Privacy Policy

This is a register and privacy policy in accordance with the EU General Data Protection Regulation (2016/679).

The latest update was made on December 30, 2024.

Data Controller

Klerea Jewelry
Business ID: 2991188-7
Address: Jousenpuistonkatu 3 A 24, 02200 Espoo, Finland
Email: klerea.korut@gmail.com
Website: www.klereakorut.com

Contact Person Responsible for the Register

Sofia Tuuri / klerea.korut@gmail.com

Contact for Privacy Matters

For any questions related to the processing of personal data or exercising your rights, the data subject is encouraged to contact the data controller in writing by sending an email to klerea.korut@gmail.com.

Legal Basis and Purpose of Data Processing

The legal basis for processing personal data is:

• Contract: The processing of personal data is allowed when necessary for the performance of a contract the data subject is part of.
• Legitimate Interest: Data processing is allowed if it is necessary for the legitimate interests pursued by the data controller or a third party. Legitimate interests may include situations such as an existing customer relationship. Legitimate interests may also apply to activities like direct marketing, customer service, product and service development, and log file management.

When the data subject is a party to a contract, their personal data can be processed to execute the contract. For example, if a customer orders products from the online store, the company may process their address data to deliver the products.

Purpose of Data Processing

The purpose of processing personal data includes:

• Fulfilling orders in the online store
• Providing customer service
• Product and service development

Personal Data Processed

The data controller collects only those personal data that are essential and necessary for the purposes described in this privacy policy.

The following personal data may be processed:

• Name
• Postal address
• Email address
• Billing address
• Order details

Rights of the Data Subject

Right to Access Personal Data
The data subject has the right to confirm whether their personal data is being processed, and if so, the right to obtain a copy of the personal data.

Right to Rectify Personal Data
The data subject has the right to request the correction of inaccurate or incorrect personal data. The data subject also has the right to complete any incomplete personal data by providing the necessary additional information.

Right to Erasure of Personal Data
The data subject has the right to request the deletion of their personal data if:

• The personal data is no longer necessary for the purposes for which it was collected;
• The personal data has been processed unlawfully.

Right to Restrict Processing
The data subject has the right to request the restriction of processing their personal data if:

• The data subject disputes the accuracy of the personal data;
• The processing is unlawful, and the data subject objects to the deletion of the personal data and requests instead the restriction of its use; or
• The data controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the establishment, exercise, or defense of legal claims.

Right to Object to Processing
The data subject has the right to object to the processing of their personal data for reasons related to their particular situation at any time.

The data controller may not continue processing the data subject's personal data unless the data controller can demonstrate that there are compelling legitimate grounds for the processing that override the data subject's interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data is being processed for direct marketing purposes, the data subject has the right to object to the processing of their personal data for such marketing, including profiling related to such direct marketing.

Right Not to Be Subject to Automated Decisions
The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, that have legal effects or significantly affect them in a similar way.

This does not apply if the decision is necessary for the performance or conclusion of a contract between the data subject and the data controller or if it is based on the explicit consent of the data subject.

Right to Data Portability
The data subject has the right to receive their personal data that they have provided to the data controller in a structured, commonly used, and machine-readable format, and the right to transmit such data to another data controller.

Right to Lodge a Complaint with a Supervisory Authority

The national supervisory authority for personal data matters is the Data Protection Ombudsman, which operates under the Ministry of Justice. You have the right to lodge a complaint with the supervisory authority if you believe that your personal data has been processed in violation of applicable law.