Data Controller: Open Creative House Ltd (hereinafter "OCH")
Business ID: 3251416-1
Address: Keilaranta 2D, 02150 Espoo
Email: info@opencreativehouse.com
Data Controller
Register Name
OCH Customer Register
Basis and Purpose of Personal Data Processing
Personal data is processed to establish and maintain customer relationships between individuals and OCH. The information is used, for example, for acquiring and managing customer relationships, processing and archiving, developing services, enhancing customer experience, analytics and statistical purposes, generating personalized marketing, delivering newsletters, and providing better customer service.
Privacy Policy
The legal bases for processing personal data under the General Data Protection Regulation (GDPR) of the European Union are:
- Consent of the data subject
- Contractual necessity
- Legal obligation of the data controller
- Legitimate interests pursued by the data controller or a third party
Information in the register is regularly collected directly from the customer during the initiation and duration of the contract. Data may also be collected from customer websites and brochures. Additionally, information sent via web forms, email, telephone, social media services, contracts, customer meetings, and other situations where the customer provides information may be stored in the register. Personal data may also be collected and updated from population registers, credit information registers, and other similar public and private registers. We also collect visitor data on our website to analyze and improve the site and to target relevant marketing to visitors.
Our website complies with the provisions of data protection laws and protects the privacy of individuals visiting our website in accordance with current legislation.
We use cookies to expedite and improve our website and services by storing user usage data and targeting marketing to website users. We use two types of cookies: first-party cookies (set by us) and third-party cookies (set by our partners).
Necessary Cookies
Necessary cookies facilitate and expedite the use of the website. These cookies are not transmitted to third parties, and they do not identify the visitor.
Google Analytics, Youtube, Facebook
We utilize Google Analytics and Facebook Analytics, which set cookies on the user's device when visiting our website to function properly. These cookies enable, among other things, improving the user experience on the site and reporting for business decision-making support. This helps us understand which contents on our site are popular and which features are used the most. With this data, we can enhance our services and address any errors.
We use Youtube videos on some product pages, and showing these videos sets a cookie from Youtube (a company owned by Google).
It is important to note that services use their own cookies according to their privacy policies. You can read more about their privacy policies through the following links:
- Google: https://policies.google.com/privacy?hl=en
- Youtube: https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/
- Facebook: https://www.facebook.com/privacy/policies/cookies/
Processed Personal Data
Data is not regularly disclosed to other parties. Data may be published as agreed with the customer. Additionally, data may be disclosed occasionally in accordance with Finnish law. Generally, data is not transferred outside the EU, but if necessary, the data controller may transfer data outside the EU or EEA. In such cases, we ensure that the processing, transfer, and storage of your data are carried out based on legal requirements and with sufficient protection mechanisms.
Refer to additional information in the previous section.
Regular Disclosures of Data and Transfers of Data Outside the EU or EEA
Protection of Personal Data and Information Security
The company limits the collection and processing of information to necessary data. Unnecessary and outdated information is deleted. Personal data is processed by individuals within our company as part of their job responsibilities. We do not retain your personal data longer than necessary for its purpose or as required by contract or law. However, the retention periods for personal data may vary depending on the purpose and situation. Generally, data is retained as long as needed to maintain the relationship.
Rights of the Data Subject
Every individual in the register has the right to inspect the information stored about them and request correction of any inaccurate information or completion of incomplete information. If an individual wishes to review the information stored about them or request corrections, the request must be sent in writing to the data controller. The data controller may, if necessary, request the requester to prove their identity. The data controller will respond to the customer within the time frame stipulated in the EU General Data Protection Regulation (usually within one month).
Individuals in the register have the right to request the deletion of their personal data from the register ("right to be forgotten"). Likewise, data subjects have other rights under the GDPR, such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the data controller. The data controller may, if necessary, request the requester to prove their identity. The data controller will respond to the customer within the time frame stipulated in the EU General Data Protection Regulation (usually within one month).
Changes to this Privacy Statement
This privacy statement may be updated from time to time, for example, due to changes in legislation or data. This privacy statement was last updated on December 15, 2023.