This is the Company's registration and data protection statement in accordance with the EU General Data Protection Regulation (GDPR). Prepared on 02.08.2022. Latest change 9th of June 2023

1. Controller, contact person responsible for the registry and data protection officer
Name: Aaron Ahola

Business ID: 3100524-2

Address: Tasalantie 19 G

Postal code and post office: 04500 Kellokoski

Phone number: 0452355202

Email: aaron@aaronahola.com

2. Purpose of use of the register

Collected personal data is used for customer contact, sales and service provision. Emails are collected on an email list.

3. Basis for data collection and processing

The customer's data is collected and processed with the customer's consent, or for the implementation of the contract with the customer.

4. Data content of the register
The information provided by the customer on the contact form, such as first and last name and e-mail address, is stored in the register. When joining the e-mail list, the customer gives me his e-mail and thereby accepts his joining as a newsletter subscriber. The websites do not store the user's bank contact information or credit card information. Customer information on www.aaronahola.com is confidential and will not be disclosed to third parties under any circumstances.

The information collected in the registers is not disclosed outside the company for marketing, sales, opinion or market research purposes. However, personal data can be disclosed to the authorities in accordance with Finnish laws upon request.

5. Regular sources of information

The register collects information from the persons themselves. From the registers kept by the authority within the limits allowed by law.

6. Regular transfers of data and transfer of data outside the EU or EEA

Information is not regularly disclosed outside the company. Some of the external service and software providers used by the company may store data outside the EU or the European Economic Area.

8. Registry protection
Care is taken when processing the register and the information processed with the help of information systems is properly protected. When register data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

9. Right of inspection and right to demand correction of information
Every person in the register has the right to check their information stored in the register and to demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about him or demand correction, the request must be sent in writing to the controller. If necessary, the registrar can ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).

10. Other rights related to the processing of personal data
A person in the register has the right to request the removal of personal data about him from the register ("right to be forgotten"). Those registered also have other rights according to the EU's General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests should be sent in writing to Aaron Ahola (contact information above). If necessary, the registrar can ask the requester to prove his identity. The controller will respond to the customer within the time stipulated in the EU data protection regulation (generally within a month).