Customer Register and data-protection
This data-protection policy covers data that comes under Section 10 of the Personal Data Act (523/1999).
Controller of the Register
Alvar Aalto Foundation
Business ID 0714145-5
Person responsible for online-shop customer register matters: Pia Poskiparta, firstname.lastname@example.org
Name of Register
Alvar Aalto Foundation online-shop customer register.
Purpose of the Register
The data in the Register are used for dispatching orders to registered users of the online shop, maintaining customer relations, and developing the service. Registered customers have the option of refusing to receive marketing messages (e-mail).
Data contained in the Register
Basic customer information:
Name, last name, e-mail address, phone number, address, postcode, town, consent/refusal to receive marketing messages, customer ID, user name and password.
Data arising out of customer relationship:
Order details and history, order delivery addresses, purchasing behaviour and technical information. Data on membership of the Alvar Aalto Society are appended to the user’s customer data on registering as a customer of the shop.alvaraalto.fi shop. Neither credit-card nor bank details are saved during payments.
Data retention period and deletion
Personal data is deleted in accordance with the Personal Data Act, when retention of data ceases to be legally permitted, or for as long as the data are needed to deal with warranty and complaint matters.
Data are stored over an SSL-protected connection.
Register data is stored in firewall-protected databases, which are located in the online shop’s own server. Personal data are processed only by predesignated persons. Processing of Register data requires a password and username, plus sufficient user rights. The Register is protected from outside access.
Disclosure of data
Customer data will only be disclosed outside of the Alvar Aalto Foundation to the extent that delivery of orders and the technical implementation of the service require it. The Foundation can disclose customer data to official bodies as stipulated by current legislation.
Right to check information
Registered customers have a right under the Personal Data Act to check what data affecting them is stored in the personal data register. Requests to check data should be sent signed and in writing to the address:
Alvar Aalto Foundation
Updating of data
Registered customers can update their customer data on the My Account page.
Identification of users by means of cookies is important so that the purchase event will be as secure as possible. The information acquired using cookies is anonymous and will not be combined with any other data that we collect.