Privacy Statement in accordance with Personal Data Act 523/1999 10# and 24# and EU General Data Protection Regulation (GDPR).

Valid from 19 August 2019

Registrar
Westend Musical Instruments Ltd Oy (id 2366448-3) Rantamäki 1 B 4, 02230 Espoo, tel. +358 40 505 8841 westend@westendxfi.com

Contact person for register issues
Irene Holvikari, Rantamäki 1 B 4, 02230 Espoo, tel. +358 40 505 8841
irene@westendxfi.com

Name of the registry
Customer register of Westend Musical Instruments Ltd Oy.

Purpose of processing personal data
The purpose of the register is to maintain the customer register of Westend Musical Instruments Ltd Oy and to handle and archive customer orders and manage customer relationships. The registry information can be used to target Westend Musical Instruments Ltd’s advertising without disclosing personal information to an outside party.

Content of the register
The Customer Register consists of a register that stores customer information as follows: Customer contact information for ordering and delivering. In addition, the contact phone number and the billing information. The registry information also includes the e-commerce user IDs. Information about products, services, delivery and returns ordered by the customer. The data is stored for at least six years.

Regular sources of information
The contact and customer information of the register is obtained from the customer himself when registering as an online store user, ordering the goods or through other customer notices.

Disclosure of data and transfer of data outside the EU or the European Economic Area
Only the Westend Musical Instruments Ltd’s own direct marketing purposes can provide name and address information from the customer register. 
Westend Musical Instruments Ltd Oy uses MailChimp email service for direct marketing and communications. For MailChimp we collect first name, last name, and email address. MailChimp is an American company that transfers data outside the European Union. Westend Musical Instruments Ltd Oy uses also Bluehost Inc for hosting services for example system backups. Bluehost Inc is an American company that transfers data outside the European Union. However, personal information is protected as required by the Personal Data Act, and MailChimp and Bluehost Inc. are listed on the US-EU Privacy Shield Certified Companies List.

Principles of Registry Security
Manual materials are stored in locked spaces. Only personalised employees who have their own user IDs and passwords for the system can process the data processed by the computer. Different employee groups have different levels of access to Westend Musical Instruments Ltd Oy’s information system. Professional secrecy binds employees dealing with customer information. Information is disclosed to third parties only on the basis of a statutory obligation to notify or at the request of the client or the authorities.

The right of inspection
As a rule, every Westend Musical Instruments Ltd customer has the right to check their own data from the customer register of Westend Musical Instruments Ltd Oy. Requests for verification should be addressed in writing to westend@westendxfi.com, from which requests are directed to the person responsible for maintaining the customer information of the person concerned. Westend Musical Instruments Ltd Oy may, if necessary, request the applicant to prove their identity. Westend Musical Instruments Ltd Oy is responsible to the customer within the timeframe provided for in the EU Data Protection Regulation (as a rule within one month).

Right to claim information repair
Every Westend Musical Instruments Ltd Oy customer has the right to demand the correction of their own personal data. Requests for correction must be addressed in writing to westend@westendxfi.com, from which they will be directed to the person responsible for maintaining the customer information of the person concerned. Westend Musical Instruments Ltd Oy may, if necessary, request the applicant to prove their identity. Westend Musical Instruments Ltd Oy is responsible to the customer within the timeframe provided for in the EU Data Protection Regulation (as a rule within one month).

Other rights related to the processing of personal data
The data subject has the right to prohibit Westend Musical Instruments Ltd from processing information about him or her for direct marketing, distance selling and other direct marketing, market and opinion surveys. The data subject has the right to request the removal of their own data from the register of Westend Musical Instruments Ltd Oy. The request will be executed unless the legislation, open invoices or recovery measures prevent the deletion of the data. Westend Musical Instruments Ltd Oy may, if necessary, request the applicant to prove their identity. Westend Musical Instruments Ltd Oy is responsible to the customer within the timeframe provided for in the EU Data Protection Regulation (as a rule within one month).