{"id":3098,"date":"2022-04-08T09:35:53","date_gmt":"2022-04-08T06:35:53","guid":{"rendered":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/?page_id=3098"},"modified":"2022-06-16T14:16:06","modified_gmt":"2022-06-16T11:16:06","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/privacy-policy\/?lang=en","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n

Controller<\/em><\/h2>\n\n\n\n

City of Lahti
PO Box 202
15101 Lahti
Business ID 0149669-3<\/p>\n\n\n\n

Name and purpose of the data file<\/em><\/h2>\n\n\n\n

City of Lahti\u2019s online store and online payments<\/p>\n\n\n\n

Contact person<\/em><\/p>\n\n\n\n

Pasi Halme, Head of Planning<\/p>\n\n\n\n

Telephone: +358 50 398 5992<\/p>\n\n\n\n

Email: firstname.lastname@lahti.fi<\/p>\n\n\n\n

For which purposes is personal data processed?<\/em><\/h2>\n\n\n\n

The City of Lahti\u2019s online store enables customers to buy products or services and pay for them via online payments. Online payment interfaces transfer payments to the online payment service from different systems.<\/p>\n\n\n\n

The City of Lahti\u2019s online store collects personal data for the purposes of identifying the customer and\/or the customer\u2019s designated person, processing orders, delivering products, allocating payments, and reporting.<\/p>\n\n\n\n

The data may be used for the purposes of developing the functionality of the online store, testing, statistics, and marketing. Personal data is processed in accordance with the EU General Data Protection Regulation, the Finnish Data Protection Act, and other applicable legislation and official guidelines. The data in the file may be used in the online store\u2019s registers for targeting advertising without disclosing personal data to third parties.<\/p>\n\n\n\n

What is the legal basis for processing personal data?<\/em><\/h2>\n\n\n\n

The performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (EU General Data Protection Regulation, Article 6(1)(b)). The contract concerns purchases and payments in the City of Lahti\u2019s online store.<\/p>\n\n\n\n

What personal data is collected and processed?<\/em><\/h2>\n\n\n\n

The personal data that may be saved in the file includes:<\/p>\n\n\n\n

General customer register: first name, last name, phone number, postal address, email address, username, order history, permission to send direct marketing<\/em><\/p>\n\n\n\n

Order register: contact details, ordered products<\/p>\n\n\n\n

Registrations: the participant\u2019s first and last names, phone number, postal address, sex, date of birth, additional details (such as allergies, medication, illnesses, and other messages to the organisers). The first and last names, phone number, and email address of a guardian of an underage participant.<\/p>\n\n\n\n

Swimming pool customer cards: customer card number and PIN code<\/p>\n\n\n\n

Reservations: contact person\u2019s name, company\/association, phone number, email address<\/p>\n\n\n\n

Where is the data obtained from?<\/em><\/h2>\n\n\n\n

The data is obtained from customers of the online store when they register, place an order, or make an online payment. Data is also obtained from third-party systems that are integrated into the online store and that send payment transactions via online payment interfaces.<\/p>\n\n\n\n

Where is the data stored and for how long?<\/em><\/h2>\n\n\n\n

Personal and order data is stored in the system until it is deleted at the customer\u2019s request. Personal data is automatically deleted six years after the last order. Electronic receipts are stored in the system for ten years and deleted manually.<\/p>\n\n\n\n

How is the data protected?<\/em><\/h2>\n\n\n\n

The administration of the software is protected by usernames and passwords, and access rights are only granted to specific groups of users. The data in the database is protected by usernames and passwords. The processing of the data is restricted so that only the online store system can use it. The data stored on hard drives is protected by user rights imposed by the operating system. All data communications between the system supplier\u2019s systems and the online store and payment service provider are encrypted with SSL.<\/p>\n\n\n\n

Only the server and system suppliers are permitted to establish administration connections to the online store server. The software supplier has access to view and erase data.<\/p>\n\n\n\n

Is data disclosed to third parties?<\/em><\/h2>\n\n\n\n

Personal data is not disclosed to third parties. When a customer pays for an order, the customer\u2019s contact details are sent to the payment service provider.<\/p>\n\n\n\n

In deviation from this, the contact details of reservation contact persons for guide reservation products at Lahti museums are transferred to the guide of the relevant group.<\/p>\n\n\n\n

Personal data may be transferred to the controller\u2019s other systems, such as the Ceepos point-of-sale system.<\/p>\n\n\n\n

Is any data transferred outside the EU\/EEA?<\/em><\/h2>\n\n\n\n

No<\/p>\n\n\n\n

City of Lahti\u2019s information system<\/em><\/h2>\n\n\n\n

Ceepos online store<\/em><\/p>\n\n\n\n

Data subject\u2019s rights<\/em><\/h2>\n\n\n\n

If a data subject wishes to check, rectify or restrict the use of their data or erase their personal data from the City of Lahti\u2019s files,<\/p>\n\n\n\n

they should contact the data protection officer or use the City of Lahti\u2019s data request channels<\/a> related to data protection.<\/p>\n\n\n\n

Tiina H\u00e4yrinen, Data Protection Officer, tietosuoja@lahti.fi<\/a>,<\/p>\n\n\n\n

tel. +358 40 1834 334<\/p>\n\n\n\n

Right to file a complaint with the supervisory authority<\/em><\/h2>\n\n\n\n

Data subjects are entitled to file a complaint with the supervisory authority<\/a> concerning the processing of personal data.<\/p>\n\n\n\n

Statement date 22.4.2022<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Controller City of LahtiPO Box 20215101 LahtiBusiness ID 0149669-3 Name and purpose of the data file City of Lahti\u2019s online store and online payments Contact person Pasi Halme, Head of Planning Telephone: +358 50 398 5992 Email: firstname.lastname@lahti.fi For which purposes is personal data processed? The City of Lahti\u2019s online store enables customers to buy […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3098","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/pages\/3098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/comments?post=3098"}],"version-history":[{"count":6,"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/pages\/3098\/revisions"}],"predecessor-version":[{"id":11489,"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/pages\/3098\/revisions\/11489"}],"wp:attachment":[{"href":"https:\/\/verkkokauppa.lahti.fi\/museokauppa\/wp-json\/wp\/v2\/media?parent=3098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}