Privacy Policy

The Privacy Statement of The Artisan Hot Sauce Company Helsinki Oy's Stakeholder, Online Service, and Customer Register

The data controller has a duty to inform the registered parties in a clear manner according to the General Data Protection Regulation (GDPR). This statement fulfills the obligation to inform. The up-to-date privacy statement can be found on our website.

Data Controller: The Artisan Hot Sauce Company Helsinki Oy
Business ID: 3413090-3
Contact Information: ℅ Joel Reefer, Junonkatu 4 A 63 00540 Helsinki
Contact Information for Register-related Matters: The Artisan Hot Sauce Company Helsinki Oy
Contact Information: ℅ Joel Reefer, Junonkatu 4 A 63 00540 Helsinki joelle@artisanhotsaucecompany.fi
Registered Parties: The Stakeholder Register of The Artisan Hot Sauce Company Helsinki Oy, Subscribers of The Artisan Hot Sauce Company Helsinki Oy's newsletter, potential customers, and those interested in events and services. Partners of The Artisan Hot Sauce Company Helsinki Oy and their contacts.
The Customer Register of The Artisan Hot Sauce Company Helsinki Oy: Existing customers, Online service users Contracts where the registered party is a participant.
‍
Basis and Purpose of Maintaining Registers
Basis for maintaining the register: The Stakeholder Register of The Artisan Hot Sauce Company Helsinki Oy: Personal data is processed based on consent or legitimate interest.
The Customer Register of The Artisan Hot Sauce Company Helsinki Oy: Personal data is processed based on legitimate interest or to execute a contract where the registered party is a participant.
Purpose of Processing Personal Data and Using Registers Personal data is processed only for predefined purposes, which are as follows:
The Stakeholder Register of The Artisan Hot Sauce Company Helsinki Oy
Sending newsletters
Sharing useful information
Event notifications (for those registered for events)
Direct marketing to those who have given marketing consent Informing about products, services, and events
Communication with partners and stakeholders

The Customer Register of The Artisan Hot Sauce Company Helsinki Oy
Sharing useful information
Managing customer relationships
Customer communication and informing about current issues
Informing about services, products, and current events
Matters related to contract execution and billing

Personal Data Stored in Registers
The Stakeholder Register of The Artisan Hot Sauce Company Helsinki Oy contains the following information: Contact details
Email (mandatory in all cases)
Additionally, the following information may be collected if necessary:
Name (registrations and partner representatives)
Phone number (registrations and partner representatives)
Company represented by the person
Special dietary requirements (in the context of event registrations, not mandatory)
Information is collected only as much as necessary to ensure communication and project implementation.
The Customer Register of The Artisan Hot Sauce Company Helsinki Oy contains the following information:
Contact details
Company name and billing information
Contact person's name, phone number, and email
Details of purchased products and services
Additionally, the following information may be collected if necessary:
Special dietary requirements (in the context of event registrations, not mandatory)
Other information necessary for contract execution
Notes from meetings, unless the customer has explicitly prohibited this (separate document)
Information is collected only as much as necessary to ensure communication, customer communication, and smooth contract execution.

Rights of the Registered Party
The registered party has the following rights, requests for which should be made via email to joelle(at)artisanhotsaucecompany.fi
Right of Access
The registered party can check the personal data we have stored.
Right to Rectification
The registered party can request the correction of incorrect or incomplete data concerning them.
Right to Object
The registered party can object to the processing of personal data if they believe the data has been processed unlawfully.
Right to Prohibit Direct Marketing
The registered party has the right to prohibit the use of their data for direct marketing.
Right to Erasure
The registered party has the right to request the erasure of data if its processing is not necessary. We process the erasure request, after which we either delete the data or provide a justified reason why the data cannot be deleted. It should be noted that the data controller may have a legal or other right to retain the requested data. The data controller is obliged to retain accounting material according to the Accounting Act (Chapter 2, Section 10) for the required period (6-10 years). Therefore, accounting-related material cannot be deleted before the retention period expires.
Right to Withdraw
Consent If the processing of personal data concerning the registered party is based solely on consent and not, for example, on customer relationship or membership, the registered party can withdraw their consent.
Right to Lodge a Complaint with the Supervisory Authority
The registered party has the right to demand that we restrict the processing of disputed data until the matter is resolved.
Right to Lodge a Complaint
The registered party has the right to lodge a complaint with the data protection authority if they believe that we are processing personal data in violation of the applicable data protection legislation.
Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html

‍Regular Data Sources
Information is primarily collected directly from the registered party. The marketing permission is verified electronically or by ticking the permission box on the form. Information may be supplemented with publicly available data (such as from the Finnish Patent and Registration Office or the company's website).
Information is regularly obtained from:
The registered party when subscribing to the newsletter
The registered party or customer when filling out a registration form (courses, training, and events)
Potential customers in connection with a request for quotation
The customer at the start of the customer relationship
The customer through an online form
The customer during an e-commerce transaction
The customer through an electronic service (e.g., booking calendar)
Partners during joint projects

Regular Disclosures of Data
Data is not generally disclosed for marketing purposes outside Artisan Hot Sauce Company Oy. To implement communication or services, data is disclosed to reliable service providers for processing. The company ensures that all service providers processing data comply with data protection legislation. We strive to keep all data within the EU. However, data may be transferred outside the EU in some cases, if the service provider's cloud service servers where the data is stored are located outside the EU or if it is otherwise necessary for the implementation of the ordered service. In such cases, we ensure that the level of data protection is adequate in the processing country (e.g., companies participating in the Privacy Shield in the USA).

Duration of Processing
General principles of personal data processing duration Personal data is generally processed for as long as the customer relationship is valid. The registered party can unsubscribe from the newsletter and marketing list themselves through the link in each marketing email we send. Additionally, non-functioning email addresses are regularly removed. Accounting-related documents are retained for the statutory period (6-10 years).

Personal Data Processors
The data controller and its employees process personal data. We may also outsource the processing of personal data partly to a third party, in which case we ensure through pre-assessments that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.

Transfer of Data Outside the EU
Personal data is not generally transferred outside the EU or the European Economic Area. Implementing some contracts or assignments may require transferring data outside the EU or the European Economic Area if necessary. In such cases, we ensure an adequate level of data protection, among other things, by agreeing on the confidentiality and processing of personal data as required by law.

Automatic Decision-Making and Profiling
The Artisan Hot Sauce Company Helsinki Oy does not use collected data for automatic decision-making or profiling. Data collected by third-party cookies is anonymous to us, but third parties may analyze and combine data in their own systems for purposes such as targeted advertising or visitor statistics.

How We Protect Your Personal Data Access by outsiders to manual material is properly prevented. We use appropriate technical security measures to keep your data safe in our systems. Such measures include the use of firewalls and encryption techniques, access control, and careful selection of service providers related to data processing. Electronic systems are strongly and comprehensively protected according to industry standards and by using strong passwords. The company's devices are protected with up-to-date antivirus and malware protection software, passwords, fingerprint scanners, or numeric codes.

How We Act in Case of a Data Breach
The company has insurance against cyber threats. This enables quick response and the assistance of a specialized expert team in the event of a possible data breach. We strive to resolve issues quickly and inform the concerned parties about the progress to the best of our ability.

Changes and Updates to the Privacy Statement
Changes and updates to the privacy statement may be based on changes in legislation or the development of our services. We recommend familiarizing yourself regularly with the content of our privacy statement. The up-to-date privacy statement can be found on this page (https://www.artisanhotsaucecompany.fi/privacy-policy).