Privacy Notice (GDPR, EU 2016/679)
Fresh Servant Group – Customer Feedback and Consumer Affairs Register
Updated: 4.3.2026
1. Data Controller
Fresh Servant Group Oy Ab (3244838-7)
Fresh Service Grossist Oy Ab (2660701-1)
Marjasaarentie 12, 68870 Edsevö
Email: info@fresh.fi
2. Data Protection Officer
Quality Manager Anssi Vuorinen
Marjasaarentie 12, 68870 Edsevö
Email: anssi.vuorinen@fresh.fi
3. Purpose and Legal Basis for Processing Personal Data
Purpose of processing:
- receipt and processing of customer and consumer feedback
- handling of product complaints
- settlement of compensation and damages situations
- improvement of product and service quality
- customer communication related to feedback cases
Legal Basis for Processing (GDPR Article 6):
Personal data processing is based on the following legal bases under the GDPR:
- Legitimate interest
- Performance of contract or related measures
- Legal obligation (product liability)
4. Data Register Contents
The register may process the following information:
- name
- contact information
- feedback or complaint content
- possible attachments (photos, receipts)
- context of communication and message logs
5. Data Retention Period
Maximum 2 years from the completion of feedback processing, unless legislation requires longer retention (e.g., product liability).
6. Sources of Personal Data
Data is obtained directly from the data subject through various contact channels, such as:
- email
- web form
- telephone
- mail
7. Recipients and Transfers of Personal Data
Data may be disclosed to Fresh Servant Group companies and business partners where processing requires it.
Data is not transferred outside the EU or EEA.
8. Protection of Personal Data
Personal data is protected through technical and organizational measures:
- access to the register is restricted to authorized employees based on their duties
- access requires username and password
- data is stored in secure systems
- physical documents are stored in locked facilities
9. Children's Personal Data
The data controller does not knowingly collect data from minors under 15 years old. Data deletion requests can be submitted to the data protection officer.
10. Rights of the Data Subject
The data subject has the right under GDPR to:
- access their own personal data
- correct inaccurate data
- request deletion of data
- restrict processing
- object to processing based on legitimate interests
- data portability
- lodge a complaint with the supervisory authority
Data access requests should be submitted in writing and signed:
Fresh Servant Group / Personal Data Access Request
Marjasaarentie 12
68870 Edsevö