Privacy policy

Registry and Privacy Statement

This is a registration and data protection set of Bombus Oy's Personal Data Act (Section 10 and 24) and the EU General Data Protection Regulation (GDPR).

Updated 17th of August 2021

Customer Register

1. Registrar
Name: Bombus Oy
Business ID / VAT: FI01908790
Address: Valtakatu 21-23
Postal code: 94100
Post office: Kemi
Country: Finland
Telephone number: (+358)16 256 778
E-mail address: bombus@bombus.fi

2. Purpose of the Registry
Personal information to be collected is used for:
Customer identification, access control, fulfillment of orders, maintenance and development of customer relationships. Personal information is also used in the event of a newsletter and other customer communication, competitions and breakdowns or other marketing measures as well as regarding orders, billing and debt collection.

3. Basis for collecting and processing information
Customer information is collected and processed with the consent of the customer, or to implement the agreement with the customer.

4. Data content of the register
The registry contains, for example, The following types of data:

Customer's basic information such as:

First and last name
Adress
Postal district
Country
Email address
Telephone number
Usernames and passwords for registrar's web services

Customer relationship with information, such as:

Customer relationship related communication and communication (including feedback, complaints, marketing)
Registered targeted marketing measures, as well as other measures related to customer relationship maintenance
Direct Marketing Permits and Brackets
Purchase History

Changes of the information identified above and technical identification information related to data processing, such as an IP address.

5. Data retention period
Personal data is stored and maintained as long as they are needed to implement the agreement with the customer, to meet statutory obligations and to develop customer service.

6. Regular information sources
The information to be recorded in the register is made by the customer, for example, from the messages sent on the web forms, email, telephone, instant messaging services, social media services, contracts, customer meetings and other situations where the customer surrender his or her information. The information is also collected and processed using the Google Analytics Analytics Tool, or a corresponding tool and in connection with the purchase transactions.

7. Regular disclosure and transfer of information outside the EU or the European Economic Area
Registry personal data is processed by:
• Bombus Oy and its employees
• Payment brokers who receive customer payments
• Transportation companies that transport goods to customers
• Accounting Office, who records Bombus Oy's accounts
• An auditor who inspects accounting
• IT companies for whom Bombus Oy has outsourced IT infrastructure maintenance, analytical expert tasks and other expert tasks related to online services.

Information will not be disclosed for external use and all personal processing data is bound by the obligation of professional secrecy. Information can be published so far as it has been agreed with the customer.

Bombus Oy uses so-called " Cloud services ", so some partners which Bombus Oy uses for external services or software providers may maintain information on servers located outside the EU or the European Economic Area.

8. Use of cookies (cookies)
On our website we use the so-called cookies. The cookie is small, text file to be sent to the user's computer and a text file that allows the Internet pages to identify frequent visitors to the pages, to facilitate visitors to make it easier to sign up for visitors to the pages, and to enable to create a combination of information from visitors. With this feedback, we are constantly able to improve the content of our pages. Cookies do not damage users' computers or files. We use them in such a way that we can provide our customers with information and services to better meet the customers needs.

If a user visiting on our website does not want us to receive the above information with cookies, most browsers allow you to turn off the cookie program. This is usually done through the browser settings.
However, it is good to take into account the fact that cookies may be necessary for the proper functioning of the pages we have maintained and the services we provide.

9. Protection of the Registry
Bombus Oy's e-commerce information is electronically maintained by servers that are properly protected by external firewalls and other technical safeguards. The information contained in the register will be accessible and are eligible to deal with the predetermined employees of a registrar or the controller partner whose job is part of the data processing. These workers are bound by the obligation of professional secrecy.

10. Automatic decision-making
Automated individual decisions (Article 22 of the EU Data Protection Regulation) is not done.

11. Registered rights
A registered user has the right to check what information about him or her has been stored in the register. A written request must be sent signed to the above-mentioned controller's e-mail address.

The right to check stored data is free of charge when done at the most once a year.

The registered user is entitled to require a correction or deletion of incorrect or obsolete data or the transfer of data from one system to another. The registered also has the right to restrict or object to the processing of its data in accordance with Articles 18 and 21 of the EU Data Protection Regulation.

The registered has the right to withdraw a previously given consent to the processing of data or to make the appropriate appeal to the supervisory authority of the processing of their personal data.

The registration also has the right to prohibit the use of its data for direct marketing purposes.

For more information on registered rights, see the English homepage of the Office of Data Protection Ombudsman: www.tietosuoja.fi/en/home