top of page

Privacy Policy of KOTO Spirits Oy

This is the registry and Privacy Statement in accordance with KOTO Spirits Oy's General Data Protection Regulation (GDPR). Prepared 10.4.2022. Last modified 4/24/2022.


1. The controller

KOTO Spirits Oy

Ideakeskus, Manttaalitie 15 B, 37500 Lempäälä


2. Contact person responsible for the register

Eerik Riekkinen

tel. +358 40 588 1829


3. The name of the registry

KOTO Spirits Oy's customer register. KOTO Spirits Oy's customer and website user information.


4. Purpose of the processing of personal data

The register maintains the contact information of KOTO Spirits Oy's customers for communication, marketing and invoicing, as well as information necessary for the company's administration and business.


5. Information content of the register

Customer information about each customer in electronic services (see Section 7):

  • Name, Address, Mobile number, E-mail address and any photos

In addition to website users:

  • Technically collected personal data

  • Technically collected information about your use of the Website may include your IP address and country or city, the use and timing of online services, information about the device used, operating system type and software versions, browser type and language settings, and external websites you access or access from the registrar's online service.

  • The registrar may use cookies on its website to collect information about the use of the services.

  • Pictures

  • Other information provided by the customer

  • Subscription agreements

6. Regular sources of information

The information stored in the register is obtained from the data subject himself, from the use of the technically registered online and electronic services, from analytical services provided by third parties such as Google Analytics, from public data sources or from public contact service providers.


7. Regular disclosures and transfers of information

The information is not regularly disclosed to other parties. The information may be published to the extent agreed with the customer.

8. Data transfer outside the EU or the EEA

Personal data will not be disclosed outside the EU or the EEA.


9. Registry Security Principles

Manual material
Manual material is stored in a locked state and discarded when there is no longer a legal need for it.


Electronic material
The registry is properly protected on the registrar's premises or on a properly secured server and service. Persons belonging to the staff of the controller who need the information in order to perform their duties shall have the right to process personal data. The registry data is protected by technical solutions and applications from outside the organization. The controller shall report any breach of security directly to the authorities or the user in accordance with the applicable legislation.


10. Right of inspection

You can check the information primarily by contacting the Contact person in writing.


11. Right to request rectification of data

See previous paragraph. The information required by the Finnish Accounting Act (supporting documents for accounting) must be kept for 6 years.

12. Other rights related to the processing of personal data

The data subject has the right to withdraw his or her consent to the processing of personal data.

The data subject has the right to prohibit the use of his data for direct advertising, distance selling and other direct marketing.

The data subject's request, withdrawal of consent and refusal shall be addressed to the controller's contact person electronically.

The data will be kept for the time being. The data controller shall retain other registered personal data in accordance with the legislation in force at the time and only for as long as it is necessary for the purposes described in this data protection statement. Due to accounting or other mandatory legislation, the data may be retained even after the termination of the customer relationship or other basis for processing personal data in accordance with the provisions of that law. Visitors to the Website may clear or block cookies and other tracking of browser or device settings, but this may impair the user experience or cause the Website to malfunction. Clearing cookies does not completely stop collecting data. 

bottom of page