Approved 1.6.2018
Privacy Statement
1. Data Controller
Buca-Rest Oy
Business ID 0904606-4
Isokatu 16 D 1
90100 Oulu
Restaurant Pannu – https://www.ravintolapannu.fi/
Restaurant Puistola – https://www.ravintolapuistola.fi/
Pizzeria Cantina – https://www.cantina.fi/
2. Contact person in matters relating to the register
Erik Forsman
tel. 0207 928 202
erik.forsman@ravintolapannu.fi
3. Name of the register
Customer and marketing register of Buca-Rest Oy
4. How do we use your personal information?
We use the information in the marketing register for marketing purposes, such as sending newsletters and lunch menus.
We use the information in our customer register to provide our services, manage customer relationships, process complaints and customer feedback, and for invoicing.
Your information will also be collected and processed for statutory purposes, such as accounting purposes. We collect, store and process personal information only for pre-defined purposes.
5. What personal information do we collect?
- Name
- Telephone number
- Address information
- Billing information
6. FROM WHICH SOURCES DO WE COLLECT PERSONAL INFORMATION?
We collect personal information about you mainly from you when you contact us or later when you use our services. You can subscribe to newsletters and lunch menus through our websites. In addition, table reservations can be made from the site. The information from these is stored in our customer and marketing registers.
7. ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL INFORMATION?
We make sure that we always have a legal basis for processing your personal information.
We process information from our marketing register based on your consent. You will be asked for your consent at the time you subscribe to our newsletter or lunch menu. If we process your information only with consent, you can revoke your consent at any time.
We process our customer register both to fulfill the contract (e.g., providing our services, customer relationship management, processing complaints and customer feedback) and based on our legitimate interests (e.g., direct marketing to our customers and product development of our services).
8. WILL YOUR DATA BE TRANSFERRED TO A THIRD PARTY?
As a rule, your personal data is processed by persons belonging to our company’s personnel in the course of their work.
In some cases, your information may be disclosed in confidence to our partners or subcontractors who process personal information under a written assignment agreement. These include data storage and cloud services for data storage, suppliers of the IT systems we use, accounting services, and external services purchased to support sales and marketing.
Our subcontractors and partners process personal information in an agreed manner, in accordance with our written instructions, and only to further the agreed, lawful purposes.
9. WILL YOUR DATA BE TRANSFERRED OUTSIDE THE EU OR THE EEA?
We do not transfer your personal information outside the EU or the EEA.
10. HOW LONG IS YOUR PERSONAL INFORMATION STORED?
We will only retain your personal information for the time necessary to fulfill the purposes described in this statement. In addition, some information may be retained for longer to the extent necessary to carry out statutory obligations, such as accounting responsibilities. Unnecessary data will be deleted on a regular basis.
11. HOW IS YOUR INFORMATION SECURED?
We respect the confidentiality of your personal information.
Personal information is protected from access by third parties through firewalls, anti-virus programs, personal usernames and passwords. Access to personal data is restricted to persons authorized by us whose work requires the processing of personal data. We disclose personal information only confidentially and on a limited basis in accordance with contracts to our contractual partners, such as our subcontractors. Our contractual partners must commit to implementing adequate data security and in all respects the lawful processing of personal data. Processors of personal data are bound by professional secrecy.
Our website uses a TLS-encrypted HTTPS connection, which means that all personal information is protected electronically. In the browser, you will notice this green lock on the left side of the address bar. If the data is in manual form, it is stored in locked premises and destroyed securely.
12. HOW DO WE USE COOKIES?
Cookies are small text files that are automatically stored on a computer / terminal when a visitor visits various websites. Our online service utilizes cookies so that we can offer our service as user-friendly and high-quality as possible.
We may use cookies to develop our services and website, to analyze the use of the website, and to target and optimize marketing. With website traffic tracking, we develop our website to make it even better and to provide a better visit experience for our users.
If you do not want the online service to receive information through cookies, you can refuse cookies (most browsers allow you to disable the cookie function). To prevent Google Analytics from collecting information about you, please read more on the Google website. Note, however, that this may cause the network service to not work properly.
13. WHAT RIGHTS DO YOU HAVE?
13.1 RIGHT OF ACCESS TO INFORMATION (RIGHT OF INSPECTION)
You have the right to know what information is stored about you in the personal register. You can ask us to have your information inspected as described in this statement.
13.2 RIGHT TO REQUEST CORRECTION OR DELETION OF INFORMATION (RIGHT TO BE FORGOTTEN)
We will delete, correct or supplement information that is inaccurate, unnecessary, incomplete or outdated on our own initiative or at the request of the data subject.
13.3 RIGHT TO LIMIT PROCESSING
The data subject has the right to demand that the active processing of his or her personal data be restricted, for example when he or she disputes the accuracy of his or her personal data and requests that his or her personal data be rectified or deleted. In this case, such personal data may only be stored, not otherwise processed. Restrictions on processing are ensured by technical measures.
Before removing the processing restriction, we will notify the data subject.
13.4 THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL INFORMATION
You have the right to object to the processing of personal information concerning you to the extent that there is no compelling reason for the processing that would override your rights or the processing is not necessary to meet a legal claim.
13.5 THE RIGHT TO TRANSFER DATA FROM ONE SYSTEM TO ANOTHER
To the extent that the data subject has provided information to the customer register which is processed with the consent or mandate of the data subject, the data subject shall have the right to obtain such information in a machine-readable form as a general rule and to transfer this information to another controller.
13.6 WITHDRAWAL OF CONSENT
If personal data is processed based on the data subject’s consent, the data subject has the right to withdraw his or her consent by notifying us. You can withdraw your consent as described in the “Requests regarding your rights” section of this statement.
13.7 RIGHT TO APPEAL TO THE SUPERVISORY AUTHORITY
The data subject has the right to lodge a complaint with the competent supervisory authority if the controller has not complied with the applicable data protection rules in its activities.
14. REQUESTS REGARDING YOUR RIGHTS
Inquiries and requests related to the register can be submitted either in person on site by presenting an identity card or by sending an e-mail to erik.forsman@ravintolapannu.fi. We may then contact you by telephone if necessary to verify your identity.
We will send the information you have requested to your e-mail address as a password-protected document and the password will be sent to your phone as a text message.
We will respond to requests within one (1) month of submitting the request, unless there are special reasons to extend the response time. We may also refuse to comply with your request on the grounds provided by applicable law.
The exercising of your rights is, in principle, free of charge.
15. OBLIGATION TO PROVIDE INFORMATION
If you do not consent to the processing of your personal information within the purposes and rights of this Privacy Statement, we are unlikely to be able to serve you and fully fulfill the purpose of our activities. Therefore, if you do not want us to process your information in accordance with these principles, we ask that you do not provide us with any information.