If you do not accept these terms, it is likely that we cannot provide this service to you.
We collect, store and process your personal data only for predefined purposes. The main purposes for processing personal data are:
We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, place an order, and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, phone number. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities.
We also collect data about our website visitors with Google Analytics, so that we could analyze our website use, develop it further and for targeting relevant marketing content for our customers and website visitors. We also use Microsoft Application Insight to monitor the performance of our Site. Both services collect only general and non-personalized user data.
We make sure that we always have a legal basis to process your personal data. We may process your data on a several different basis. Firstly, we may process your data to fulfil and execute a contract and to meet legal obligations. Secondly, we may process your data also to further our legitimate interests, which are the offering of our services and operating and developing our business. Some personal data we may process based you your consent.
Primarily your personal data is processed by people within our own organization. We may also outsource some parts of the processing to third parties, such as the data systems used to store and process personal data. In these situations, we make sure with contracts and otherwise that the confidentiality of your personal data is secured, and data is otherwise processed lawfully. We may also disclose information to fulfil our other contractual or legal obligations or when a legal authority requires a disclosure. We may also disclose your personal data if we are a party of a business sale, such as a merger or an acquisition.
By default, your data is not transferred outside the EU. Possible transfers would concern only such situations, where some of the servers where our data is stored would be located outside of the EU. If this would happen, we would make sure that your data is transferred and processed in a legal manner with adequate safeguards.
We will not store your personal data for longer period than is necessary for its purpose or required by contract or law. The storage times for personal data may vary based on its purpose and the situation. Personal data from the deleted users of the Site will be removed periodically using a batch run. We also intend to keep your data up to date.
Your data is stored on the servers provided by our service providers, which are secured according to general industry standards and practices. We consider and keep your personal data confidential and do not disclose them to anyone else than those who need it for their work or confidentially to our customers based on contracts we have made with them. Access to your personal data has been protected with user-specific logins, passwords and user rights.
If you don’t provide us some of your personal data or allow processing of it, it is very likely that we cannot serve you and fulfill the purpose of our business. If you don’t want us to process your data, we ask you to not provide us any personal data.
If we process personal data based on your consent, you can at any time withdraw your consent in the Site’s User Settings or by notifying us, for instance by sending email to email@example.com.
You have the right to have confirmed if we are processing your personal data and also to know what data we have about you. In addition, you have right to some supplemental information described in the law about the processing activities.
You have the right to request that we correct any inaccurate or outdated personal data we have about you.
You have the right to request that your personal data is not processed for direct marketing purposes in the Site’s User Settings or by sending us email to firstname.lastname@example.org.
If we process your personal data based on public interest or our legitimate interest, you have the right to object processing of your data, to the extent that there is no such significant other reason that would override your rights, or the processing is not necessary for handling legal claims. Please notice that in this situation we may not be able to serve you anymore.
In certain situations, you have the right to require that we restrict processing of your personal data.
If we process your personal data based on your consent or fulfilling of a contract, you have the right to require transfer of the data you have provided to us to another services provider in a commonly used electronic format.
You can execute and use your rights by contacting us, for instance by sending email to email@example.com. In such case, we ask you to provide us your name, contact details, phone number as well as a copy of valid personal ID, such as a driver’s license or passport, so we can verify your identity. If you consider that the processing of your personal data is not lawful, you can always also make a notification to a supervisory authority.
This document was last updated on May 17, 2018
AFRY Finland Oy / Privacy Linnoitustie 5, 02600 Espoo Puh. 0207 698 698 firstname.lastname@example.org