Privacy Policy

1. Data Controller

SOWL Nature Wellbeing / Kaisu Maijala
Business/VAT ID: 3304764-9

Contact information for matters related to the register:
info@sowl.fi

2. Registered Individuals

Persons who have submitted their information via the forms on this website.

3. Basis and Purpose of Processing Personal Data

Legal basis: Consent
Purpose of use: Maintaining a customer relationship or delivering a requested service

4. Personal Data Stored in the Register (Maximum)

• Company name and Business ID

• Customer’s full name

• Email address

• Phone number

• Billing address

• Physical address

5. Rights of the Data Subject

The data subject has the following rights. Requests to exercise these rights should be sent to info@sowl.fi:

• Right of access
  The data subject can review the personal data we have stored about them.

• Right to rectification
  The data subject may request corrections to incorrect or incomplete information.

• Right to object
  The data subject may object to the processing of their personal data if they believe it is being handled unlawfully.

• Direct marketing opt-out
  The data subject has the right to prohibit the use of their data for direct marketing purposes.

• Right to erasure ("right to be forgotten")
  The data subject may request the deletion of their data if processing is no longer necessary. We will process the request and either delete the data or provide a justified reason why it cannot be deleted.

  Please note that the data controller may have a legal obligation or other right to retain certain information. For example, accounting materials must be stored for 10 years in accordance with the Finnish Accounting Act (Chapter 2, Section 10). Therefore, data related to accounting cannot be deleted before this period expires.

• Withdrawal of consent
  If the processing of personal data is based solely on consent (and not, for example, on a customer relationship or membership), the data subject may withdraw their consent.

• Right to lodge a complaint
  The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe their personal data has been processed in violation of applicable data protection legislation.

• Right to restrict processing
  The data subject has the right to request the restriction of processing of disputed data until the matter is resolved.

6. Regular Sources of Data

Customer information is regularly obtained directly from the customer via the website forms or booking system.

7. Regular Disclosures of Data

Data will not be disclosed to third parties for marketing purposes without separate consent.

We ensure that all our partners comply with data protection legislation (GDPR).

We regularly use the following service providers: Squarespace, Google, Usercentrics

8. Duration of Processing

Personal data is processed for 1 year or for the duration of the customer relationship.

9. Processors of Personal Data

The data controller processes and stores personal data.

10. Transfer of Data Outside the EU

Data is regularly transferred outside the EU or European Economic Area (EEA) (to service providers). When data is transferred outside the EU or EEA, we ensure an adequate level of protection by using appropriate legal safeguards and agreements regarding confidentiality and processing of personal data. We have ensured this also with our partners.

11. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling.

12. Cookies

We use cookies on our website to improve user experience and analyze website traffic.

We never use the personal data you provide for marketing purposes without separate consent or a lawful basis.