1. REGISTRAR

Cotton

Business ID: 2685996-4

Pykäliköntie 35

82200 HAMMASLAHTI

Mika Haantio

045 351 1531

mika.haantio@puuva.fi

2. BASIS FOR KEEPING THE REGISTER

The person has registered as a Puuva customer or purchased products from Puuva.

3. PURPOSE OF THE REGISTER

We use our customer register to maintain Puuva's customer relationships, archive and process orders, and track lost packages. We also aim to use this information to improve our operations, for statistical purposes, and to provide more personalized content in our online services. Personal data is processed in accordance with applicable data protection regulations and requirements.

The information in the customer register is used only for targeting Puuva's advertising and is not shared with external parties. When maintaining customer and service relationships, Puuva may use partners, and some of the register information may be transferred to the servers of these partners due to technical requirements. Data transfer complies with data security requirements and technical interfaces.

Puuva may publish customer register information in electronic or written form, such as mailing labels for direct marketing. However, customers have the right to prohibit the publication of their information by notifying the data controller. mika.haantio@puuva.fi .

4. INFORMATION CONTAINED IN THE REGISTER

- The personal register contains the following information:

- Person's first and last name

- Email address

- Postal address

- Phone number

- Information about processed orders

- Posti tracking information for orders

5.DISCLOSURE OF DATA

Puuva's customer register information is stored exclusively for Puuva's use, except in situations where Puuva uses an external service provider, for example to provide value-added services or support credit decisions. Personal data will not be disclosed to external parties or its partners under any circumstances without an appropriate legal obligation, such as in matters related to credit applications, debt collection or invoicing, or when required by applicable law. Personal data will not be transferred outside the European Union unless it is absolutely necessary to secure the technical implementation of Puuva or its partner.

The personal data of the data subjects will be deleted upon request, unless valid legislation, open invoices or collection actions prevent the deletion of the data.

6. REGISTER PROTECTION

The register will not be disclosed to third parties. Access to the register requires user rights to Puuva's internal network. The register is located on a password-protected server.