we collect may be divided into user-provided, user-perceived, and analytics-driven data.

• For delivering customer-friendly and safe service
• For offering a good customer experience
• For improving our product promotion and marketing
• For developing customer service and the webstore

Data controller and contact details

What data can be collected?

• Data provided by the user and personal data
• Identification data, such as name
• Contact data, such as address, e-mail address and telephone number
• Data on the use of the services observed and derived by analytics
• The use and browsing data of the webstore and the identification data of the terminal
• Purchase history, e.g. ordered products and their price data
• Delivery data, such as the selected delivery method and delivery address

What are my personal data used for?

• maintaining the customer relationship
• delivering, handling and archiving of orders
• developing the operations and services of Meriser Oy
• enhancing customer experience
• statistics
• producing more personal and targeted contents and marketing
• preventing misuse
• offering better customer service

How is my data stored and protected?

All personal data is protected from unauthorized access and against accidental or unlawful destruction, alteration, disclosure, transfer or other unlawful processing. Meriser Oy stores customer data in Finland. Data centers and the technical and process security of the webstore are at very high level. Servers are protected against hacking and denial of service attacks. We comply with good privacy practices in processing and planning the use of personal data. The processing of personal data complies with the requirements of the EU Data Protection Regulation applicable from 25 May 2018. All access to personal data will be monitored in accordance with good practices.

Who will handle my personal data?

Only Meriser Oy's own employees have access to customer data and our staff is trained to use the data safely and ethically.
We use trusted partners to transfer data to a third party. Our agreements with all partners respect the requirements of the EU's Data Protection Regulation and other legislation.

How long is my data stored?

We will store your personal data only for the time necessary to fulfill the purposes described in this privacy policy statement. In addition, some data may be stored for a longer period, to the extent necessary to comply with legal obligations, such as accounting and b-2-b liabilities, and to show that they are realized appropriately. On customer’s request, customer’s personal data can be removed or anonymized from the webstore systems when the data is no longer used for the purposes defined in the description. For some data, there are legal obligations on the long-term storage of data, e.g. for the following purposes:

• The Accounting Act defines longer retention periods for data regardless of whether the material contains personal data or not
• System logs are collected and stored as required by the law to enable us to provide legal and secure service to our customers
• Making sufficient backups of webstore databases and systems to safeguard data, correct errors, and ensure security and continuity

What are my rights?

• Get access to your personal data, including the right to obtain a copy of your personal data.
• Requests the correction or deletion of your personal data
• Under certain conditions, you can request to restrict the processing or object the processing of personal data

In addition, if the processing is based on separate consent, you have the right to withdraw your consent. Please note that this does not affect the lawfulness of the processing prior to the withdrawal of consent.
You can make a request to exercise your rights by contacting Meriser Oy. The request must be sufficiently individualized to allow us to verify your identity. If there is a legal obligation or right to retain data, we will notify you about this.

How can I access my own data?

You can request to see your data stored in the systems by contacting our customer service.

How can I influence on the usage of my own data?

The customer may also terminate their account at any time and request Meriser Oy to delete their data by contacting Customer Service.
In some cases, not all data may be deleted, and the law may require retaining some customer data.

Will my personal data be disclosed to third parties?

We disclose necessary data to third parties to ensure delivery, and when required, also upon request from the authorities. We will always inform the customer about requests for information if it is permitted by the law.

Does the webstore use cookies and what are they?

Meriser Oy uses cookies. Cookies are small text files between the browser of the terminal and the server. We use cookies to identify the customer, to maintain the login and for shopping cart functions. You must have cookies enabled and accept these cookies in order to use these functions. Cookies set by the server will remain in the browser for one (1) month unless they are removed from the browser settings. A visit to this site will reset cookies if your browser permits it.

We also use Google Analytics. These techniques help us better understand our customers' behavior and tell us which products our customers are interested in.

Can this privacy statement be changed?

Due to the development of the services and changes in legislation, we reserve the right to change this privacy policy statement. Significant changes to the Privacy policy statement will be notified to registered customers upon the update of the terms.