Pri­va­cy Pol­i­cy

Date: April 17, 2026
Tarkas­ta­mo Oulu - tarkastamo-oulu.fi

1. Data con­troller
   2 Fam Group Oy,
Y-tun­nus 3474927-1,
Saaris­tonkatu 1 C,
90100 Oulu.
   
2. Con­tact per­son for mat­ters relat­ed to the reg­istry
   Erik Fors­man,
toimisto@tarkastamo-oulu.fi
   
3. Name of the reg­istry and data sub­jects
   2 Fam Group Oy’s Cus­tomer and Mar­ket­ing Reg­istry
   
4. How do we use your per­son­al data?
   We use the data in the mar­ket­ing reg­istry for mar­ket­ing pur­pos­es, such as send­ing newslet­ters and lunch menus.
   We use the data in our Cus­tomer Reg­istry to pro­vide our ser­vices, man­age cus­tomer rela­tion­ships, han­dle com­plaints and cus­tomer feed­back, and for billing pur­pos­es.
   Your data is also col­lect­ed and processed to ful­fil legal oblig­a­tions, such as for account­ing pur­pos­es. We col­lect, store, and process per­son­al data only for pre­de­fined pur­pos­es.
   
5. What per­son­al data do we col­lect?
   Email
   Name
   Phone num­ber
   Address
   Billing infor­ma­tions
   
6. From which sources do we col­lect per­son­al data?
   We col­lect per­son­al data about you pri­mar­i­ly from you direct­ly when you con­tact us or lat­er when you use our ser­vices. You can sub­scribe to newslet­ters and view lunch menus through our web­sites. You can also make table reser­va­tions on the site. This infor­ma­tion is stored in our cus­tomer and mar­ket­ing data­bas­es.
   
7. On what basis do we process your data?
   We ensure that we always have a legal basis for pro­cess­ing your per­son­al data as required by law. We process the data in our mar­ket­ing reg­istry based on the con­sent you pro­vide. We ask for your con­sent when you sub­scribe to our newslet­ters or lunch menus. If we process your data sole­ly on the basis of your con­sent, you may with­draw your con­sent at any time.
   We process our cus­tomer reg­istry both to ful­fil a con­tract (e.g., pro­vid­ing our ser­vices, cus­tomer man­age­ment, han­dling com­plaints and cus­tomer feed­back) and based on our legit­i­mate inter­ests (e.g., direct mar­ket­ing to our cus­tomers and prod­uct devel­op­ment for our ser­vices).
   
8. Is your infor­ma­tion trans­ferred or dis­closed?
   As a gen­er­al rule, your per­son­al data is processed by our company’s employ­ees in the course of their work.
   In some cas­es, your data may be dis­closed on a con­fi­den­tial basis to our part­ners or sub­con­trac­tors, who process per­son­al data pur­suant to a writ­ten ser­vice agree­ment. These include, for exam­ple, data cen­tre and cloud ser­vices used for data stor­age, sup­pli­ers of the IT sys­tems we use, account­ing ser­vices, and exter­nal ser­vices pur­chased to sup­port sales and mar­ket­ing.
   Our sub­con­trac­tors and part­ners process per­son­al data as agreed, in accor­dance with our writ­ten instruc­tions, and only to fur­ther the agreed, law­ful pur­pos­es.
   
9. Is your data trans­ferred out­side the EU or the EEA?
   We do not trans­fer your per­son­al data out­side the EU or the EEA.
   
10. How long is your per­son­al data retained?
    We retain your per­son­al data only for as long as nec­es­sary to ful­fil the pur­pos­es described in this pri­va­cy pol­i­cy. In addi­tion, cer­tain data may be retained for a longer peri­od to the extent nec­es­sary to ful­fill legal oblig­a­tions, such as account­ing respon­si­bil­i­ties. Unnec­es­sary data is rou­tine­ly delet­ed..
    
11. How is your data secured?
    We respect the con­fi­den­tial­i­ty of your per­son­al data.
    Per­son­al data is pro­tect­ed from unau­tho­rised access by fire­walls, antivirus soft­ware, and per­son­al user­names and pass­words. Access to per­son­al data is restrict­ed to autho­rized per­son­nel whose job duties require the pro­cess­ing of such data. We dis­close per­son­al data only con­fi­den­tial­ly and on a lim­it­ed basis, in accor­dance with agree­ments, to our con­trac­tu­al part­ners, such as our sub­con­trac­tors. Our con­trac­tu­al part­ners must com­mit to imple­ment­ing ade­quate data secu­ri­ty mea­sures and to pro­cess­ing per­son­al data in full com­pli­ance with the law. Those who process per­son­al data are bound by a duty of con­fi­den­tial­i­ty.
    Our web­site uses a TLS-encrypt­ed HTTPS con­nec­tion, ensur­ing that all per­son­al data in elec­tron­ic form is pro­tect­ed. You can recog­nise this in your brows­er by the green pad­lock to the left of the address bar. If data is in man­u­al form, it is stored in locked facil­i­ties inac­ces­si­ble to out­siders and destroyed in a secure man­ner.
    
12. How do we use cook­ies?
    Cook­ies are small text files that are auto­mat­i­cal­ly stored on a visitor’s com­put­er or device when they vis­it var­i­ous web­sites. Our online ser­vice uses cook­ies so that we can pro­vide our ser­vices in the most user-friend­ly and high-qual­i­ty man­ner pos­si­ble.
    We may use cook­ies to devel­op our ser­vices and web­site, analyse web­site usage, and tar­get and opti­mise our mar­ket­ing. By track­ing web­site traf­fic, we improve our web­site to make it even bet­ter and pro­vide users with a bet­ter brows­ing expe­ri­ence.
    If you do not want our online ser­vice to col­lect infor­ma­tion through cook­ies, you can dis­able cook­ies (most browsers allow you to turn off cook­ies). You can pre­vent Google Ana­lyt­ics from col­lect­ing infor­ma­tion about you; learn more about this on Google’s web­site. Please note, how­ev­er, that in this case, the online ser­vice may not func­tion prop­er­ly.
    
13. What rights do you have?
    
    13.1 Right of access to data (right to inspect)
    You have the right to know what infor­ma­tion about you is stored in the per­son­al data file. You may request to inspect your data from us as described in this pri­va­cy notice.
    
    13.2 Right to request rec­ti­fi­ca­tion or era­sure of data (right to be for­got­ten)
    We will erase, rec­ti­fy, or sup­ple­ment data that is incor­rect, unnec­es­sary, incom­plete, or out­dat­ed for pro­cess­ing pur­pos­es, either on our own ini­tia­tive or at the request of the data sub­ject.
    
    13.3 Right to restrict pro­cess­ing
    The data sub­ject has the right to request that the active pro­cess­ing of their per­son­al data be restrict­ed, for exam­ple, when they dis­pute the accu­ra­cy of their per­son­al data and request that it be cor­rect­ed or delet­ed. In such cas­es, the per­son­al data in ques­tion may only be stored and not oth­er­wise processed. The restric­tion on pro­cess­ing is ensured through tech­ni­cal mea­sures.
    Before the restric­tion on pro­cess­ing is lift­ed, we will noti­fy the data sub­ject.
    
    13.4 Right to object to the pro­cess­ing of per­son­al data
    You have the right to object to the pro­cess­ing of your per­son­al data to the extent that there is no com­pelling legit­i­mate ground for the pro­cess­ing that would over­ride your rights, or the pro­cess­ing is not nec­es­sary for the estab­lish­ment, exer­cise, or defense of legal claims.
    
    13.5 Right to data porta­bil­i­ty
    To the extent that the data sub­ject has per­son­al­ly pro­vid­ed data to the cus­tomer reg­istry that is processed on the basis of the data subject’s con­sent or instruc­tion, the data sub­ject has the right to receive such data, gen­er­al­ly in a machine-read­able for­mat, and the right to trans­fer this data to anoth­er data con­troller.
    
    13.6 With­draw­al of con­sent
    If per­son­al data is processed based on the data subject’s con­sent, the data sub­ject has the right to with­draw their con­sent by noti­fy­ing us. You may with­draw your con­sent as described in the “Requests regard­ing rights” sec­tion of this pol­i­cy.
    
    13.7 7 Right to file a com­plaint with a super­vi­so­ry author­i­ty
    The data sub­ject has the right to file a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty if the data con­troller has not com­plied with applic­a­ble data pro­tec­tion reg­u­la­tions in its oper­a­tions.
    
14. Requests regard­ing rights
    Inquiries and requests regard­ing the reg­istry can be sub­mit­ted either in per­son on-site by pre­sent­ing a valid form of iden­ti­fi­ca­tion or by send­ing an email to toimisto@tarkastamo-oulu.fi. We may then con­tact you by phone, if nec­es­sary, to ver­i­fy your iden­ti­ty.
    We will send the request­ed infor­ma­tion to your email address as a pass­word-pro­tect­ed doc­u­ment, and the pass­word will be sent to your phone via text mes­sage.
    We will respond to requests with­in one (1) month of receiv­ing them, unless there are spe­cif­ic rea­sons to extend the response time. We may also refuse to ful­fil your request on grounds pro­vid­ed for by applic­a­ble law.
    Exer­cis­ing your rights is, in prin­ci­ple, free of charge.
    
15. Manda­to­ry pro­vi­sion of data
    If you do not con­sent to the pro­cess­ing of your per­son­al data with­in the scope of the pur­pos­es and rights out­lined in this Pri­va­cy Pol­i­cy, we will like­ly be unable to serve you or ful­ly ful­fil the pur­pose of our oper­a­tions. There­fore, if you do not want us to process your data in accor­dance with these prin­ci­ples, we ask that you not pro­vide us with any infor­ma­tion.