Wellnets Customer and Marketing Register Privacy Policy

The contact person can be reached by email at asiakaspalvelu@wellnets.fi.

Wellnets Customer and Marketing Register

The legal bases for the processing of personal data under the EU General Data Protection Regulation are the person's consent, contract and the legitimate interest of the controller.

The purpose of the processing of personal data is to maintain the customer relationship, enable subscription payments, prevent abuse, guarantee membership-related services, improve customer experience and customer communication and marketing. Customer history can be anonymized and used for Wellnets' internal purposes. Data processing is carried out in accordance with the EU General Data Protection Regulation.

Personal data is not disclosed to third parties.

Wellnets' customer and marketing register contains the following personal data:

• Contact information required for customer relations and marketing: such as name and email address
• Information required for payments: such as payment and order information
• Service usage information: such as logins, exercises performed

The IP addresses of website visitors and cookies necessary for the service's functions are processed on the basis of legitimate interest, for example, to ensure data security and to collect statistical information about website visitors in cases where they can be considered personal data. Consent is requested separately for third-party cookies.

The personal data stored in the register is collected from the registered person themselves and based on the use of the service. We collect data via a www form when the customer logs in to the service and places a Wellnets order, as well as service usage data after logging in.

Only the information that the person provides about themselves and that is generated from the use of the service is included in the personal data.

Information about contact persons of companies and other organizations can also be collected from public sources such as websites, directory services and other companies.

Personal data is transferred to Paytrail Oyj and Epassi Finland Oy for payment and order management, and to Liana Technologies Oy for newsletter communication and email marketing.

We do not sell or rent the registered person's personal data to third parties. We only disclose information to third parties in accordance with the requirements of competent authorities or other parties, in accordance with the legislation in force at any time.

Customer personal data will not be disclosed or transferred outside the European Union (EU) or the European Economic Area (EEA) without a legal basis. We ensure that transfers are carried out properly and lawfully in accordance with the legislation on the processing of personal data.

The register is handled with care and the data processed using information systems is protected appropriately. When register data is stored on Internet servers, the physical and digital security of their equipment is appropriately ensured. The controller ensures that the stored data, server access rights and other information critical to the security of personal data are handled confidentially and only by employees whose job description requires it.

We retain personal data only for as long as is necessary to fulfil the purposes of processing personal data as defined in this privacy policy. Due to obligations under the Accounting Act or other applicable law, data may have to be retained for a longer period than the above-mentioned period.

Every person in the register has the right to check their data stored in the register and to demand correction of any incorrect data or completion of incomplete data. If a person wishes to check the data stored about them or to demand correction, the request must be sent in writing to the data controller. If necessary, the data controller may ask the requester to prove their identity. The data controller will respond to the customer within the time period specified in the EU Data Protection Regulation (generally within one month) for submitting the request, unless there are special reasons to extend the response time.

The customer has the right, at any time, to object to the processing of personal data for direct marketing purposes. Every direct email sent by Wellnets contains a legal link from which the customer can opt out of direct mailings if they wish.

The customer must send requests regarding their rights in writing or by email to the following address:

We reserve the right to change this Privacy Policy, for example in the event of changes in legislation or our services.