Partco.fi Online Store Privacy Policy
Prepared on April 10, 2018
This online store privacy policy includes the information required under Section 10 of the Finnish Personal Data Act (523/1999).
1. Data Controller
Elgood Oy / Partco
Juurakkotie 5 B, 01510 Vantaa
Phone: +358 207 981140
Email: info@elgood.fi
2. Contact Person for Register Matters
Elgood Oy Customer Service
Juurakkotie 5 B, 01510 Vantaa
Phone: +358 207 981140
Email: info@elgood.fi
3. Name of the Register
Elgood Oy / Partco sales order and customer register.
4. Purpose of the Register
The data in the register is used for processing orders and managing customer relationships. Data will not be disclosed to third parties unless the customer has given separate consent. By subscribing to the newsletter, the customer gives permission to send direct marketing messages to the provided email address.
Order and transaction data processed in the register may also be used for profiling and for targeting marketing activities and customer communications to be more relevant to the registered individual.
5. Data Content of the Register
Information related to sales order processing is stored in the online store and/or billing system. Data from orders placed without logging in is stored in the same way as for registered users. Credit card or bank details are not stored when paying in-store. Online store payment transaction data is stored in the systems of Paytrail Oy or its partners.
Customer register data: first name, last name, company name, contact details such as email address, postal address, and phone number. Additional grouping data related to business sector and payment methods. Marketing consent.
Sales order register data: delivery and billing addresses and methods, ordered products with prices, and order history.
Technical data collected via cookies or otherwise: IP address, browser type, visit time.
Store surveillance: motion-detected recordings from the past 3 months.
Personal data in the form of sales order history is retained as long as required by law (Accounting Act, typically 10 years) or as long as needed for warranty and complaint handling.
Personal data of registered customers without order history will be deleted upon request or no later than two years after registration.
6. Regular Sources of Information
Primarily from customer interactions via the online store, email, phone, or in-store visits. Additionally from billing databases, CRM and customer service systems, newsletter usage data, business information providers, and authorities.
In addition, anonymized user data may be collected through analytics tools. We also reserve the right to use cookies, which users can disable in their browser settings.
7. Regular Data Disclosures and Transfers Outside the EU/EEA
Customer data is not disclosed to independent third parties. Data is stored in systems located within the EU. Data is only shared with partners when required for delivery or technical service implementation.
Surveillance material is disclosed only to authorities in connection with criminal investigations.
Website usage tracking via Google Analytics may result in data being transferred outside the EU. This data does not include IP addresses or similar personal data.
8. Principles of Data Protection
8.1 Manual Data
Manual material is generated during order processing in the form of printouts. Materials requiring storage are kept in locked premises and destroyed appropriately after the retention period.
8.2 Electronic Data
Data is transmitted and processed over a secure SSL connection. Data is not separately encrypted in databases (except passwords), but access requires valid user credentials and appropriate permissions.
Access to register data is limited to predefined employees and contractual partners whose duties require processing the data. All such persons are bound by confidentiality obligations.
Electronic data is stored securely. Physical access is restricted through access control and other measures. Access is limited to those who need it. Data is backed up by partners, and security is regularly audited. Access control and surveillance data are not accessible through other systems.
9. Cookies
To use the online store, JavaScript and cookies must be enabled in your browser. Otherwise, functions such as registration, login, and adding products to the cart will not work.
We use Google Analytics to analyze website usage. Collected visitor data is stored on Google servers. Read more about Google Analytics.
10. Right of Access
The data subject has the right to access their personal data stored in the register and obtain copies. Typically, this can be done by logging into the online store. A more detailed request must be submitted in writing to the contact person responsible for register matters (see section 2).
11. Right to Rectification
The controller will correct, delete, or supplement incorrect, unnecessary, incomplete, or outdated personal data either on its own initiative or upon request. Requests must be submitted in writing to the contact person responsible for register matters (see section 2).
12. Right to Object
The data subject has the right to prohibit the controller from processing their personal data for direct marketing, distance selling, or market research. Requests must be submitted in writing to the contact person responsible for register matters (see section 2).
Elgood Oy Privacy Policies
Elgood Oy - Privacy Policy - Contact Persons of Customer Companies (pdf)
Elgood Oy - Privacy Policy - Consumers (pdf)
Elgood Oy - Privacy Policy - Supplier Contact Persons (pdf)