Privacy Statement

Personal Data Act (523/1999) Sections 10 and 24

1. a) Data collector

Name

Grape People Finland Oy, Business ID 2158652-2

Later in this document “Grape People”.

Address

Keskuskatu 4, 00100 Helsinki

Other contact information

[email protected]
tel. +358 50 408 8141

2. Contact person in matters related to the register

Name

Bettina Kanninen

Address

Keskuskatu 4, 00100 Helsinki

Other contact information

[email protected]
tel. +358 50 408 8141

3. Register name

Grape People Finland Oy’s customer register

4. Purpose of the processing of personal data

Personal data is processed for the management and analysis of customer and other relevant relationships, the provision and personalisation of services, development and planning of business, and for marketing, sales, customer and market research and customer communications, which can also be carried out electronically and in a targeted manner.

Our basis for processing is the customer's consent, legitimate interest or, in the case of customer relationship management, the enforcement of an agreement between the customer and Grape People. We also send electronic direct marketing messages to customers. Customers have the right to opt out of direct marketing by notifying us by email [email protected].

5. Information content of the register

We collect name, phone, email and address information and other information submitted by the customer. Cookies help us collect measurable data about our visitors, which we use, for example, when planning our marketing. This enables us to target our communication as well as possible.

The following information about registered customers can be stored:

• Person’s name, email address and title/responsibility area, language, diet, objects of interests indicated by the person.
• Company name, contact information and line of business.
• Information related to customer relationship management and communication (e.g., purchase and cancellation information for training services, feedback and recordings of customer service events, billing and collection information).
• Start and end date of customer relationship and/or business relationship and how it started/ended.
• Information related to online behaviour on the Grape People websites and web services.
• Information related to marketing and sales promotion, such as marketing activities targeted at the data subject and participation in them (e.g., participation in competitions, webinars and events).
• Technical data as well as cookies sent to the data subject's browser and related information.
• Technical information required for spam filtering (reCAPTCHA) in connection with online forms.

6. Regular sources of information

The collection of name and other contact information is based on a customer relationship or other relationship with Grape People. We collect information in connection with entering into an agreement, registering or when a customer uses Grape People’s services. We collect personal data mainly from the people themselves and in connection with various marketing activities, such as marketing lotteries and competitions and events. We may also obtain personal data from the person’s employer or any other party who notifies the person of the opportunity we offer. We also track cookies and visitors’ navigation on the Grape People website. Visits leave a trace of the visitor's IP address and any other information possibly provided by the person. We may also collect personal data from public sources.

7. Regular disclosure of information

Information will not be disclosed to third parties for marketing purposes.

8. Transfer of personal data outside the European Union (EU) or the European Economic Area (EEA)

We may use service providers who may have access to personal data from outside the EU/EEA, such as from the United States, to process personal data. We ensure the proper and lawful execution of transfers in accordance with the legislation on the processing of personal data. In all cases, we will only transfer personal data outside the EU/EEA on one of the following legitimate grounds:

• The European Commission has decided that an adequate level of data protection has been ensured in that recipient country.
• We have taken appropriate safeguards for the transfer of personal data using standard data protection clauses approved by the European Commission. The customer is then entitled to receive a copy of these standard clauses by contacting us.
• The customer has given his or her express consent to the transfer of his or her personal data, or there is another legal basis for the transfer of his or her personal data outside the EU/EEA, such as the Privacy Shield arrangement approved by the European Commission for the United States.

9. Register security principles

A Manual material

Manual material and material printable from a computer will be stored in a locked area to which only Grape People’s personnel have access.

B Information processed by computer

Personal data is stored as confidential. Access to the register is restricted to those employees of Grape People who need information in the course of their duties. The data network and equipment of the controller and its potential IT partners, where the register is located, are protected by a firewall and other necessary technical measures.

10. Right of inspection

The customer has the right to check the information about himself or herself. The right of inspection is free of charge. The inspection request must be made in writing to the person responsible for maintaining the register (contact information above). Further information on the right to inspect and rectify information can be found in the guidelines of the data protection officer.

11. Right to request rectification of information

Everyone has the right to request that the information contained in the register be rectified.  The request for rectification is free of charge. Further information on the right to inspect and rectify information can be found in the guidelines of the data protection officer. The rectification request must be made in writing to the person responsible for maintaining the register (contact information above).

12. Other rights related to the processing of personal data

A person in the register has the right to request the removal of his or her personal data from the register (“right to be forgotten”). Data subjects also have other rights under the EU's General Data Protection Regulation, such as restrictions on the processing of personal data in certain situations. Furthermore, the data subject may grant direct marketing consent or issue prohibition to Grape People on a per-channel basis. Requests must be sent in writing to the controller. If necessary, the controller may ask the data subject to specify his or her request in writing and, if necessary, the identity of the data subject may be verified before any further action is taken. The controller will reply to the requester within the time limit set by the EU Data Protection Regulation (generally within one month).

Requests for processing should be sent in writing to the address below.

Grape People Finland Oy
Bettina Kanninen
[email protected]
Keskuskatu 4, 00100 Helsinki

The customer also has the right to lodge a complaint with the relevant supervisory authority or the supervisory authority of the EU member state where the customer resides or works if the customer considers that we have not processed personal data in accordance with applicable data protection legislation.

Grape People is constantly developing its business and therefore reserves the right to change this privacy statement by posting on this page. Changes can also be based on changes in legislation. Grape People recommends that data subjects review the contents of this privacy statement on a regular basis.

Updated 29 May 2023