Enexus
Enexus Oy / Fetch
Juurakkotie 6 01510 VANTAA
info@fetch.fi
2686543-2

Contact person for matters concerning the processing of personal data

Tuomo Pirhonen

Legal basis and purpose of the processing of personal data

The purpose of the processing is to maintain the company’s customer register, manage, archive and process customer orders and manage customer relations. The data may be used for business development, statistical purposes and to provide more personalised targeted content on our online services. The data may be used to target advertising without disclosing personal data to third parties.
We use Klarna as a check-out provider. This means that we may transfer your personal data in the form of contact and order information to Klarna once the transaction has been loaded in order to allow Klarna to manage your purchase. Your transferred personal data will be processed in accordance with Klarna’s own privacy notice (https://www.klarna.com/international/privacy- policy/).

Basis of legitimate interest

The company has a legitimate interest in processing personal data of website users, its own customers and customers of its partners. This is necessary in order to provide customer service. Such processing is in balance with the rights and freedoms of the data subject. The legal basis for the processing of personal data is the legitimate interest of Enexus and its partners.

The categories of data subjects concerned

Enexus processes the data of website users, customers and customers of its partners.

Personal data processed

• First and last name of the person
• The entity represented 
• E-mail address
• Postal address
• Telephone number
• Subscription details

Legal sources of information

The majority of personal data is obtained directly from the data subject when he or she uses the services or places an order. Personal data relating to orders is also obtained from partners and payment service providers.

Retention period of personal data

Up to two years from the end of the relationship.

The regulated disclosures of data

Personal data relating to the order will be disclosed to the partners involved in the execution of the order. When you order a product and transport from our service, we disclose to the supplier of the product the information necessary for its delivery and payment. In addition, information is disclosed to payment service providers for the purpose of processing payment transactions.

Transfer of data outside the EU or EEA

Personal data is stored on servers located in the European Economic Area (EEA). Personal data will only be transferred to a controller outside the EEA when it is necessary for the performance of the service ordered by the customer. Enexus outsources some of its services to third parties. The service providers may be based outside the EEA. In those cases, personal data will be protected through the use of standard clauses and additional measures.

Principles for the protection of personal data

Employees of the company and companies acting on its behalf may process personal data only to the extent necessary for the performance of their duties. Each designated user has his/her own personal username and password. The system is protected by a firewall to prevent access to the system from outside.

Cookies

No cookies are used on this website. In order to maintain the session, store the contents of the shopping cart and complete the order, it is technically necessary to store the status information on the user’s terminal device. User activity is not tracked outside the site.

Automatic processing and profiling

Enexus does not make automatic decisions and does not profile.

Right of review, i.e. the right of access to personal data.

The data subject has the right to check what information about him or her is in the register. The request for inspection must be made in writing by contacting the company’s customer service or the contact person of the register.

The right to transfer data from one system to another

The processing of personal data by Enexus is based on legitimate interests. The right to transfer data from one information system to another, as defined by the GDPR, does not apply where the legal basis for the processing is legitimate interest.

The right to request the correction of information

Personal data in the register that is inaccurate, unnecessary, incomplete or outdated for the purpose of processing must be corrected, deleted or completed. The request for rectification should be made by written request to the company’s customer service or contact person. The request should specify the data to be corrected and the reason for the correction. The correction will be carried out without delay. The person from whom the incorrect information was received or to whom it was disclosed will be informed of the correction. Where a request for correction is refused, the controller shall issue a written certificate stating the reasons for the refusal. The person concerned may refer the refusal to the Data Protection Officer.

Right of restriction

The data subject has the right to request restriction of processing, for example if the personal data in the register are inaccurate. Any contact will be made to the contact person.

Right of object

The data subject has the right to request personal data concerning him or her and the right to request the rectification or erasure of personal data. Requests may be addressed to the contact person.

Right to complain

If you believe that the processing of personal data concerning you has infringed the law, you have the right to lodge a complaint with a supervisory authority. You can also lodge a complaint in the Member State where you have your habitual residence or place of work.

Other rights related to the processing of personal data

Data subjects have the right to object to the disclosure and processing of their data for direct marketing and other marketing purposes, to request that their data be made anonymous where applicable, and to be completely forgotten.