This is a register and privacy statement of Caffè24 /Elisir Oy in accordance with Personal Data Act (Sections
10 and 24) and the EU General Data Protection Regulation (GDPR). Created May 10, 2018
1. The Registrar
Elisir Oy, Vuorilehdonkuja 2 L 4, 01200 Vantaa, Finland, firstname.lastname@example.org.
2. Contact person responsible for the register
Danilo Trovato, email@example.com
3. Name of the register
E-commerce customer register.
4. Legal basis and purpose of processing of personal data
The legal basis for processing of personal data under the EU General Data Protection Regulation is the
legitimate interest of the controller (customer relationship).
The purpose of processing personal data is to communicate and maintain customer relationships.
The data is not used for automated decision making or profiling.
5. Information content of the register
The information to be recorded in the register is: the person's name, contact information (telephone
number, e-mail address, address), other customer relationship information and information about the
6. Regular sources of information
The information stored in the register is obtained from the customer when the customer registers as a
company customer on the web site.
7. Regular disclosures and transfers of information outside the EU or the EEA
Information will not be disclosed to other parties.
8. Registry Protection Principles
The records shall be handled with care and the data processed by the information systems shall be
appropriately protected. When registry information is stored on Internet servers, the physical and digital
security of their hardware is properly taken care of. The data controller shall ensure that the stored
information, as well as server access and other information critical to the security of personal data, is
treated confidentially and only by the employees whose job description it is part of.
9. Right of inspection and the right to have the data corrected
Every person in the register has the right to verify their data stored in the register and to request the
correction of any inaccurate or incomplete information. If a person wishes to verify or rectify the
information stored about him / her, the request must be sent in writing (by email) to the controller. If
necessary, the controller may ask the applicant to prove his identity. The controller will respond to the
client within the time limit set by the EU Data Protection Regulation (as a rule within one month).
10. Other rights related to the processing of personal data
Any person on the register has the right to request that personal data relating to him be removed from the
register ("the right to be forgotten"). Data subjects also have other rights under the EU General Data
Protection Regulation, such as restricting the processing of personal data in certain situations. Requests
should be sent in writing (by email) to the controller. If necessary, the controller may ask the applicant to
prove his identity. The controller will respond to the client within the time limit set by the EU Data
Protection Regulation (as a rule within one month).
analytical information about the use of our website and to store functional preferences. You have the
ability to change the settings for the use and extent of cookies in your web browser