1. Controller
2. What data do we process?
3. For what purposes will your personal data be processed?
4. Storage period
5. What rights do you have?
6. How do you exercise your rights?
7. Information on recipients of personal data
8. Lodging a complaint
9. Necessary data for our services
10. Information on automated decision-making, including profiling
11. Use of data for other purposes
12. Data obtained from other sources than you
13. Data protection officer
Kesko Corporation, Helsinki
Business ID 0109862-8
PO BOX 1, FI-00016 KESKO
With regard to this service, you can contact the controller:
By email: tietosuojakaupanpalvelut@kesko.fi
In this register, we process the following personal data, depending on the electronic feedback channel (e.g. online feedback forms, mobile application, customer surveys). Only necessary data are collected in each feedback channel. Therefore the amount of data collected may vary.
We process the following data:
We record in the customer feedback register data referred to in Section 2, submitted by a customer or another person, related to customer feedback given to K-food stores and Kesko Group. All verbal, written, numerical or other such feedback, for example, star ratings or other reaction indicators, submitted by a customer or another person, is considered customer feedback. Customer feedback can be submitted also without filling in the feedback form fields for contact details.
The data provided are used to process the feedback and respond to it. The data submitted may be linked to K-Plussa customer data. The personal data and feedback content submitted are used in the provision and development of K-food store and Kesko Group customer service, in business development, analysis and statistics. Feedback content may also be used for marketing and communications purposes.
The processing is necessary for the purposes of our legitimate interests. In our view, we have a legitimate interest to process the data you have submitted using our electronic feedback channel, in order to process the feedback you have submitted, respond to the feedback if you so wish, and to develop our business based on customer needs. We only collect necessary data required for each electronic feedback channel.
The storage of personal data is necessary for the purposes of contact and processing of feedback. Personal data are erased from the register six (6) months after the feedback has last been altered.
Data on devices used and on browser version, settings and identifiers as well as browsing data are stored for 51 months from the submission of the feedback.
Right to access
When you request access to your data, Kesko will inform you on whether it is processing personal data on you or not, and will provide you with a copy of the personal data being processed.
Right to rectification
You have the right to have incomplete personal data on you completed and inaccurate data corrected.
Right to erasure
You have the right to request for your personal data to be erased from the register. Should there no longer be legal grounds for processing your personal data, your data will be erased.
Right to object
We may process your personal data on the basis of a legitimate interest, that is, as part of our business operations if we have determined that the processing does not infringe your personal data protection. In such cases, you have the right to object the processing of your personal data for personal reasons.
Right to restriction of processing
You may have the right to restrict the processing of your personal data. Once the processing has been restricted, the controller will not, as a rule, process your data in any other way except storing the data. This right exists, for example, if you contest the accuracy of your personal data, if the processing is unlawful, or if you have objected to the processing of your personal data and are waiting for a response to your request.
Kesko’s data protection portal can be accessed at https://tietosuoja.kesko.fi. In the portal, you can submit a request by strong identification using your online banking codes. We will primarily use the portal to answer requests received through the portal, unless you specifically request a different delivery method.
If you cannot or do not want to use the portal, you can also send a request to us with a personally signed letter to the above address. Mark the letter with "data protection". We will respond to this type of request by letter. If the response contains your personal data, we will deliver the letter by personal registered post. Only the person marked as the recipient can acknowledge receipt of the letter. This allows us to ensure the correct recipient of the letter and the confidentiality of the data.
Kesko as the controller will process personal data itself, but will also use various service providers. Kesko strives to use the best, reliable partners and is responsible for the actions of the service providers it has selected with regard to the processing of personal data. Such service providers may vary, but include providers of information technology services and systems services. Personal data necessary for handling customer feedback will be delivered to K-food stores. In order to handle an issue, personal data may be disclosed to other units within Kesko Group or to entirely different companies, for example, to a product manufacturer for refund purposes.
Personal data are deemed to be transferred outside the EU/EEC in connection with the provision of information technology services when the information can be accessed from India. An agreement based on EU standard contractual clauses has been made with the service provider regarding the transfer. The standard contractual clauses can be viewed at http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32010D0087&from=en.
Some authorities also have a legal right of access, for example, the police, customs, border guard and tax authorities.
If you consider that we do not process your personal data in accordance with the EU General Data Protection Regulation, you can lodge a complaint with the supervisory authority. In Finland, this authority is the Data Protection Ombudsman.
For us to be able to respond to your feedback and make the operations of K-food stores and Kesko Group more customer oriented, we must process necessary personal data. Such data include name, contact details and customer feedback content.
We do not engage in automated decision-making, such as profiling, in the customer feedback register for Kesko’s grocery trade division.
We do not use data for purposes other than those stated in this notice. Should other purposes arise later, we will inform you of those purposes and of the grounds for processing. If necessary, we will request consent from you to process personal data for other purposes.
Personal data are collected in the manner described in Section 2. Data obtained from feedback surveys to customers are complemented with identifiers obtained from K-Plussa customer data, K-Ruoka application’s customer data, and K-Tunnus customer data, and with other data such as language and gender. The Data Protection Notice for the K-Plussa customer register can be found at: https://tietosuoja.kesko.fi/category/k_plussa
The terms of use for the K-Ruoka application can be found at: https://www.k-ruoka.fi/palvelun-kayttoehdot/k-ruoka-sovelluksen-kayttoehdot. The Data Protection Notice for the K-Tunnus service can found at: https://k-tunnus.fi/#/privacy
If your request concerns the processing of personal data or the exercise of your rights under the EU General Data Protection Regulation in the operations of Kesko or its subsidiaries, you can contact Kesko’s data protection officer at: tietosuojavastaava@kesko.fi