PRIVACY POLICY

Päivitetty 19.2.2018

Introduction

The careful and prudent handling of your personal data is important to us at Oy Lining Ab. We process your personal data in accordance with data protection legislation and good data management and processing practices.

The data we process can be divided into: data provided by the user, data observed through the use of online services and data derived through analytics.

We use the data to deliver and personalise services, provide customer service and display more relevant advertising.

Please note that our websites may contain links to other companies’ websites or services that have their own privacy policies separate from Oy Lining Ab. In such situations, we recommend that you consult the privacy policies of the third parties concerned.

Our privacy policy may change slightly as we develop our services or as legislation changes.
For up-to-date information on our policy, please visit this website.

Further information:

We always process personal data in accordance with the basic principles set out in the General Data Protection Regulation (GDPR):

• personal data must be processed lawfully, fairly and in a transparent manner for the data subject (“lawfulness, fairness and transparency”)
• personal data must be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes (“purpose limitation”)
• personal data must be appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”)
• personal data must be accurate and, where necessary, kept up to date; all reasonable steps must be taken to ensure that personal data which are inaccurate or incorrect with regard to the purposes of the processing, are erased or rectified without delay (“accuracy”)
• personal data must be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed (“limited retention”)
• personal data must be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).

For what purposes do we collect your personal data?

Your personal data may be used to provide products and services, respond to your requests and questions, implement contracts, process orders and other similar activities. Your data is also used for Oy Lining Ab’s risk management and to fulfil our obligations under the law and government regulations and guidelines, such as user identification and security, prevention and investigation of misuse.

We also use your personal data for customer communications. For example, we may send you newsletters and change notices about our products and services. We may use your personal data for marketing and market research for products and services, with your permission or where otherwise permitted. In addition, we may also use your personal data to target our products and services to you, for example by recommending or displaying targeted content in our service.

With your permission and to the extent permitted by law, we may also combine data collected in connection with a particular product and/or service with data collected in connection with our other products and/or services.

What data do we collect?

Our register contains personal data of persons who have a customer relationship with Oy Lining Ab.

Among other things, we collect the following personal data about you:
Data provided by the user or personally identifiable data:
• contact details such as name, address, phone number, email address
• registration information required for the digital account, such as username, pseudonym, password and any other unique identifier
• demographic information, title or occupation and mother tongue
• customer relationship data such as invoicing and payment information, product and order information, customer feedback and contacts, prize draw and competition response information, and cancellation information
• profiling and interest information provided by the user
• authorisations and consents
• information provided in response to surveys and inquiries
• other data collected with the user’s consent

Data observed on the use of services:

• usage and browsing data of the service features, the ads that have been displayed and the clicks on the ads.
• the page from which the user has accessed our website, the device model, the unique device and/or cookie identifier, the data collection channel (internet browser, mobile browser, app), browser version, IP address, internet service provider, session ID, time and duration of the session, screen resolution and operating system.
• an observed user who is not logged in is typically identified by a cookie or similar identifier.
• location data such as coordinates calculated by GPS or WLAN access points or mobile phone base stations, if the user has given his or her explicit consent.
• we track what files users download from our websites. The information is used to find out what information is most relevant to users of our website.
• on certain pages, we use separate analytics software to analyse the structure of our website. We can check whether people are having problems navigating the website. This allows us to improve the structure and provide a better experience for visitors
• other data collected with the user’s consent.

How do we collect your personal data?

We collect your personal data primarily directly from you, either orally or in writing. This may be data collected by us or by our partners on our behalf.

Forms submitted via the website contain personal data: at least first name, surname and email address. By submitting this form, you agree that the website owner may store the personal data you provide in its own system in order to provide the service you have requested.

The data may also be collected by the services we use. We also receive data from registers held by public authorities, credit and customer default registers and other reliable registers.

We may use cookies (small text files stored on your device) on our websites to make our services work as well as possible.

The use of cookies:

The information stored is in the form of a cookie, or similar file. This enables us to serve you better. Cookies are small text files that are transferred from a website to your hard drive or browser, which in turn can store the cookie on your hard drive.

According to the Act on the Protection of Privacy in Electronic Communications, the storage of cookies or other data describing the use of the service on the user’s terminal equipment and the use of this data are permitted for the service provider if the user has given his or her consent and the service provider provides the user with comprehensible and comprehensive information about the purpose of the storage or use.

Oy Lining Ab may use cookies to identify returning visitors and to determine the order in which pages are used. The aim is to measure how effectively Oy Lining Ab’s websites are presented on the Internet. The data collected by cookies is combined and compiled anonymously.
Cookies tell us the time and duration of your visit to the site, which pages you visited and from which site you arrived at our site. They also tell your internet service provider. This data allows us to measure the traffic on the website and to adapt the website to your preferences. The aim is to make the site faster and more useful. Because this data tells us how and when our site is used, we can continually improve the site. Cookies are only used to view the data on your hard drive that is stored by the website. We do not use cookies to collect personal data such as names or email addresses.

We use session and persistent cookies. Session cookies only exist for the duration of a session, i.e. one session, and are automatically deleted when the browser is closed. Persistent cookies are there for a limited time and will remain on your computer after the session ends, unless you delete them before that.

Cookies will not harm your device or your files.

You can control the use of cookies, for example in the browser management functions. For more information on cookies, please refer to the privacy or instruction documentation for each browser.

The use of cookies may change due to the continuous evolution of online technologies. The following list aims to provide information about our use of cookies:

Google

We use Google remarketing cookies. This allows us to show targeted banner ads to visitors to a website when they browse other websites. Remarketing cookies allow us to control the settings so that the visitor does not see too many of our ads.

YouTube

We have embedded YouTube videos on certain pages of our website. YouTube (owned by Google) sets certain cookies when a visitor clicks the YouTube button on a video player.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). To enable Google Analytics to analyse your use of the website, it places cookies (text files) on your computer. The data added to the cookie (such as your IP address) is transmitted to Google and stored on Google’s servers in the United States when you use the website. Google will use this data to evaluate your use of the website, compile reports on website activity for website operators and provide other services relating to website activity and internet usage.

Google may also transfer your information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Google does not associate your IP address with any other data. You may refuse the use of cookies by selecting the appropriate settings on your browser, in which case the functionality of the website may be impaired. By using this website, you consent to the processing of your personal data by Google in the manner and for the purposes set out above.

How do we process your personal data?

We process your personal data in a way that respects your rights and freedoms, in accordance with the GDPR. We ensure that data protection principles are respected at all stages of the processing of personal data.

Your data will only be processed by those employees of Oy Lining Ab or its partners who are authorised to process personal data. We have ensured the data security awareness and skills of our staff through continuous training and up-to-date guidelines.

Your personal data may be processed in several different data systems, which are managed either by Oy Lining Ab or its partners.

Further information:

We have agreements in place with our partners that comply with the GDPR. In line with these, we have obtained adequate assurances from processors that their processing of personal data complies with the requirements of the GDPR.

We have put in place appropriate technical and organisational measures to implement the data protection principles for the processing of personal data. Technical and organisational measures refer to safeguards such as staff training, staff instructions and regulations, confidentiality commitments, premises controls, access control through self-monitoring, security of data systems, data encryption, data anonymisation, data pseudonymisation, audits, remote access, technical restrictions, audit and control systems, information resolution process, codes of conduct and the introduction of certificates.

With whom do we share your personal data?

Oy Lining Ab purchases certain personal data processing services from partners. We have only chosen to partner with data processors that comply with good personal data processing practices through appropriate technical and organisational measures, meet the requirements of the GDPR and are able to ensure that your rights are respected.

All partners have a written contract with us, which defines the subject matter, purpose and duration of the processing of personal data, as well as the personal data to be processed.
As a general rule, we process data within the EU and the EEA.

How long do we keep your personal data?

We keep your data for at least the duration or your customer relationship with us. After the end of the customer relationship, the retention period depends on the data and its purpose. Our guiding principle is a 2-year retention period.

We strive to keep the personal data we hold accurate and up-to-date by deleting unnecessary information and updating outdated information.

Your rights as a customer

You have the right to inspect the data concerning you, the right to request the rectification of inaccurate or incomplete data and the erasure of data that is unnecessary for the purpose of the processing or outdated.

You also have the right to object to the use of your data for direct marketing, market research and opinion polls either by contacting the controller or by unsubscribing from the mailing list using the “Unsubscribe” link.

You have the right to be notified of a personal data breach

We have an obligation to personally notify the data subjects whose data is affected by a personal data breach. The right takes effect if the breach is likely to pose a high risk to the rights and freedoms of the individual, for example in the form of identity theft, payment fraud or other criminal activity.

Whom can you contact?

Please address your enquiries and requests concerning the processing of personal data to Managing Director, Pasi Mönkäre (pasi.monkare@lining.fi)