Privacy Policy

Bear Crew Privacy Policy

15.09.2025

Data Controller
Reach It Oy
Humppilantie 238, 32140 Ypäjä, Finland
Business ID:FI34021539

Person in charge of register matters and/or contact person
Katja Hannula
Humppilantie 238, 32140 Ypäjä, Finland
Tel. +358 40 5678 312
katja.hannula@bearcrew.fi

Name of the Register
Bear Crew Customer Register

Purpose of processing personal data
Personal data is collected, processed, and used with the customer’s consent for
managing and maintaining the customer relationship with Bear Crew Oy. The data in the
register is primarily used for sending newsletters, oZers, and benefits to the customer,
as well as for service development purposes.

Data content of the register
Personal data is collected and processed by Bear Crew Oy from customers who join the
Bear Crew customer register. The data source for the register is the information
collected from the customer themselves upon joining.
The data to be registered includes: first and last names, street address, postal code,
city/postal town, mobile phone number, email address, and direct marketing
permissions and prohibitions.

Regular sources of data
The source of data for the register is the information collected from the customer
themselves upon joining the Bear Crew customer register.

Transfer of data to third parties
Reach It Oy discloses data to third parties, for example, in payment transactions and
deliveries. Payment transactions are transmitted to the Finnish payment intermediary
Paytrail. Address and contact information are transmitted to the shipping service p
rovider, e.g., Posti Group Oyj, Oy Matkahuolto Ab and FedEx Express Finland Oy.
All data transfer with third parties occurs via an encrypted connection.

Transfer of data outside the EU or the European Economic Area
As a general rule, Reach It Oy does not transfer or process data outside the European
Union or the European Economic Area. If data is exceptionally transferred outside the
EU/EEA area, an adequate level of personal data protection is ensured in accordance
with applicable legislation.

Principles of register protection
The register data is stored on an appropriately secured server and is only accessible to
Reach It Oy.

Right of the data subject to object
The data subject has the right to prohibit the data controller from processing their
personal data for direct marketing purposes. The prohibition must be made in writing
and addressed to the person responsible for register matters.

Right of access of the data subject
The data subject has the right to inspect what information concerning them is stored in
the personal data register. The inspection request must be sent in writing and signed to
the person responsible for register matters (contact details mentioned in section 2).

Data retention and rectification
We retain data for the necessary period to be able to operate in accordance with this
policy. Personal data from inactive customer accounts will be deleted no later than five
years after the last activity. If legislation, in accordance with the Accounting Act,
requires a longer retention period, we will act accordingly.
The data controller will, on its own initiative or at the request of the data subject, rectify,
erase, or supplement personal data in the register that is incorrect, unnecessary,
incomplete, or outdated for the purpose of processing. To have the data corrected, the
data subject must contact the person responsible for register matters at the data
controller.