1. Description of the privacy statement
This privacy statement provides transparent information to data subjects on the information under Articles 13 and 14 and the data subject's rights under Articles 15 to 22 in accordance with Nutri-Flow Oy's (hereinafter “Nutri-Flow”) EU General Data Protection Regulation (“GDPR”) 2016/679. in a concise, transparent and easy-to-understand format.

Protecting your privacy is very important to Nutri-Flow - we want to keep your personal information secure. On this page, you will find information on how we collect and process your personal information.

Nutri-Flow processes personal data in accordance with this Privacy Statement and applicable law, such as the General Data Protection Regulation (“GDPR”) and national data protection law.

2. Rights of the data subject
You may at any time exercise the following rights with regard to the processing of your personal data:

This includes e.g. the right to be informed whether personal data concerning you are being processed, what personal data are being processed and for what purposes the data are being processed. You also have the right to request that incorrect or incomplete personal information be corrected.

You have the right to object to the processing of your personal data when your personal data is processed for direct marketing purposes or when the processing is based on a legitimate interest of the controller, such as a customer relationship.

You can also request the deletion of your personal information when one of the following conditions is met:

- your personal data are no longer needed for the purposes for which they were collected,
- the use of your personal data is based on your consent and you wish to withdraw your consent
the processing is unlawful, or
- personal data must be deleted in order to comply with a legal obligation applicable to the controller
Please note that in some situations, legal obligations may prevent us from disclosing or deleting your personal information or otherwise prevent you from exercising your rights.

If you have any complaints about how we process your personal information or would like more information, please contact us at any time. We also have a legal obligation to ensure that your information is kept up to date. We encourage you to assist us in complying with this obligation by ensuring that you notify us of any changes by contacting us. The customer may prohibit the use and processing of his data for marketing purposes by contacting customer service by e-mail Other contacts must be made in writing and delivered signed to Nutri-Flow Oy, Villiperäntie 5 as 2, 90410 Oulu.

If you want to make a complaint to a national supervisory authority about the processing of your personal data, you can do so by contacting your local data protection authority (in Finland, the Data Protection Commissioner http://www.tietosuoja.fi).

3. What personal information is collected and for what purpose?
Nutri-Flow Oy collects personal data through the following channels and for the following purposes:

Customer register: Nutri-Flow Oy processes personal data in general for customer management purposes, payment control, responding to inquiries and feedback sent by consumers, service and business development and statistical purposes. Nutri-Flow Oy uses personal data for marketing purposes in accordance with the Personal Data Act. Personal data is collected from consumers either at the time of registration as a customer or during a customer relationship, or on the basis of other separate consent of the consumers.

The legal basis for processing is consent under Article 6 (a) of the Data Protection Regulation, an agreement under point (b) and a legitimate interest of the controller or a third party under point (f), such as a customer relationship.

The collection of personal data in the customer register is necessary for the conclusion of contracts and the provision of services. The provision of personal and contact information is not a statutory requirement, but a condition for Nutri-Flow Oy to form a contractual relationship and provide services.

Customer register information is used for personal profiling.

The customer register contains the following personal information:

Persona information:

• first name
• last name
• sex
• date of birth

Contact information:

• street address
• postal code
• city
• e-mail
• phone number

Health information:

• height
• weight
• waist gauge
• weight and weight management information
• dietary information
• information on diseases (nutritional)
• personal entries (meal diary, other personal additions)

Customer information:

• customer-related order information
• customer ID
• customer status information
• anti-supply information
• price information
• payment method information

The customer register contains data containing specific categories of personal data in accordance with Article 9 of the Data Protection Regulation, the so-called sensitive personal data, the processing of which is based on the data subject's written consent to the processing of his or her personal data.

Cookies: A cookie is a text file that the server of nutri-flow.fi stores on the user's hard drive or in the memory of a mobile device. Some e-commerce functions require cookies to be accepted in order to function. Cookies are used to speed up and facilitate the use of online shopping and to improve the shopping experience. The user's web browser is likely to accept cookies by default. In the browser settings, the user can choose to block the use of cookies or delete cookies from the browser after using the service. See your browser manufacturer for instructions on setting up your browser.

4. How is the data processed?
Nutri-Flow processes personal data solely for the purpose for which it was collected and described above. Personal data will not be processed more than is necessary for a specific purpose. Nutri-Flow -ravintotulkki retains the personal data for the time being until the customer indicates that he or she wishes to delete the data. The functionality of the service is based on the fact that the customer does not have to re-enter the data when re-enabling the program after the break.

When storing personal information, we comply with statutory retention periods, such as those arising from the Accounting Act.

Nutri-Flow has taken appropriate technical and organizational measures to protect personal data from unauthorized access. Paper documents are stored in good order in locked rooms and our office computers and servers are properly protected. We also have internal policies for the secure processing of personal information.

5. Has the information been transferred or disclosed to third parties?
We will not disclose personal information to third parties unless necessary under applicable law or necessary to establish, file or defend a legal claim.

The service providers used by Nutri Flow may have access to the personal data repositories managed by Nutri Flow in order for these companies to perform the services requested by Nutri Flow. These companies are obliged to comply with the data processing agreements concluded with Nutri Flow and must take the necessary technical and organizational measures to protect personal data.

6. Where is your information processed?
Personal data is primarily processed on EU / EEA servers and not exported outside the EU / EEA.

However, we may need to transfer your data from the EU / EEA. The level of data protection in non-EU / EEA countries may be lower than in the EEA. If so, we will take appropriate action within the GDPR to ensure that your personal information is properly protected.

7. Contact us
Nutri Flow is the controller of personal data for the purposes described above.

Nutri-Flow Oy

Villiperäntie 5, 90410 Oulu

+358 40 080 5572
http://www.nutri-flow.fi

Contact person: Eila Maunu