Data Policy

From 15.10.2021
European Union General Data Protection Regulation (EU) 2016/679, Articles 12, 13, 14 and 19.


Koy Rewell Galleria, c/o Shopping Mall Rewell 203, 65100 Vaasa. Business ID: 0726791-2

Contact person for related matters

Phone number 050 369 4456

Name of the register

Short-term processing of the customer’s personal data.

(This type of registration includes various competitions and lotteries, where it is typical to destroy the information after a fixed processing time)

The purpose of the processing of data personal

Personal information is collected and stored temporarily for a lottery or competition. The information is used in connection with the lottery or competition, to contact the winner and hand over the possible prize.

By participating in the competition or lottery, the participants give the competition organizer the right to publish the winner’s name and place of residence without separate notice or compensation in the media chosen by the competition organizer.

Reason for the containment of personal data

Personal data is processed as follows:

  • Species. 6.1 a) Consent
  • Consent of the processing of personal data as part of a competition or lottery
  • Consent of publication of the winner’s name and place of residence in media selected by the organizer of the competition or lottery.

Controller’s legitimate interests

The processing of personal data is not based on the legitimate interest of the data controller.

Personal information

Competition form

  • email adress

In contact with the winner

  • name
  • phone number
  • adress
  • zip code
  • postal district

Processing of personal data groups

Name and contact details

Source and description of the data whether the data was collected from public sources

The personal information is collected for a lottery or competition by the participant himself via a lottery or competition form

We receive the information from the person himself either in writing or orally when contacting the winner

Recipient of personal data

We will not pass on the information in the register to any third party, except to the extent that the information is disclosed to the authorities within the limits permitted and required by applicable law, for example in response to requests for information from authorities.

Transfers of personal data to a third country or international organization and use of protective measures

We do not transfer personal data to third countries outside the European Union or the European Economic Area or to international organizations.

For Facebook and Google Analytics, the website’s statistics and analysis data will be transmitted outside the European Union or the European Economic Area.

Retention period of personal data or the retention period definition for criteria

Personal data in accordance with this report shall only be stored for as long as and to the extent necessary for the purposes of the data processing of the personal data controller.

Lottery or competition: All personal data collected will be destroyed no later than 1 month after delivery of the prize.

Rights of the data subject

The registered person has the following rights:

  • The right to access personal data
  • Right to correction of information
  • Right to delete data
  • Right to limited treatment
  • Right of objection (on direct marketing)
  • Right to revoke approval
  • Right to transfer data from one system to another (for automatic processing)
  • The right to receive information about the security breach of personal data

If the person wants to exercise their rights or get more information about how his or her personal data is processed, he or she can be in contact with the said contact person for this register.

The person also has the right to make a complaint to the supervisory authority if he or she considers that the personal data is being handled incorrectly in accordance with the data protection regulations.

Withdrawal of consent

The person has the right to revoke his or her consent to the processing of personal data if he or she so wishes. Withdrawal of consent does not affect the legality of the treatment performed before the revocation.

Withdrawal of consent is done by contacting the organizer of the competition or lottery.

Impact of failure to disclose personal information on the agreement

You will not be able to participate in the competition or the draw.

Relevant information for automated decision-making or profiling

The processing of personal data does not involve automated decision-making or profiling based on personal data.

The effects of the processing of personal data and a general description of the technical and organizational security measures

We carefully protect personal information throughout its life cycle by using appropriate data protection and security measures. The system providers of the competition or lottery register process personal data in secure server rooms. Access to personal information is limited and staff are bound by professional secrecy.

We protect personal data through, among other things, proactive risk management and security planning, telecommunications security measures and the use of secure equipment facilities, access control and security systems. Licensing and monitoring are controlled. We regularly train our staff who are involved in the processing of personal data and ensure that the staff of our partners also understand the confidential nature of the personal data and the importance of secure processing. We carefully select the subcontractors we use. We are constantly updating our internal policies and guidelines.

If, despite all our protection measures, personal data ends up in the wrong hands, it is possible that personal data will be misused. If we detect such an incident, we will immediately investigate and try to prevent damage. We will inform the necessary authorities and registrants about the security breach in accordance with the requirements of the law.


We use cookies on our website to ensure that our service is efficient and user-friendly. The cookies stored on the website can be used to generate statistics and to provide the best possible user experience at different terminals.

A cookie is a small text file that is stored on a user’s terminal and stored there. The information collected via cookies is anonymous and does not contain any personal information. The information can thus not be linked to individuals. Cookies do not damage the user’s terminal or the files stored on it.

It is possible for the user to disable the use of cookies in their browser settings. If the storage of cookies is not permitted in the terminal unit’s browser, we cannot guarantee that all services on our website will work correctly.

Cookies used by the website

  • _fbp
    • Facebook
    • Tracking
    • 3 months
  • _ga
    • Google Analytics
    • Statistics
    • 2 years
  • _gid
    • Google Analytics
    • Statistics
    • 1 dag
  • Moove_gdpr_popup
    • Site
    • Functional
    • Sessions
  • Pll_language
    • Site
    • Functional
    • For now
  • WordPress_logged_in_*
    • Site
    • Functional
    • For now
  • WordPress_sec_*
    • Site
    • Functional
    • 15 days
  • WordPress_test_cookie
    • Site
    • Functional
    • Session
  • Wp-Settings-*
    • Site
    • Functional
    • For now
  • Wp-Settings-Time-*
    • Site
    • Functional
    • 1 year