To the Front page

Data privacy notice

This is the data privacy notice of the user registry of the website www.mapekouluruoka.fi. It complies with the EU General Data Protection Regulation (EU) 2016/679 and the national Data Protection Act (2018/1050).
Date of issue 28.7.2023. Updated 19.12.2024.

1. General Information
The Mape school meal app is a digital application and service provided by Foody Allen (the “Data Controller”). The customers of the Service are food service companies providing school catering services (the “Customer”). The users of the App are individuals (the “User”).

The User registers on the website www.mapekouluruoka.fi with an email address, which is also the user ID of the service. On the website, the User (usually the child’s guardian) can purchase a credit balance for snack purchases using the Mape application (“snack card”).

The payment service provider for the purchase of snack card balances is Paytrail Plc, Innova 2, Lutakonaukio 7, 40100 Jyväskylä, Finland. During the payment transaction, information is collected by Paytrail to provide the payment service, as well as information related to ensuring data security. Paytrail’s privacy policy can be found at https://www.paytrail.com/en/data-privacy-notice-paytrail-payment-service

2. Data controller
Foody Allen Oy
Itäinen Pitkäkatu 21 A, 20700 Turku, Finland
www.foodyallen.fi
Contact person for matters concerning the register: Vivi Wihanto, e-mail: vivi@foodyallen.fi

3. Name of the register
Mapekouluruoka.fi website user register.

4. Purpose and legal basis for processing personal data
Personal data are processed in the following cases:

The User registers with his/her e-mail address on the website, where the User’s e-mail address serves as the service username for logging in to the service.

The data of the user ID is used to store information about the credit purchase transactions (amount and date of transaction) made on the user account from the mapekouluruoka.fi website to the Mape application that is linked to the user account.

The User’s e-mail address may be used, if necessary, for providing customer service between the registered User and Foody Allen Oy. Data on financial transactions are processed for the purpose of resolving transactions in a customer service situation.

The legal basis for the processing of personal data is the consent of the data subject to the processing of his/her personal data for these purposes or the legitimate interest of the controller in providing the service.

Personal data are not used for automated decision-making or profiling.

5. Legitimate interests of the controller or third parties
The controller has a legitimate interest in processing the personal data contained in the register for the purposes of the activities required by the feedback process.

The controller also has a legitimate interest in transmitting personal data to third parties where the personal data are necessary for the purposes of the third party’s own feedback processes. These third parties are the Customers of the Mape application, i.e. the providers of school meals.

6. Data content of the register
Only the necessary personal data provided by the person himself/herself are stored:

The user’s email address serves as the user ID for the service. The user ID information contains information on the financial transactions (amount and time of transaction) , for the snack credit purchase transactions made in mapekouluruoka.fi.

7. Regular data sources
The data source for the data stored in the register is the registration of the User on the website, i.e. the data subject himself.

8. Recipients of personal data
Personal data is received and processed by Foody Allen Ltd and its employees who need the personal data to provide the service.

The recipients of personal data may also be the Customer’s (third party) staff, in cases where the communication between the User and the Customer is necessary to provide the service.

9. Regular disclosures of data
Personal data are not regularly disclosed to parties other than the Customers mentioned in
paragraphs 5 and 8 for the purpose of providing the Customer Service.

10. Information on data transfers to third countries
Data will not be transferred outside the EU/EEA.

11. Retention period of personal data
Personal data will be stored for as long as the user ID (e-mail address) is valid or until the User leaves the Service or makes a request to the Controller to terminate the user account.

12. Principles of data protection
Register data will be kept confidential. The data network of the Controller and the hardware on which the registers are located are protected by the necessary technical measures to ensure data security. Only persons employed by the company have access to the data.

13. Rights of the data subject
The data subject has the right to check the data recorded in the register and to request that any inaccurate or incomplete data be corrected or completed.

The data subject has the right to request the erasure of personal data concerning him/her from the register (“right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of processing of personal data in certain circumstances.

Requests should be sent in writing to the contact person of the register mentioned above or to Foody Allen Oy, Itäinen Pitkäkatu 21 A, 20700 Turku. Requests for inspection may also be made in person at the above address.