Purpose and Legal Basis for Processing Personal Data

Personal data is collected, processed, and used by Harena Studios for managing customer relationships, delivering services, maintaining services, providing personalized customer service and targeted customer communication, monitoring the use of services, marketing and targeting it to customers and potential customers, remote sales, and customer contacts, risk management and fraud prevention, and protecting the safety of properties, assets, and individuals. Additionally, the data may be used for statistical purposes and for developing Harena Studio's services.

The legal basis for processing registered personal data is the customer relationship, the customer's consent, the customer's assignment, or another relevant connection. For contractual relationships, the processing of personal data is also based on statutory obligations.

Categories of Processed Personal Data and Sources

The categories of personal data include contact information, social security number, vehicle information, information related to the customer relationship, customer event information, background and behavioral information, technical identification information, and consent given by the registered individual.

The regular sources of information for the register are the information collected from customers and potential customers themselves. Data is collected during transactions and throughout the customer relationship. The aforementioned data can be collected via Harena Studio’s website, forms (both electronic and non-electronic), phone calls, and text messages. Population registers and public sources can also be used to update personal data.

Phone calls and chat conversations may also be recorded and stored to confirm assignments or for documentation, quality control, and development purposes.

Retention of Personal Data

Astara retains personal data as long as necessary to fulfill the purposes defined in the privacy statement unless legislation requires longer retention or the company needs the data to establish, present, or defend a legal claim.

The retention period and criteria for retention vary by category of personal data depending on the purpose of use. According to legal requirements, Harena studios may use the personal data of registered individuals for marketing after the customer relationship has ended or if the registered individual has voluntarily provided their contact information through other means.

Personal data is processed for the duration of the customer and contractual relationship and for a necessary period after its termination.

When personal data is no longer needed as defined above, it is deleted or anonymized in such a way that the individual is no longer identifiable directly or indirectly.

Disclosure of Data

Personal data may be disclosed to third parties within the European Union, such as Harena Studios partners, companies providing services ordered by the customer, and authorities in accordance with data protection legislation. Data may be disclosed for the delivery of goods and services or the execution of the contract between Harena Studios and the customer, as well as for marketing and remote sales according to data protection legislation. Personal data will not be disclosed to third parties without the explicit consent of the individual concerned, except for the purposes mentioned above or unless required by legislation.

Statistical service usage data and customer data may be disclosed to third parties in a form that does not identify individual users of the service or their personal usage data, customer data, or personal data.

Transfer of Data Outside the EU/EEA

Data is not regularly transferred outside the EU/EEA.

If data is transferred outside the European Union or the European Economic Area, Astara ensures an adequate level of protection for personal data, for instance, by agreeing on matters related to the processing of personal data as required by data protection legislation, such as using the European Commission's standard contractual clauses.

Principles of Data Protection

The register is protected with appropriate technical safeguards against data breaches. Only individuals whose job description includes the use of the register have access to it.

Right of Access and Rectification

Registered individuals have rights related to their personal data held by Harena Studios:

- The right to request access to and review personal data

- Registered individuals have the right to receive confirmation of whether their personal data is being processed.

- The right to inspect and see their data and, upon request, receive the data in writing or electronically.

- The right to request the correction of incorrect or incomplete data

- If the data is incorrect or incomplete, registered individuals have the right to request its correction, unless restricted by legislation.

- The right to request the deletion of data

- Registered individuals have the right to request the deletion of their data in accordance with applicable data protection legislation.

- The right to restrict the processing of personal data

- Registered individuals have the right to request the restriction of personal data processing under the conditions defined by data protection legislation. Additionally, if incorrect personal data cannot be corrected or deleted, or if there is uncertainty regarding a deletion request, Harena Studios restricts access to the data.

- The right to object to the processing of data based on our legitimate interest

- Registered individuals have the right to object to certain types of data processing. They have the right to prohibit the disclosure and processing of their data for direct marketing purposes.

- The right to data portability

- Registered individuals have the right to request the transfer of their data to another data controller according to applicable data protection legislation. The data controller may require the requester to verify their identity if necessary.

- Exercising Rights

- Requests related to the rights of registered individuals are sent via email to info@harenastudios.com.

- Requests will be responded to within a reasonable time and, if possible, within one month of the request.

If a request cannot be granted, the registered individual will be notified of the refusal. Harena Studios may refuse a request (such as for data deletion) due to a statutory obligation or the company's legal right, such as a service-related obligation, dispute, or claim.

Consent for electronic direct marketing can be withdrawn, or a prohibition on direct marketing can be given by contacting info@harenastudios.com. Additionally, registered individuals can unsubscribe from Harenastudio's electronic direct marketing list at any time by clicking the unsubscribe link in the message.

Complaint to Supervisory Authority

Registered individuals have the right to lodge a complaint with the data protection authority if they believe their personal data has been processed in violation of applicable legislation.

Cookies

Cookies may occasionally be transferred to the visitor's computer. Cookies can collect information such as the website the visitor came from, which pages are browsed and when, which browser is used, screen resolution and operating system, and the computer's IP address, i.e., the address from which the information sent and received originates.

With cookie information, visitor numbers can be monitored by Harena Studios and its partners, and the data can be analyzed and developed to better serve visitors. Additionally, Harena Studio’s partners may use cookies to target advertising based on information about the visitor's visits to this and other sites. The information collected through cookies is used to produce targeted advertising based on the visitor's interests. In targeted advertising via cookies, the visitor is not identified, and the information is not combined with any personal data that may have been obtained in other contexts.

Visitors can prevent the use of cookies by changing their browser settings so that cookies are not allowed. Visitors accept that for some services, blocking the use of cookies may affect the functionality of the service.