PRIVACY POLICY

Updated: April 7, 2023

 

Data Controller:
KL Sport Oy
Valuraudantie 17
00700 HELSINKI, Finland
klsport@klsport.fi
Business ID: 0414994-5

In accordance with the EU General Data Protection Regulation (GDPR), this privacy statement explains how we handle customer data.

This policy describes how KL Sport Oy collects, stores, and uses personal data when you register as a customer, purchase products, or contact us or our customer service.

We collect personal data to manage our customer relationships and to provide our services in the best possible way. When you use our services, we collect and store the following data you provide: company name, name of the purchaser/representative/contact person, address, email address, and phone number. The legal basis for processing personal data is a business-to-business contract and the statutory obligations arising from it.

We use Google Analytics for website usage analytics. All data shared with Google is anonymized.

Please note that any information that can identify you personally is considered personal data, even when you are placing an order on behalf of a company.

We do not engage in profiling or make automated decisions regarding you.

Recipients of Your Data:
  • KL Sport employees, only insofar as necessary for their job duties
  • The payment service provider (if used)
  • The logistics partner delivering your order
  • Our accounting company, for processing the order in our financial records
  • Our auditor, when auditing our accounts
Data Retention:
  • In customer relationship systems and our online store: 5 years
  • In email archives: 7 years
  • In financial records: 7 years
Purposes for Processing Personal Data:
  • Order processing and approval
  • Contacting you about your order or responding to inquiries
  • Product delivery and invoicing (including order and delivery confirmations)
  • Handling claims, warranties, legal matters, and customer service inquiries
  • Operating and improving our services
  • Providing requested services (e.g. newsletter subscriptions)

Data Sharing and Third Parties:
KL Sport does not collect or purchase customer data from third parties. We do not share your personal data with third parties unless it is necessary for IT system management, required by law, or mandated by a regulatory authority.

Our partners who process personal data on our behalf sign a data processing agreement with us to ensure a high level of protection for personal data.

Data Security and Storage:
All personal data is protected from unauthorized access and from accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing.

KL Sport Oy stores customer data in servers maintained by Louhi Net Oy in Finland. The servers are protected against data breaches and denial-of-service attacks.

We follow best practices in data protection and comply with the EU GDPR requirements effective from May 25, 2018.
All access to personal data is monitored and controlled in accordance with good practices.

Access and Rights Regarding Personal Data:
Only KL Sport personnel have access to customer data, and our employees are trained to handle data securely and ethically. Each employee can only access the data necessary for their specific duties.

You have the following rights regarding your personal data:
  • The right to access your personal data
  • The right to rectify inaccurate data
  • The right to restrict processing (e.g. object to marketing)
  • The right to object to processing
  • The right to withdraw consent (e.g. unsubscribe from marketing)
  • The right to file a complaint with a supervisory authority