Privacy Policy
This is the privacy policy statement of Jonna Paukkunen Coaching in compliance with the General Data Protection Regulation (GDPR) of the European Union. Prepared on 05-03-2024. Last modified on 05-03-2024.
1. Company Contact Information
Company name: Jonna Paukkunen Coaching
Company registration number (Registered in the Netherlands with the Chamber of Commerce, KVK-number): 91684730
VAT ID: NL004907965B54
2. Contact Person/Data Protection Officer Information
Name: Jonna Paukkunen
Email address: jonnapaukkunencoaching@gmail.com
3. Legal Basis and Purpose of Processing Personal Data
We always process your personal data lawfully, fairly, and transparently. We collect and process information about you only if we have a legal basis for it. The processing of personal data is based on legal obligations. We collect and use your information only if
You have given us consent to use the data for a specific purpose
It is necessary for the performance of a service or contract to which you are a party, or to take certain steps at your request before entering into a contract
We collect and process personal data for the following purposes
Customer service
Customer communication
Maintenance of customer and partnership relationships
Bookings and orders or products and services
Provision, maintenance, development, and quality assurance of services/products
Personal data is collected form
The individual or company that provides the information
The company processes the following information
Personal or company information
Contact information
Billing or payment information
Correspondence and communications
Information about ordered services and their modifications
4. Retention of Personal Data
Personal data is retained for the duration of the customer relationship. After the retention period expires, the data is deleted or anonymized. Data may also be deleted at the request of the customer after the termination of the relationship. We reserve the right to specify either a shorter or longer retention period.
5. Regular Disclosure of Data and Data Transfers
The stored data is obtained from the customer through, among others, messages sent via web forms, email, social media services, customer meetings, and other situations where the customer provides their information. We exercise care in storing and processing data and secure data security through firewalls, passwords, and various generally accepted technical methods. Manually maintained records are kept in locked premises inaccessible to unauthorized persons. The storage and processing of data are done though service providers known to be secure. Data is protected by strictly defined access rights and is processed only for the purpose for which it was collected. All personal data is processed confidentiality and only by employees whose job description includes it.
We never disclose or transfer data to third parties unless expressly consented to and justified. An exception may be a legal obligation related to legislation or official duties, the legality of which is always examined on a case-by-case basis.
Data is not routinely disclosed to other parties. Since the platform used for website design is located in the USA, the data entered into the contact form may be transferred outside the EU or EEA. You can read more about Showit’s privacy policy here: https://showit.com/privacy/
6. Right of Access and Right to Rectification of Data
Every registered individual has the right to check their own data, request correction of any incorrect data, or request of completion of any incomplete data. If a person wishes to check the data stored about them or request corrections, the request must be sent in writing via email to the data protection officer. If necessary, the data protection officer may request the requester to prove their identity. The data protection officer will respond to the customer within the time frame provided in the EU data protection regulation (usually within 1 month).
7. Other Rights Related to the Processing of Personal Data
The registered individual has the right to request the deletion of their personal data (“right to be forgotten”). Likewise, the registered individual has other rights under the GDPR, such as the right to restrict the processing of personal data in certain situations. Requests must be sent in writing via email to the data protection officer. If necessary, the data protection officer may request the requester to prove their identity. The data protection officer will respond to the customer within the time frame provided in the EU data protection regulation (usually within 1 month).
