Version according to the EU General Data Protection Regulation (679/2016).
Gitakan Tech Institute Oy
Business ID: 3462250-2
Email: info@gitakan.com
The person whose data is processed.
A company who has registered as a user of the Gitakan service and uses the service on their own website, where personal data is collected.
User register
The legal basis for the processing of personal data is: The contractual relationship between the registered and the controller. The information sent by the registrant is sent to the Customer by email. The customer only uses the information to respond to contact requests and to process possible orders. Personal data is processed only when it promotes product delivery, sale, return or other communication related to purchases.
The information to be entered in the personal register is obtained from the registrant himself in accordance with the rules.
Name
Personal data is not disclosed as a rule. Therefore, personal data is also not transferred outside the EU and the European Economic Area. However, information can be disclosed, for example, to the authorities based on a requirement based on law.
Data is protected with strong passwords, secured network connections, and continuous technical security updates.
Information is stored for at least 10 years from the moment of contact.
Personal data is not used for profiling or other automatic decision-making.
The right to access personal data
The registered person has the right to receive confirmation as to whether personal data concerning him or her is being processed, and if processed, the right to receive a copy of his or her personal data.
Right to rectification of data
The registered person has the right to request that inaccurate and incorrect personal data concerning him be corrected. The registered person also has the right to have incomplete personal information completed by submitting the necessary additional information.
The right to delete data
The registrant has the right to request the deletion of personal data concerning himself, if
a. personal data are no longer needed for the purposes for which they were collected;
b. the data subject withdraws the consent on which the processing of personal data was based, and there is no other legal basis for the processing;
c. personal data has been processed illegally.
The right to restrict processing
The registrant has the right to restrict the processing of personal data concerning himself, if
a. the data subject denies the accuracy of his personal data;
b. the processing is against the law, and the data subject objects to the deletion of his personal data and instead demands the restriction of their use;
c. the controller no longer needs the personal data for the original purposes of the processing, but the data subject needs them to prepare, present, or defend a legal claim;
The right to transfer data from one system to another
The registered person has the right to receive the personal data concerning him and that he has provided himself in a structured, commonly used and machine-readable format and the right to transfer the data in question to another controller.
The right to file a complaint with the supervisory authority
The national supervisory authority for personal data matters is the Data Protection Commissioner working in conjunction with the Ministry of Justice. You have the right to submit your case to the supervisory authority if you believe that the processing of your personal data violates the relevant legislation.
In all questions related to the processing of personal data and in situations related to exercising one’s own rights, the data subject must contact the controller in writing by sending an email to info@gitakan.com.