Privacy Statement

Protecting your privacy is very important to Rovaniemi Insider.

We want to keep your personal data secure, including personal data processed for marketing and sales purposes. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in the context of marketing and sales activities.

1. Overall description of our data processing practices

Rovaniemi Insider, as the data controller, collects and processes personal data under this Privacy Statement and in accordance with applicable national legislation, including the EU General Data Protection Regulation. The term "personal data" refers to personal identifiable information that directly or indirectly identifies you, such as your name, physical address, e-mail address, IP number or other contact details. Personal data processing refers to any action that we or a third party that we have engaged takes with the personal data, such as collection, registration and storage.

This Policy describes how we process personal data in connection with our webshop ("Webshop"), at our physical stores, and in connection with our marketing activities and our rovaniemiinsider.com ("Websites").

We aim to process personal data that is adequate, relevant and not excessive in relation to the purpose for which it has been collected. We only collect and process personal data where we have lawful grounds to so.

2. Responsible data controller(s) and data processors

The main data controller for personal data collected and processed hereunder is Rovaniemi Insider.

For inquiries relating to personal data at Rovaniemi Insider, please contact: info@rovaniemiinsider.com. For inquiries relating to personal data processing by the other Joint Data Controllers, please refer to their websites.

Rovaniemi Insider uses a number of data processors for processing the data described herein, namely:

• Server/hosting provider
• Webshop service provider
• Webshop interface development partner
• Newsletter and SMS service provider
• Analytics and statistics provider for website
• Website chat provider, customer support tickets
• Customer support resource providers
• Product review provider
• ERP system provider

In addition to the above, when making payments customers will be transferred to the websites/portals of payment service providers, who act as data controllers for the payments. Their privacy notices can be accessed on their own websites.

3. What data is processed, for what purpose, and how long is it stored

Data is collected both directly from Webshop/Website visitors using, e.g., webforms, as well as, e.g., from analytics sources that provide information concerning Webshop/Website visitors. The provision of personal data is necessary for those potential clients that wish to procure Rovaniemi Insider goods or services.

4. Data transfers

The servers are hosted in the EU/EEA. However, personal data may be accessed (and therefore processed) from outside the EU/EEA/UK or in some cases transferred outside the EU/EEA/UK. All transfers/processing of personal data outside the EU/EEA is carried out on the basis of an adequacy decision by the EU commission (GDPR Article 45), or subject to standard contractual clauses (GDPR Article 46), complemented by sufficient supplementary safeguards in order to ensure that the rights of data subjects can be fulfilled. You can request a copy of the standard contractual clauses, including a description of the transferred data, by using the contact details provided for Rovaniemi Insider above.

5. What are your rights

Since we process your personal data you can exercise certain rights during specific circumstances under the applicable data protection legislation as follows:

Right to access and rectification: You have the right to request access to the personal data relating to you. This includes e.g.

• Right to be informed whether or not personal data about you is being processed, what personal data is being processed, and the purpose of the processing. You also have the right to request that inaccurate or incomplete personal data be corrected.
• Right to restriction of processing: You are entitled to restrict the processing of personal data in certain situations.
• Right to be forgotten: You may also request that your personal data be erased if e.g. the personal data is no longer necessary for the purposes for which it was collected, the processing is unlawful, or the personal data has to be erased to enable us to comply with a legal requirement.
• Right to data portability: If personal data about you that you yourself have provided is being processed automatically with your consent or in accordance with a contract between you and Rovaniemi Insider, you may request that the data is provided in a structured, commonly used and machine-readable format and you may also request that the personal data is transmitted to another controller, if this is technically feasible.
• Opt-out from marketing: We will also give you the opportunity to opt out of future marketing whenever we send you marketing material, you can also opt out at any time by contacting us. In such event, please contact Rovaniemi Insider via the contact details listed below.
• You are also entitled, at any time, to lodge a complaint with the relevant supervisory authority if you consider that your personal data has been processed in contravention of applicable data protection legislation. The supervisory authority for Rovaniemi Insider's domicile is the Finnish Data Protection Ombudsman: https://tietosuoja.fi/en/home.

6. Changes to the Privacy Statement

Rovaniemi Insider reserves the right to amend this Privacy Statement from time to time. We will post any changes to on this page and, where appropriate, notify you by e-mail. Please check back regularly to see any updates or changes to our Privacy Statement.

7. Use of non-personal data

Rovaniemi Insider also collects and processes data that does not directly or indirectly identify individual Website/Webshop users. Furthermore, certain data is anonymised or collected into general statistics containing no personal data, which may then be used for developing Rovaniemi Insider goods or services, or analysing usage. In particular, Rovaniemi Insider uses cookies in order to analyse usage and traffic.