REGISTER DESCRIPTION

REGISTRY AND DATA PROTECTION POLICY

Register and privacy statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation ( 2016/679, General Data Protection Regulation, GDPR).

RESPONDENT FROM THE REGISTER
Mimmi Paatero / Blooming Desert Shop
bloomingdesertafrica@gmail.com

REGISTRY MANAGER
Mimmi Paatero

REGISTER NAME
Blooming Desert Shop online store customer register

PURPOSE OF KEEPING THE REGISTER
Personal data stored in the customer register is used for delivery and payment arrangements, as well as for managing and developing customer relationships. The data in the register may be used for Blooming Desert Shop's marketing and development of operations within the limits permitted and required by the Personal Data Act.

THE REGISTER MAY CONTAIN THE FOLLOWING INFORMATION
The person's contact information such as name, address, email address and telephone number.
Customer relationship information, such as billing and payment information, information about the customer
about ordered products, their delivery and invoicing, as well as customer feedback and contacts.

DATA DISCLOSURE
The data is processed within the limits permitted and required by the Personal Data Act, and is not
be disclosed to parties outside Blooming Desert Shop. The information will be deleted from the register upon the person's written request.

PRINCIPLES OF REGISTER PROTECTION
The information in the Blooming Desert Shop online store's customer register is stored in the system of the registrar. The information in the register is not disclosed to third parties and is only accessible to the company's employees responsible for product processing and mailing. A person registered as a customer can edit their information themselves if necessary, or submit a written request for the data to be edited or deleted.

REGISTERED PERSON'S RIGHT TO INSPECT
The registered person has the right to inspect the information stored in the register concerning him/herself and to correct any incorrect or incomplete information and to receive a copy of his/her information. The inspection request must be made in writing and addressed to the person responsible for the register.
The controller may, if necessary, ask the requester to prove their identity in order to verify the request.