Name of Processing Activity
Digital deposit system processes in application or dynamic net site.
Identity and Contact Details
Kamu Collective Oy
If you wish to contact us regarding issues related to this privacy notice (including the exercise of your rights), please e-mail us at the above address or fill in the contact form available at
We aim to respond to you in a timely manner and will do so in any event within any applicable legal time limits.
The Purposes of Processing
The gathered information is used to enable the deposit service provider’s backend system to identify the partners and locations where the deposit transaction takes place.
The system utilizes personalized identificators that can be eg. persons or entity’s e-mail address and GPS location data, which enables for the successful processing of the transactions.
Legal Basis for Processing [and the Legitimate Interest pursued]
The personal data is gathered when a person registers his/her Kamupak-application with a functioning e-mail adress and thus allows the registering data to be used for the running of the deposit scheme. The e-mail functions as identificator and it is necessary for the running of the scheme as well as for validating the transactions that are the basis for Kamu Collective Oy’s businesses.
A Person is also requested to allow the use of GPS data when using the application to enable for the claim of the deposit successfully when returning a product.
The data can be used to improve the customer service and the product.
Categories of Personal Data Processed
Purchase and returns history
Recipients or Categories of Recipients of the Personal Data
No personal data is shared outside of the organization. Data can be shared in anonymized format without links to users for analytics purposes.
The personal data is not Transferred outside the EU/EEA
Data Retention Period
The data can be stored in the system logs for as long as it is necessary for balance of payments, inventory management or life cycle tracking of the products.
Right of Access, Rectification and Erasure/Restriction, Objection and Data Portability
Under the General Data Protection Regulation (2016/679, “GDPR”), you have the:
Right to know if your personal data is processed, and if it is, have access to your personal data, as well as be provided with the information included in this privacy notice, and to receive a copy of your personal data, provided that this does not adversely affect the rights and freedoms of others. Only the first copy is free of charge (Ref. GDPR Article 15); Right to have your inaccurate personal data rectified and incomplete personal data completed (Ref. GDPR Article 16)
Right to have your personal data erased without undue delay, if (a) the data is no longer necessary for the stated purposes; (b) you withdraw your consent, where processing was justified only by consent; (c) you object to the processing pursuant to Article 21(1) of the GDPR and there is no overriding legitimate interest, or Article 21(2) of the GDPR; (d) your personal data has been unlawfully processed; (e) erasure is necessary for compliance with applicable laws; or (f) your personal data was collected in relation to the offer of information society services (Ref. GDPR Article 17).
Right to obtain restriction of processing of your personal data, if (a) you contest the accuracy of your personal data (for a period enabling us to verify the accuracy of the personal data); (b) the processing is unlawful and you request restriction instead of erasure; (c) we no longer need your personal