Data controller

Kuore Oy
Business ID: 3467565-5
Address: Lukkotie 3 A, 80100 Joensuu

Contact person

CEO Lassi Leppinen
E-mail: info@kuorefishing.com

The Name of the Filing System

Kuore Oy’s Customer Register

Purpose and Basis for the Processing of Personal Data

Personal data is processed in accordance with the Data Protection Act (1050/2018), the General Data Protection Regulation of the European Union (2016/679) and other applicable legislation in order to maintain Kuore Oy's online store, to implement the contract between the customer and the seller and to manage the customer relationship. The data will not be used for automated decision-making or profiling.

The grounds for processing personal data under Article 6 of the General Data Protection Regulation are the performance and preparation of the contract, the data subject's consent and the legitimate interest of the controller.

The Content of the Filing System

Kuore Oy collects the following personal data from its customers:
Name;
Address;
Billing information;
Phone number;
E-mail address.

The service provider of the website used by the controller collects the IP addresses of visitors to the website and cookies necessary for the operation of the service. A cookie is a small text file that is sent to and stored on the user's own computer. Cookies are used, inter alia, to store the user's preferences on the website and to keep track of which parts of the website the user visits. The use of cookies is subject to the terms of use and privacy policy of the service provider, and the service provider processes this information itself and on its own behalf. For more information, see the service provider's cookie policy: https://www.shopify.com/legal/cookies.

Regular Sources of Information 

Personal data is obtained from the data subjects themselves in connection with transactions on the controller's e-commerce service. Personal data may also be collected from registers held by public authorities, if necessary, in accordance with the provisions of data protection legislation. Data of contact persons of companies and other organizations may also be collected from public sources such as company websites and directory services.

Regular Disclosures of Data

Personal data may be disclosed to Kuore Oy's partners if the disclosure is necessary for the implementation of customer-related measures. The parties receiving personal data under this section may only use the personal data for the agreed purpose and undertake to act in accordance with data protection legislation. Kuore Oy has entered into the necessary agreements for the processing of personal data, which specify the purposes and means of the processing of personal data and ensure that personal data are processed in accordance with data protection legislation and Kuore Oy's data protection practices and in the manner and to the extent set out in this privacy policy. 

Data may be disclosed to a public authority if required by a compelling governmental order or by law.

Data may be disclosed outside the EU or EEA. If data is disclosed outside these areas, Kuore Oy requires that the recipient undertakes to comply with the data protection legislation in force in Finland.

Protection of Personal Data and the Filing System

Kuore Oy and the processors acting on its behalf under data processing agreements process personal data with special care and ensure appropriate security in the storage of all personal data. Electronic data is protected by firewalls and other necessary technical means. Any paper material is kept in locked premises. 

Access to the data is restricted only to persons for whom the use of the data is necessary for the purposes stated in the privacy policy. The data will be treated confidentially in all respects.

Storage of Personal Data

Personal data will only be stored for as long as necessary for the purposes specified in this privacy policy. 
Data may only be stored for longer periods if required by mandatory legislation or official regulations.

Rights of the Data Subject

Kuore Oy will ensure that all the rights of the data subject under the law are respected. The data subject has, inter alia:

Right to withdraw consent to the processing of personal data – To the extent that we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time by telling us that you wish to do so. 

Right to request erasure of personal data – You have the right to request that your personal data be erased from our systems, for example, if your consent has been withdrawn, the purpose for which the personal data is being used has expired, or the use of the personal data is causing you damage or harm.

Right of access to personal data – You have the right to check what information we hold about you. A request for access must be made in writing by contacting the contact person of the filing system. 

Right to rectification of personal data – You have the right to request the rectification of data that you consider inaccurate or incorrect. You also have the right to request that incomplete data be completed.

Right to restriction of processing – In certain circumstances, you have the right to request that we restrict the processing of your personal data.

Right to object – You have the right to object to the processing of your personal data in certain circumstances.

Right to data portability – To the extent that we have processed your data on the basis of your consent or in order to perform a contract with you, you have the right to receive the data you have provided to us electronically in a commonly used format for the purpose of transferring the data to another service provider.

Right not to be subject to automated decision-making – Kuore Oy does not use information to profile visitors or make other automated decisions.

Kuore Oy will take the necessary measures to comply with the data subject's requests in accordance with data protection legislation and the time limits set out therein. 

Such requests or demands should be submitted in writing to the contact person mentioned above. The controller may, if necessary, ask the person making the request or demands to prove their identity. 

The controller will respond to the customer within the time limits set out in the General Data Protection Regulation (generally within one month).

The data subject also has the right to lodge a complaint about the processing of personal data with the supervisory authority, the Office of the Data Protection Ombudsman. The contact details of the authority are available on its website: https://tietosuoja.fi/etusivu.  

Changes to the Privacy Policy

The privacy policy will be kept up to date and updated as necessary. Any changes to the privacy policy will be notified on Kuore Oy's website. 

The Privacy Policy was last updated on April 28th 2025.