Information on the processing of personal data of online store customers

This is a privacy statement prepared by Edusampo Ltd. in accordance with the Data Protection Act and the EU General Data Protection Regulation (GDPR) on the processing of personal data of online shop customers.

Prepared on 07.10.2021.

Name of the register

Online shop personal data register 

Keeper of the register

Edusampo limited liability company

Business ID: 2674325-9

P.O. Box 303 (Armilankatu 40)

53101 Lappeenranta

Contact person responsible for the register

Terhi Toikkanen, Managing Director of Edusampo, Terhi.toikkanen(at)edusampo.fi, tel. 040 612 8086 

Contact person for data protection issues

Ari Tanskanen, Data Protection Officer of the South Karelia Education Association, tietosuoja(a)edusampo.fi, tel. 040 661 0680 

Purpose and legal basis for processing personal data

The personal register of the online store processes information about persons who purchase training and coaching services through the online store from Edusampo. When you purchase a service, a customer relationship is established between you and Edusampo. Based on your customer relationship, Edusampo Ltd. has a legitimate interest in processing your personal data as described below. Your personal data will be processed for the purposes of fulfilling the duties and obligations arising from the customer relationship between you and Edusampo. The legal basis for processing your personal data is also to comply with the legal obligations of Edusampo Ltd. regarding, among other things, the customer relationship, the resulting payment transactions, training services and accounting.

The purposes of processing personal data, for example:

– implementation and development of customer service

– making appointments for services and the execution of payment obligations, claims or refunds arising from the service 

– requirements and obligations relating to the payment transaction and the online payment service

– identification of the payer for the purposes of billing or recovery of claims for the service

– the provision of certificates and cards resulting from the provision of the educational service

– customer communication and customer relationship management

– reporting to the authorities

– compliance with accounting, risk management and statistical regulations

– business and systems development, including testing

– marketing Edusampo’s services and events

The data may be used to compile statistics that do not allow individual customers to be identified, such as the number of customers or the number of people attending an event.

The data will not be used for automated decision-making or profiling. 

Data content of the personal register

We collect the information about you that we need to provide the services we provide and to
the development of the services we provide and develop, to identify you as a customer, to make or cancel a payment transaction, to provide a training service
the provision of certificates and cards resulting from the completion of the service and for statutory tasks; and
obligations.

– Customer contact and identification data: name, address, telephone number, e-mail address, personal identification number, organisation

– Consent to direct marketing

– Billing information

– Other possible customer-related data (e.g. allergies or dietary habits in the case of outreach activities)

– Details of the order itemisation of the shopping basket to be paid for

– Payment method, IBAN bank account number, reason for payment cancellation and IP address.

– The unique identifier of the order

Regular data sources

As a general rule, the information is obtained from you when you contact Edusampo, when you register for a training service, when you make a payment, when you complain or when you give feedback.

Processors of personal data

Edusampo Ltd is the controller of the personal data received in accordance with the GDPR. The organisations listed below act as processors of personal data within the meaning of the GDPR and process personal data on behalf of Edusampo Ltd. Some of the processors use third parties as subcontractors for their services. They also process personal data on behalf of Edusampo. 

The processors and the third parties they use have access to personal data limited by contract only for the performance of their tasks. All these organisations are bound by confidentiality obligations.

Personal data are processed by:

– Etelä-Karjalan koulutuskuntayhtymä (organisation of training courses)

– Svea Payments Oy (online payment service)

– Efetta Oy (accounting)

Svea Payments Oy, the provider of the online payment service, is the controller of your personal data in the following situations:

– When you electronically make a product return notification, a complaint or provide feedback to Edusampo Oy via this means, and when you change your payment method; in relation to personal data collected in connection with these activities;

– for e-mail address, when you correct your e-mail address on the payment form; and

– Svea Payments Ltd.