Description of the register

Description of the register in accordance with sections 10 and 24 of the Personal Data Act (523/1999).

REGISTRAR

Truescape Oy (Business ID: 3016295-9)
Stenstrandintie 20 B, 02420 JORVAS

Later on Truescape

THE PERSON RESPONSIBLE FOR THE REGISTRY

Jaakko Rytsola
Phone 050 2295
Email jaakko@rytsola.fi

THE PERSON IN CHARGE OF SECURITY OF THE MYSTERY

Jaakko Rytsola
Phone 050 2295
E-mail: jaakko@rytsola.fi

NAME OF THE REGISTRY

Truescape Oy's customer register

BASIS AND PURPOSE OF KEEPING THE REGISTER

The basis for the processing of personal data is the consent given by the data subject to the processing of personal data.

The person gives this permission at the time of booking, when purchasing Truescape products in the online store and/or by leaving contact information on the website or at the Truescape or Mystery office with the company employee.

At the same time, he assures that he is over 16 years old.

PURPOSE OF THE REGISTER

The purpose of the register is to maintain Truescape's customer register, archive and process customer orders and all matters related to customer relationship management. The register is also used to track ambiguities such as lost deliveries. The information may be used to improve Truescape's operations, for statistical purposes and to produce more personalized targeted content on our online services. Personal data will be processed to the extent permitted and required by the Personal Data Act.

The data from the register can be used in Truescape's own registers to target advertising without disclosing personal data to third parties (e.g. Facebook). Truescape can also choose to use partners to maintain the customer and service relationship. Some of the registry data may be transferred to the partner's servers due to technical requirements. Data is processed solely for the purpose of maintaining Truescape's customer relationship through technical interfaces.

Truescape has the right to publish the information contained in the customer register in electronic or written form, unless specifically prohibited by the customer. The list refers to, for example, mailing labels for direct advertising. The customer has the right to object to the publication of the data by notifying the contact person of the registry, by e-mail jaakko@rytsola.fi.

LOCATION OF THE REGISTER

The registry is located in several locations.

• Slot reservation system (Teonos Oy 2624169-7)
• Truescape Oy's own booking system, the files of which are stored on Amazon's servers.
• Truescape.fi and Mysteeri.com WordPress sites (Server Providers: Suomen HostingOy and Planeetta Internet Oy)
• ActiveCampaign (email system)
• Google Drive (cloud service)
• Dropbox (cloud service)
• Zapier (information service)

Inquiries about data management or, for example, deletion of your own data can be addressed to the registry contact by e-mail jaakko@rytsola.fi.

DATA CONTAINED IN THE REGISTER

The personal register contains the following information:

• Person's first and last name
• E-mail
• Postal address
• Phone number
• Information on processed orders and reservations
• Order Post Tracking Information

DISCLOSURE OF DATA

The customer register data is only used by Truescape, except when Truescape uses an external service provider either to provide a value-added service, to target advertising or to support a credit decision. Personal data will not be transferred outside the European Union unless it is necessary to ensure the technical implementation of Truescape or its partner. This ensures that the transfer takes place in accordance with the EU Commission's adequacy decision.

The personal data of the data subject will be destroyed at the request of the user, unless legislation, open invoices or collection actions prevent the deletion of the data.

REGISTRY PROTECTION

The register will not be handed over to bystanders. Access to the register requires personal user rights, which are shared by the controller and the data security officer.

Physical access to personal data processing devices is prevented through access control and other security measures. Access to the data requires adequate rights, as well as identification. For example, firewall technology prevents external attacks and access to registry data.

Registry data is backed up securely and is recoverable if necessary. Level of security
audited at regular intervals, either through external or internal auditing.

RIGHTS OF THE DATA SUBJECT

The person on the register has the right, inter alia, to:

• request from the controller access to personal data concerning him or her and the right to request rectification or erasure of such data or restriction of processing or to object to processing
• check and, if necessary, correct what information about him is in the register. The person in the register has the right to change the data that has been entered incorrectly in the register about him or her.
• to the extent that the processing of personal data is based on the consent of the data subject, the right to withdraw consent at any time without prejudice to the lawfulness of the processing carried out on the basis of the consent before its withdrawal
• lodge a complaint about the processing of personal data to the supervisory authority

DIRECT MARKETING CONSENTS AND PROHIBITIONS

The customer has the opportunity to subscribe or unsubscribe from the newsletter by contacting the person in charge of the register. You can also cancel the newsletter directly via the link in the newsletter message.