Privacy Policy

This is the register and privacy policy of Kajaanin Ranch Oy in accordance with the EU General Data Protection Regulation (GDPR). Prepared on 11 February 2022. Last updated on 11 February 2022.

1. Register holder

Kajaanin Ranch Oy
1919422-0
Kauppakatu 26, 87100 Kajaani FINLAND

2. Contact person responsible for the register

Kimmo Laatikainen, kimmo.laatikainen@ranch.fi, 0409391016

Name of the register

User register of the online service

4. Legal basis and purpose of processing personal data

EU:n yleisen tietosuoja-asetuksen mukainen oikeusperuste henkilötietojen käsittelylle on verkkopalvelun ylläpito ja ravintolan pöydänvaraus.
Henkilötietojen käsittelyn tarkoitus on yhteydenpito asiakkaisiin ja asiakassuhteen ylläpito. Tietoja ei käytetä automatisoituun päätöksentekoon tai profilointiin.

5. Contents of the register

The data stored in the register includes the person’s name, phone number and email address. IP addresses of website visitors and cookies necessary for the functionality of the service are processed on the basis of legitimate interest, for example to ensure security and to collect visitor statistics when they can be considered personal data. Consent is requested separately for third-party cookies when required.

6. Regular sources of information

Rekisteriin tallennettavat tiedot saadaan asiakkaalta mm. www-lomakkeilla lähetetyistä viesteistä, sähköpostitse, puhelimitse, sosiaalisen median palvelujen kautta, sopimuksista, asiakastapaamisista ja muista tilanteista, joissa asiakas luovuttaa tietojaan.
Yritysten ja muiden organisaatioiden yhteyshenkilöiden tietoja voidaan kerätä myös julkisista lähteistä kuten verkkosivuilta, hakemistopalveluista ja muilta yrityksiltä.

7. Regular disclosures of data and transfer of data outside the EU or EEA

Data is not regularly disclosed to other parties.

8. Principles of register protection

Due care is taken in processing the register, and the information handled through information systems is appropriately protected. When register data is stored on internet servers, the physical and digital security of the hardware is properly ensured. The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose duties require it.

9. Right of access and right to request correction of data

Every person in the register has the right to check the data stored about them and to request the correction of any inaccurate data or the completion of incomplete data. If a person wishes to review the data stored about them or request corrections, the request must be sent in writing to the data controller. The data controller may request proof of identity if necessary. The data controller will respond within the time required by the EU General Data Protection Regulation (generally within one month).

10. Other rights related to the processing of personal data

A person in the register has the right to request the deletion of their personal data from the register (“right to be forgotten”). Registered users also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be sent in writing to the data controller. The data controller may request proof of identity if necessary. The data controller will respond within the time required by the EU General Data Protection Regulation (generally within one month).