1. Data Controller

Name: Vasilia Oy
Business ID: 3122303-9
Address: Vanha Porvoontie 256 D, 01380 Vantaa, Finland
Phone: +358445235222
Email: aleksi.vidgren@vasilia.fi

2. Purpose and legal basis for processing personal data

The Data Controller processes personal data for the following purposes:

Managing customer relationships. Targeting marketing and communications.

The processing of personal data is based on consent.

3. Categories of personal data processed

The Data Controller may process the following categories of personal data:

Contact details, such as name, address, email address, and phone number.

Technical data, such as IP address, cookies, and log data when you visit our website.

Analytics and tracking data: Analytics tools used on the website collect data about visitor behaviour and interaction, such as page views, form submissions, browsing data, and visit duration.

4. Regular sources of personal data

The Data Controller may collect personal data from the following sources:

Website. ICAP system. By phone. Facebook Pixel. Facebook.

5. Disclosure of data and recipients

The Data Controller transfers or discloses data to the following parties:

Data is not disclosed.

6. Transfers outside the EU/EEA

No transfers are made outside the EU or EEA.

7. Retention period of personal data

We retain personal data only for as long as necessary to fulfil the purposes of processing or to comply with statutory obligations. Retention periods may vary depending on the type of data and the legal basis for processing.

8. Principles for protecting personal data

Personal data is processed only by staff members (Aleksi Vidgren and Vilina Hyväri) or partners whose duties require such access.

9. Automated decision-making and profiling

We do not make decisions based on automated decision-making, nor do we carry out profiling.

10. Data subject rights

Data subject rights depend on the purposes of processing and the specific situation. Under the GDPR, the data subject has the right to:

access and obtain their personal data;

● request rectification of inaccurate data;

● request deletion of their data, unless there is a lawful basis for retaining the data;

● object, on grounds relating to their particular situation, to the processing of personal data. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for such marketing, including profiling insofar as it is related to such direct marketing;

● request restriction of processing; and

● data portability.

Where processing is based on the data subject's consent, the data subject has the right to withdraw their consent at any time.

The data subject also has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement, if the data subject considers that the processing of their personal data infringes applicable data protection legislation. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

11. Exercising your rights

Questions regarding the processing of personal data and requests to exercise data subject rights may be sent to the Data Controller using the contact details provided at the beginning of this privacy notice.