LOSVIKA OY PRIVACY POLICY

1. General

This Privacy Policy applies to all personal data processed by and under the responsibility of Losvika Ab. The purpose of this Privacy Policy is to ensure that all personal data processed by Losvika Ab is handled in accordance with the EU General Data Protection Regulation (GDPR) (2016/679) and applicable national data protection legislation

2. Data Controller
Losvika Ab (hereinafter Losvika)
Itäinen Jokitie 217
66900 Uusikaarlepyy
Suomi

3. Definitions
Data Controller – Losvika
Data Subject – A person whose personal data is included in Losvika's records, in this case the customer
Personal Data – Information that can be used to identify an individual
Patient – Animal

4. Personal Data Processed by Losvika

Losvika processes personal data for two purposes: maintaining customer records at Losvika's veterinary clinics and processing orders placed through Losvika's online store.

LOSVIKA EQUESTRIAN STORE

a) Purpose of processing personal data
The processing of personal data is based on the customer relationship between the customer and Losvika.

b) Legal basis for processing personal data
Legitimate interests (Article 6(1)(f) of the GDPR).

c) Categories of personal data and retention period
Personal data is processed in the customer register, which contains the following information:
– Name, address, telephone number and email address Personal data is retained for five years following the customer's most recent purchase.

d) Sources of personal data
The personal data is obtained directly from the data subject.
The information is requested from the data subject because it is necessary for processing orders. If the data subject does not provide the required personal data, the customer will not be able to order products from Losvika's online store.

e) IT system used for processing personal data
Creamarketing Oy Ab – provider and administrator of the Losvika Equestrian Store website.

f) Disclosure and transfer of personal data
Personal data is not transferred outside the European Union or the European Economic Area (EEA).

Personal data is processed in the online store's customer register, which is provided and maintained by Creamarketing Oy Ab. Personal data is not disclosed to third parties.

5. Personal Data Processing Procedures and Principles

Losvika processes personal data in accordance with the principles set out in Article 5 of the GDPR. Data protection is taken into account throughout the entire processing lifecycle. When introducing new services, processes or systems, Losvika assesses how the protection of personal data can be ensured. Losvika Ab takes into account potential risks associated with the processing of personal data in order to minimise the risk of personal data breaches.

6. Use of Cookies
A cookie is a small text file stored on the user's device by their web browser. A user cannot be identified solely through the use of cookies. Cookies are used to support and improve analytics, marketing and communications.

Losvika Equestrian Store uses cookies to manage products in the shopping cart, login to the "My Account" area and functions that are intended to be displayed only once to specific users. Login information is stored in a session cookie and expires when the user closes their web browser. The online store's cookies are managed by the service provider.

7. Ensuring Data Protection and Handling Data Breaches

Losvika's staff are provided with appropriate knowledge of data protection practices to ensure that personal data is processed in accordance with applicable data protection legislation.

Losvika undertakes to notify the relevant supervisory authority of a personal data breach within 72 hours of becoming aware of the breach. If the breach is likely to have serious or extensive consequences for an individual data subject, the affected person will also be informed within a reasonable period of time. 

8. Rights of the Data Subject

Losvika processes personal data on the basis of legitimate interests arising from the customer relationship established between the data subject and Losvika, either as a customer of Losvika's veterinary clinic or as a customer of Losvika's online store. Personal data may also be processed on the basis of a legal obligation to document the use of medicinal products in accordance with Section 72 of the applicable legislation on the medication of animals.

The data subject has the following rights in relation to the legal bases for processing applied by Losvika:
– The data subject has the right to obtain information about whether Losvika processes their personal data and how such data is processed.
– The data subject has the right to request the correction of inaccurate personal data and, where applicable, the restriction of processing while Losvika verifies the accuracy of the data.
– The data subject has the right to object to the processing of personal data based on legitimate interests where grounds relating to their particular situation apply.
– The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman (www.tietosuoja.fi).

If a data subject wishes to exercise their rights, they may contact Losvika by email at [email protected] and specify which rights they wish to exercise. Losvika will assess the appropriate measures based on the request.

(Updated 2.9.2020)