Privacy Notice
1. Data Controller
Kiinteistö Oy Kauppakeskus Kaari / Shopping Centre Kaari (hereinafter referred to as “Kaari”)
Shopping Centre Kaari
Kantelettarentie 1
00420 Helsinki
2. Contact for Data Protection Matters
Shopping Centre Kaari management office staff
Email: info@kauppakeskuskaari.fi
3. Name of the Register
Customer register for the Shopping Centre Kaari website
4. Purpose of Processing Personal Data
Personal data is processed on the basis of the customer relationship between the data subject and Kaari, the data subject’s consent, or another relevant connection.
Kaari collects, processes, and uses personal data for purposes such as managing customer relationships, providing and maintaining services, carrying out direct marketing, responding to customer inquiries, and improving its services.
Kaari may use subcontractors and business partners to assist with the technical and practical aspects of personal data processing. In such cases, these parties process personal data on Kaari’s behalf.
5. Personal Data Collected
The register may contain the following personal data necessary for managing the customer relationship:
- first and last name
- email address
- any other information provided through a feedback form, newsletter subscription, or other contact request
6. Sources of Personal Data
As a rule, the personal data in the register is obtained directly from the data subject, either with their consent or in connection with the customer relationship, for example through a feedback form, newsletter subscription, or other communication.
7. Disclosure and Transfer of Personal Data
As a rule, personal data is not transferred outside the European Union or the European Economic Area.
Personal data may be disclosed to Kaari’s selected business partners to the extent permitted by applicable law and only where necessary for the purposes described in this Privacy Notice.
8. Rights of the Data Subject
Under applicable data protection laws, the data subject has the right to:
- be informed about the processing of their personal data
- access the personal data concerning them
- request the rectification of inaccurate or incomplete data
- request the erasure of data where there is a legal basis for doing so
- object to the processing of personal data
- request restriction of processing
- withdraw consent where processing is based on consent
- object to the use of their data for direct marketing
- lodge a complaint with the relevant supervisory authority
Requests relating to data protection may be submitted by email to info@kauppakeskuskaari.fi.
Kaari may ask the data subject to verify their identity before fulfilling such a request, if necessary.
9. Data Security, Retention, and Deletion
Personal data received through feedback submissions will be deleted from email systems once the matter has been fully processed, unless there is a justified reason to retain the data.
Forms related to registrations, competitions, and other manually processed documents containing personal data will be destroyed appropriately once processing has been completed.
The electronic customer register is protected against unauthorized access by appropriate technical and organizational measures, such as firewalls and other security tools. Personal data may only be processed by employees of Kiinteistö Oy Kauppakeskus Kaari and representatives of its business partners who are authorized to do so based on their job responsibilities. All persons processing personal data are bound by confidentiality obligations.
10. Changes to This Privacy Notice
Kaari reserves the right to update this Privacy Notice whenever necessary, for example in response to changes in its operations, services, or applicable legislation.