Privacy Policy

Name of the Register

Customer Register of Kaamos Climbing Oy

Data Controller

Kaamos Climbing Oy
Business ID: 3353182-8
Kallisenhaara 3 b 5
90400 Oulu
info@kaamosclimbing.fi

Contact Person for Register Matters

Tuukka Peteri
info@kaamosclimbing.fi
+358 46 902 5955

Purpose of the Register

Kaamos Climbing Oy’s (hereinafter “Kaamos”) customer register is used for managing customer relationships, invoicing customers, fulfilling the rights and obligations of both the customer and the controller, marketing, and statistical purposes. Personal data may also be used to develop and tailor services. Personal data will always be used in accordance with applicable legislation. Customers have the right to prohibit the use of their data for direct marketing.

Processing of Personal Data

Your personal data may be collected in various ways.

As a general rule, we collect and process personal data that:

• You have provided when contacting us or using our services, e.g., purchasing our services, registering for a service, subscribing to our newsletter, or requesting a quote or information.
• Is generated during the use of services or visits to the website, e.g., logging into the service to make a booking, using our online store, or contacting us via email, phone, or social media.

• Is obtained from other sources to the extent allowed by applicable laws, e.g., Trade Register, Population Information System, Business Information System, or postal address databases, without limiting sources to those listed above.

Providing personal data is not mandatory, but withholding data may limit our ability to provide services.

We collect and process, for example, the following categories of personal data:

• Basic information, such as name and contact details (email address, postal address, phone number)
• Customer relationship data, such as service/product and order information, payment details, billing information, marketing consents and refusals, and in some cases age and preferred language
• Customer communications and related correspondence, as well as records concerning registered rights
• Data generated from the use of our services or website, e.g., usernames, passwords, identification information, service usage logs, data collected via cookies or similar technologies
• Other case-specific data based on your consent, e.g., special dietary requirements necessary for providing the service

Surveillance

For safety and crime prevention, there may be surveillance cameras in our facilities. For security or similar reasons, we may also monitor logs of climbing visits.

Data Protection

Access to the customer register is protected with passwords known only to staff. All devices with access to the register and the cash register system are password-protected. The register is not stored in paper form. Only personnel whose job duties require access may use the register. Users are also bound by confidentiality. Access rights are granted and supervised by the person responsible for register matters.

The register is hosted in an online service protected by SSL protocol.

In addition, the system provider (Webkulkuri Oy) has access to the customer register.

Retention of Data

Customer data is retained for the duration of the company’s operations or until the customer requests its deletion.

Cookies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device to collect and remember useful information, improving the functionality and usability of our website. Cookies may also be used for statistical purposes, e.g., to compile website usage statistics to understand how users interact with the website and to enhance user experience. You can block or delete cookies in your browser, but restricting cookies may affect website functionality.

Rights of Data Subjects

Every data subject has the following rights regarding their personal data:

• Right of access – the right to check the personal data stored in the register and request correction or completion if the data is inaccurate or incomplete.
• Right to object – the right to object to the processing of personal data if the data subject believes the data is being processed unlawfully or without proper legal basis.
• Right to erasure – the right to request deletion of personal data from the register, and the right to restrict processing.
• Right to data portability – the right to transfer data from one system to another.
• Right to lodge a complaint – the right to file a complaint with the Data Protection Authority if the data subject believes that the processing of personal data violates applicable data protection legislation.

The controller may refuse to comply with an objection or deletion request only on legal grounds. If the controller refuses, the data subject has the right to lodge a complaint with the Data Protection Authority and to request that the processing of disputed data be restricted until the issue is resolved.

Contact

Questions or inquiries regarding this register description may be submitted in writing or in person to the contact person.

Changes to the Register Description

If we update this description, changes will be published with dates. If the changes are significant, we may also notify customers via email or post a notice on our website. We recommend regularly visiting our website and reviewing any updates.