NOLLA

Register description and privacy policy

We are committed to protecting the privacy of our clients and we offer our clients the opportunity to influence how their data is processed. Our website collects user information for assisting in website development, marketing, usability and statistics. The purpose of collecting this information is to make operating our website as smooth as possible for users. This Privacy Policy is also a Register Description in accordance with Section 10 of the Personal Data Act (523/1999).

Register keeper

The Nolla Company Oy Business ID: 3092638-1 Uudenmaankatu 25 A 7, 00120 Helsinki

Person in charge of register matters

Joel Uussaari Uudenmaankatu 25 A 7, 00120 Helsinki joel@nollacabins.com

Name of the register

The client database of Nolla Company Oy

Purpose of the processing of personal data

Personal data may be processed for the following purposes: • Marketing (if the client has given their separate consent) • Maintaining client relationships and communicating with clients

Data content of register

The register may include the following information: • Contact details: name, address, telephone number, email address, home country, and company.

Retention of personal data

Personal data is kept on Shopify and Mailchimp servers.

Regular sources of information

Customer information is routinely obtained from the following sources: • From users themselves via form data obtained from the company’s online service. • The website contains cookies from third parties (partners) that are implemented for measuring and monitoring purposes. Third parties may set cookies on your terminal device when you visit the website. Cookies mainly collect technical information. There is an indication regarding the use of cookies on the website that users can accept. What are cookies? Cookies are small text files. The browser deletes cookies after the expiration date. You can manage any cookies that may be included on our website. Cookies inform the server how the website has been used during a visit to the website. For example, cookies ensure that a user’s choice of language or any products in the shopping cart are stored. Google Analytics Our website uses Google Analytics, which compiles data from website visits for statistical analysis. It is not used to collect any personally identifiable information from users. Personal information collected through cookies and analytics Visitor statistics and analytics is composed of information transmitted by the browser and Internet connection that does not transmit any data that can be used to personally identify a visitor. The information will also not be processed or combined at any stage in such a way that it could be used to identify a visitor.

Regular transfer of information

• The information will not be used for marketing activities without the clients’ express consent.
• Information will not be regularly transferred or disclosed outside the EU or the European Economic Area, with the exception of data collected by any of external services listed in Section 7 if implemented.

Transfer of data outside the EU or the European economic area

• Information will not be regularly transferred or disclosed outside the EU or the European Economic Area, with the exception of data collected by any of external services listed in Section 7 if implemented.

Rights of clients

The right to inspect and correct information and the right to be forgotten
• Clients have the right to check any information about them that is stored in the register.
• If there are any errors in the information or a client wishes to remove their information from the register, they may submit a request to the person responsible for the register referred to in point 2 to rectify the matter.

Principles of protection of the register

Manual material
• There is no manual material.
• Electronically stored data
• Personal information will be kept confidential. The equipment on which the register is located is protected by a firewall, regular backups, and other technical measures necessary for the protection and secure storage of personal data.