How We Process Your Personal Data
To ensure the proper functioning of our website and services and to maintain their quality, we collect certain information about visitors to our site. This Privacy Policy explains, among other things, what information we collect and why.
We respect your privacy and take data protection seriously. We ensure that your data is processed only by parties authorized to do so and solely for the purposes described in this policy.
As all our website services are intended for businesses, we do not knowingly collect personal data from children or individuals under the age of 16.
What Data We Collect
We primarily obtain information directly from the user through contact forms, newsletter subscriptions, or other services on our website, or otherwise directly from the customer. In addition, we may collect information from public sources, such as publicly available websites or business registers, and combine it with data provided by the user, such as a company name or phone number.
In addition to user-provided information, we collect website visitor data through Google Analytics.
Typically, the information provided by a visitor includes the company name, personal name, phone number, email address, or message. Data collected solely through Google Analytics does not allow us to directly identify users.
How We Use Your Data
We collect various types of information for multiple purposes, including maintaining customer relationships, communication, marketing, service development, and service delivery. We do not engage in automated decision-making or profiling based on personal data.
Visitor data collected via Google Analytics is used to analyze and improve our website and to deliver relevant marketing to visitors.
Legal Basis for Processing Your Data
Whenever we process your data as described above, we do so on one of the following legal bases under the EU General Data Protection Regulation (GDPR) (EU) 2016/679, Article 6(1):
a) You have given consent for the processing of your personal data for one or more specific purposes.
b) Processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.
c) Processing is necessary for compliance with a legal obligation to which the controller is subject.
f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party.
One or more of these bases may apply to you, for example, if you subscribe to our newsletter, consent to marketing, or are already our customer.
Who Processes Your Data
Your data is processed by our company personnel whose job responsibilities require such processing or where it is otherwise necessary for the performance of their duties. We also use third-party services, systems, and software where the processing of your personal data may be required, such as customer relationship management systems. We use trusted service providers whose experts may process data on our behalf when necessary. In such cases, your data is processed lawfully and safeguarded through contractual agreements between organizations.
How We Store Your Personal Data
Your data is stored on our service providers’ servers, which are protected in accordance with industry standards. All collected data is treated as confidential and is disclosed only to individuals who require it for their work.
Do We Transfer Data Outside the EU?
As a rule, your data is not transferred outside the EU or EEA. In the future, some of our services may operate outside these areas. In such cases, we will ensure lawful data processing through separate agreements if the transfer of personal data is necessary to maintain service functionality.
How Long We Retain Your Data
We do not retain your personal data longer than necessary for its intended purpose or as required by contract or law. Retention periods may vary depending on factors such as the purpose of use and legal obligations. We strive to keep your information accurate and up to date.
Your Rights
- Right of Access: You have the right to obtain a copy of your personal data in a commonly used, machine-readable format.
- Right to Rectification: You have the right to request that we correct or complete inaccurate or incomplete personal data without undue delay.
- Right to Erasure (“Right to Be Forgotten”): You may request the deletion of your personal data without undue delay. Please note that this right applies only if we have no legal obligation to continue processing your data.
- Right to Restrict Processing: For example, you may prohibit marketing.
- Right to Withdraw Consent: You may withdraw your previous consent to marketing.
- Right to Data Portability: You may request the personal data you have provided to us in a structured, commonly used, and machine-readable format and transfer it to another controller.
- Right to Object: You may object to the use of your data for purposes such as marketing or processing based on our legitimate interests.
- Right to Be Informed of a Data Breach: If, despite strong and modern security measures, a data breach occurs that is likely to result in a high risk to individuals’ rights and freedoms, we will notify you without undue delay.
- Right to Lodge a Complaint: If you believe your data has been processed unlawfully, you may file a complaint with the supervisory authority.
For any data protection inquiries, please contact:
Manager IT (Inno Kukko Oy, VAT FI24044630)
Korvenrannantie 15 T, 04320 Tuusula
Phone: +358 9 75 101 555
Email: