Kuvaverkko stores and handles personal data in accordance with the EU GDPR and the current Personal Data Act (523/1999).
Policy creation date: September 9th 2017
Updated: May 7th 2021
1. Registry holder
Kuvaverkko Oy (hereafter referred to as Kuvaverkko)
Business ID 10586551
2. Person managing registry matters
3. Name of the registry
Registry based on customership or other connection with Kuvaverkko
4. The registry’s purpose of use
The legal basis for handling personal data, according to the EU General Data Protection Regulation, is:
Legitimate interest (customership)
We handle personal data based on customerships and other appropriate connections, such as partnerships, for purposes such as managing, maintaining and developing the aforementioned relationships with schools/daycare centres/sports clubs/businesses/communities (hereafter referred to as the Purchaser). Personal data is handled in order to deliver services, such as taking, developing and delivering photos, as well as sending invoices to and communicating with the customers. Furthermore, we handle personal data in order to analyse and develop our services and other business operations.
Data retention period
The data generated from the photoshoots will be stored in the service for two (2) calendar years, after which all image files will be permanently deleted and other personal data will be anonymized. Anonymisation means the processing of personal data in such a way that the person can no longer be identified from them.
Payment records are retained for five (5) years based on the Anti-Money Laundering and Terrorist Financing Act.
5. The data content of the registry
The data recorded in the registry includes:
Basic information, such as
- the first and last name of the guardian and/or the person being photographed
- contact information (post address, email address, phone number)
Information related to the customership or other appropriate connection, such as
- the group or class of the person being photographed´
- the Purchaser’s information
- image files
- information concerning the registration (password and login)
- information concerning order history, including payment methods and debt collection
- reclamations, feedback and other communications and measures related to the customership or other connection, including recorded phone calls and the registrant’s actions in social media services related to the registry holder
- marketing bans
- marketing measures targeted at the registrant and their use
6. Registry protection
A. Manual material
After the manual material, mainly sign up forms, have been delivered to Kuvaverkko, they will be saved into the information systems and disposed of as appropriate.
B. Information saved into the information systems
Data contained in the registry and handled electronically is protected by firewalls, passwords and other technical means commonly approved in the field of information security. We will guarantee that the stored information and server access rights, as well as other personal data critical to data safety, are handled on a confidential basis and by only those employees whose roles include the handling of said data.
7. Right of access and the right of requesting corrections
Every person included in the registry (Customer) has the right to check their personal data that has been saved in the registry and request that any errors or omissions be rectified. If a Customer wants to check their personal data that has been stored in the registry or request a correction, they must send a written request by mail to the company’s address or via email to asiakaspalvelu[at]kuvaverkko.fi. The registry holder may ask proof of identity from a person submitting such a request, if necessary. The registry holder will reply to the Customer within a time period specified in the General Data Protection Regulation (typically within a month).
8. Right of prohibition
A Customer whose data has been stored in our registry has the right to request that this data be removed from the registry (‘right to be forgotten’). All requests must be sent in writing to Kuvaverkko or via email at asiakaspalvelu[at]kuvaverkko.fi. Kuvaverkko may ask proof of identity from a person submitting such a request, if necessary. Kuvaverkko will reply to the Customer within a time period specified in the General Data Protection Regulation (typically within a month). The registrant may, if she/he wishes, give Kuvaverkko Oy consents or prohibitions concerning direct marketing by contacting customer service.
9. Regular information sources
The registry’s regular information sources are the Customers themselves when they sign up for photo sessions or use Kuvaverkko’s online shop. Customers provide information about themselves when registering, purchasing photo products, using Kuvaverkko’s other services or participating in marketing campaigns, among other things. Additionally, we collect personal data through the terminals used by the Customers with cookies or similar technologies.
Cookies can be used to monitor the number of service users and gain information on the websites, browsers and operating systems used by the visitors. Also the users’ IP and web addresses will be recorded with cookies. Cookies also collect information about the use of the device, including the user ID, language selection, font size and various screen settings.
If a user does not want to accept cookies, their use can be prevented. However, in that case we cannot guarantee that our services will continue to work smoothly, because the cookies are necessary for the appropriate functioning of our website and services.
11. Concerning data assignment and transfer
Kuvaverkko shall not assign or transfer the data in its customer information registry for any other purposes than issuing invoices, debt collection and, upon request, to the people in question or authorities.The regulations of the EU General Data Protection Regulation will be followed in all data transfers.
Personal data will not be transferred outside the EU member states’ territory or the EEC.
In accordance with the order and delivery terms, the Customer gives Kuvaverkko permission to deliver the photographs of a person to the school/daycare centre/sports club/company/community that purchased the photo session and to publish and deliver group and friend photographs of a person to all the people in the photos and/or to their guardians.
This registry statement will always be available at www.kuvaverkko.fi