MinersLoop

Privacy Policy

This is the GDPR-Compliant Registry and Privacy Statement of MinersLoop Oy. Prepared on January 27, 2025.

1. Controller

MinersLoop Oy
Rajatie 50, 60120 Seinäjoki

2. Contact Person Responsible for the Registry

Roni Karjalainen
Email: roni@minersloop.com
Phone: +358 50 4342477

3. Name of the Registry

Customer Registry and Marketing Registry

4. Legal Basis and Purpose of Personal Data Processing

The legal basis for processing personal data under the EU’s General Data Protection Regulation (GDPR) is:

  • The processing of orders from the online store and the execution of transactions.

The purpose of personal data processing is to maintain customer relationships and conduct marketing. Data is not used for automated decision-making or profiling.

5. Contents of the Registry

The registry stores the following information:

  • Name of the individual
  • Contact details (phone number, email address, address)
  • Details of ordered services and changes to them
  • Billing information
  • Other information related to the customer relationship and ordered services

The IP addresses of website visitors and cookies necessary for the functionality of the service are processed based on legitimate interest, for example, to ensure information security and collect statistical data about website visitors when such data can be considered personal data. Consent is obtained separately for third-party cookies when necessary.

6. Regular Sources of Information

The information stored in the registry is obtained from customers via:

  • Messages sent through web forms
  • Emails, phone calls, and social media services
  • Contracts, customer meetings, and other situations where customers provide their information

The contact details of representatives of companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.

7. Regular Data Disclosures and Transfers Outside the EU or EEA

The data is not regularly disclosed to other parties.

8. Principles of Registry Protection

The registry is handled with care, and data processed using information systems is properly secured. If registry data is stored on internet servers, the physical and digital security of the equipment is adequately ensured.

The controller ensures that the stored data, server access rights, and other critical information regarding the security of personal data are handled confidentially and only by employees whose job descriptions include such responsibilities.

9. Right to Access and Request Data Correction

Every individual in the registry has the right to check the data stored about them and request the correction of any erroneous or incomplete data.

If a person wishes to check their stored data or request corrections, the request must be sent by email to the controller. The controller may ask the requester to verify their identity if necessary. The controller will respond to the customer within one week of the request.

10. Other Rights Related to Personal Data Processing

Individuals in the registry have the right to request the deletion of their personal data (“right to be forgotten”). Likewise, they have other rights under the EU’s General Data Protection Regulation, such as restricting the processing of personal data in certain situations.

Requests must be sent by email to the controller. The controller may ask the requester to verify their identity if necessary. The controller will respond to the customer within one week of the request.