Register and Privacy Statement
This is a register and privacy statement by Alluplast in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU's General Data Protection Regulation (GDPR).
Last updated: 21.4.2026
1. Data Controller
Oy All-Plast Ab
Muovilaaksontie 6
82110 Heinävaara
info@all-plast.fi
Business ID: 1043552-6
2. Contact person for matters concerning the register
Kati Jumppanen
kati.jumppanen@all-plast.fi
3. Register name
Customer, marketing and stakeholder register
4. Legal basis and purpose of personal data processing
Legal grounds for processing personal data:
- Agreement or preparation of an agreement
- The controller's legitimate interest
- Consent (e.g. for marketing)
Purposes for Processing Personal Data:
- Customer relationship management and maintenance
- Responding to enquiries
- Delivery of services
- Invoicing and fulfilment of contractual obligations
- Marketing and communications
- Business Development and Analytics
5. Register data content
The registry may contain the following information:
- Name
- Company and Y-identification number
- Contact details (phone, email, address)
- Customer relationship information
- Quote and order details
- Billing information
- Information collected from website usage (e.g., analytics, cookies)
Information is only retained for as long as it is necessary for the purpose of use or as required by law.
6. Regular sources of information
Information is being collected:
- From the customer themselves (forms, email, phone)
- Via the website (contact forms, analytics)
- About contracts and customer meetings
- From public sources (e.g. company information)
7. Disclosure and Transfer of Information
Information is not routinely disclosed to third parties without justification.
Information can be processed via the following services:
- Website analytics (e.g. Google Analytics)
- Advertising (e.g. Google Ads, Meta)
- Email and communication services
Information may be transferred outside the EU or EEA if the services used require it. In such cases, appropriate data protection measures will be ensured (e.g. EU Model Contractual Clauses).
8. Principles of protection of the register
Personal data shall be processed confidentially and protected appropriately.
- Access to information is restricted to essential personnel only
- The systems are protected by technical and organisational measures
- Information is stored in secure systems
9. Registered person's rights
The registrant has the right to:
- Check own information
- Seek correction of information
- Request for data deletion
- Restrict processing
- Resist processing
- Transferring data from one system to another
Requests must be submitted in writing to the data controller.
We generally respond to requests within 30 days.
10. Cookies
The website uses cookies:
- To improve the user experience
- For ensuring website functionality
- For traffic analysis
Users can manage their cookie settings through their browser or via the cookie banner displayed on the website.
11. Changes to the privacy notice
We reserve the right to update this privacy policy as needed.
The up-to-date version is always available on our website.