Privacy notice

Contents of the privacy notice

1. Data controller

Ypäjä Golf Oy Jaakkolantie 190, 32100 Ypäjä caddiemaster@loimijokigolf.fi business ID: 1762839-8

2. Person and/or contact person responsible for register matters

Pauliina Pöntinen pauliina.pontinen@loimijokigolf.fi

3. Name of the register

Customer data register based on customer relationship and other legitimate contact with Ypäjä Golf Oy.

4. What your personal data is used for

• Management, analysis and development of customer, member and stakeholder relationships

• Offering and developing products and services

• Delivery, processing and archiving of orders

• For analytical and statistical purposes

• Implementation and follow-up of customer, member and marketing communications.

• Processing, analysis and statistics of customer feedback and results from customer surveys and studies.

• Prevention and investigation of misuse and problem situations.

The legal basis for processing personal data under the EU's General Data Protection Regulation is one of the following

• the person's consent

• contract

• statutory obligation

• legitimate interest

5. What kind of personal data we collect about you

The register may contain the following information and changes to it:

Customer's basic information

• name information

• contact details (postal address, email addresses, phone numbers)

• gender

• date of birth

• information about corporate customers' contact persons' profession or position within the organization

• Customer identifying information

• personal identity code

• customer number

• registration information regarding the data controller's services (e.g. usernames and passwords for the online store and backend system service)

• identifiers used for targeted marketing

Information related to the customer relationship and other legitimate contact, as well as the use of services and content, such as:

• purchase-related information, such as information about purchased products and services, including product warranty information, as well as necessary payment, billing and collection information, such as credit card details

• information related to product usage

• feedback and complaints

• information about events and participants in training sessions

• location data (if the customer has given explicit permission for this)

• browsing data and other information about the use of the data controller's electronic services and content, including technical information sent by the registered person's browser to the data controller's server (IP address, browser), as well as cookies sent to the registered person's browser and related information, if personal data is linked to the cookies

• information related to marketing and sales promotion, such as marketing measures directed at the registered person, their use and information given in connection with them, as well as direct marketing permissions and prohibitions

• recordings of customer service calls as well as email and online discussions related to customer service, for example on social media channels

6. Regular sources of information

• Customer-related information is collected from the customer themselves when entering into an agreement, in the web service's own information section, in connection with the use of products and services, in connection with customer service, and when the customer takes part in product and service development, studies or surveys.

• Personal data may also be collected and updated from registers maintained by the data controller and companies belonging to the same corporate group as the data controller at any given time, as well as from authorities and companies providing services related to personal data, such as the Population Information System and other similar registers.

7. How we use cookies

• We use cookies and other similar technologies, such as the browser's local storage, to provide and develop our services. We also use cookies to personalize content and target advertising. Cookies allow us, among other things, to offer more up-to-date and personalized services by showing content based on the user's interests. They also enable, for example, login and authentication, saving personal settings and configurations, and analyzing how our websites function. When you use our online services, they collect, for example, the following data: IP address, which links you use, which ads or other content you have viewed, which page you came from and which you visit, the time of browsing, the type of your browser or application, and other similar information.

• You can control the use of cookies, for example, through your browser's settings. More information about cookies can be found in each browser's privacy or help documentation. Certain service features are determined by cookies, so blocking and deleting cookies (browser and other settings) may impair the functionality and user experience of the web or mobile application service in question.

8. To whom we disclose your personal data

Personal data may be disclosed only within the limits allowed and required by the legislation in force at any given time, and in the manner required by competent authorities. The controller may share your personal data with carefully selected third parties for joint or independent direct marketing purposes. Data may be shared for such purposes only when the third party's intended purpose of use does not conflict with the purposes of use defined in this Controller's privacy statement.

The Data Controller may, at its discretion, share the personal data of participants in the Data Controller's events with other participants in that event, where appropriate given the nature of the event.

The Data Controller may, after the relevant relationship has ended, transfer data to its own direct marketing register within the limits permitted by law.

The Data Controller may share your personal data with third parties performing services for the Data Controller. Such services may include, for example, customer service, software services, research activities, marketing and event production. The Data Controller may share your personal data in order to collect payments for products and services, and may, for example, transfer or sell unpaid invoices to third parties providing collection services.

Protecting your personal data is important to us, which is why we do not allow these parties to use the data for any purpose other than providing the services in question, and we require the parties to protect the user's personal data in accordance with this privacy statement and applicable legislation

Personal data is not routinely disclosed for purposes other than those mentioned above. However, the data controller is entitled, to the extent permitted by law, to disclose personal data, for example in situations related to the sale of the business. In addition, the data controller may disclose data for statistical and analytical purposes in such a way that the disclosed data cannot be linked to an individual person.

9. Do we transfer your personal data outside the EU

In providing services, the Data Controller may use resources and servers located in different parts of the world. The Data Controller may therefore transfer your personal data outside the country where the services are used, and possibly also to countries outside the EU with different data protection legislation. In such cases, the Data Controller ensures that there is a legal basis for the transfer of data and that the user's personal data is protected, for example by using (where necessary) standard contracts approved by the relevant authorities and by requiring compliance with appropriate technical and other data protection measures

10. How long we retain your data

We retain your data for at least the duration of the customer relationship. After the customer relationship ends, the retention period depends on the data and its purpose of use. For example, your customer due diligence data is retained for five years after the customer relationship ends, and data on potential customers is generally retained for six months from the time it was collected. We comply with statutory obligations regarding data retention. We aim to keep the personal data we hold accurate and up to date by removing unnecessary data and updating outdated data. However, we encourage you to check the accuracy of your data from time to time.

11. How your personal data is protected

We protect your personal data very carefully by using appropriate data protection and information security measures. Such measures include proactive and reactive risk management, the use of firewalls, encryption technologies and secure equipment facilities as well as access control and security systems, security planning, controlled granting and monitoring of access rights, ensuring the competence of staff involved in processing personal data through training and assessments, and careful selection of subcontractors. We continuously update our internal practices and guidelines accordingly.

12. Your rights as our customer

We are committed to data processing in accordance with the data protection regulation, and we offer our users the following choices and control options regarding data protection:

Direct marketing opt-out

The user has the right to prohibit the disclosure and processing of their information for direct advertising, distance selling, and other direct marketing by contacting our customer service.

Checking your data

The user has the right to review the personal data stored about them. At the user's request, we correct, delete or complete personal data that is inaccurate, unnecessary, incomplete or outdated for the purpose of the processing. The user can update and/or review their personal data by contacting our customer service.

Blocking cookies

The user has the option to prevent the use of cookies by changing their browser settings. Preventing the use of cookies may affect the functionality of our services.

Clearing cookies

The user can clear cookies in the browser's settings. By clearing cookies at regular intervals, the user changes the identifier on which the profile formed about the user is based. However, clearing cookies does not stop data collection entirely, but rather resets the profile based on previous behavioral data.

Consent to the use of location data

The user can give consent to the use of location data through the device's and application's settings. Through these settings the user can also withdraw their consent at any time.

13. Can this privacy statement be changed

We continuously develop our services and reserve the right to change this privacy notice by announcing it in our services. Changes may also be based on changes in legislation. We recommend reviewing the content of the privacy notice regularly.