LEGAL BASIS FOR PROCESSING
The legal basis for the processing of your Personal Data is, where not stated otherwise or another legal basis is otherwise applicable, the performance of the contract for providing Our’ Services to you, as permitted by GDPR article 6(1)(b).
O.V. Lahtinen can also process your Personal Data where We have a legitimate interest to do so, as permitted by GDPR article 6(1)(f), such as for marketing purposes. Where We rely on legitimate interests as a reason and legal basis for processing personal data, We have considered whether or not those interests are overridden by the rights and freedoms of the data subjects and We Have concluded that they are not.
Where the processing is such that your consent is required by the applicable legislation, We will state so and obtain your consent, and this will be the legal basis for the processing of your Personal Data, as permitted by GDPR article 6(1)(a). However, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If such withdrawal means that We are no longer able to provide the Services to you, We may cease to provide the Services.
TYPES OF PERSONAL DATA AND SOURCES
While the provisioning of certain Personal Data is necessary for the use of Our services, certain Personal Data is provided voluntarily. Personal Data may be updated and supplemented by collecting data from private and public sources, such as commercially available directories and websites.
Personal Data and non-personal data are collected directly from you, such as through registration or by logging the activities in the Services.
This data may include:
|Category of personal data||Examples of information content|
|User information: Information gathered at registration*||Name, email, contact details.|
|Other information related to the users*|
|Technical behavioural data and identification data||Monitoring the data subject’s web behaviour and use of Services, for example by means of cookies or similar technical identification data. Examples of data that can be collected include unique device identifiers, IP addresses, device software version numbers and identifiers, and rough location information via GPS, IP address or mobile networks.|
|Rights management of the data subject, such as consents and prohibitions||Marketing prohibitions and consents. Communication and measures relating to the rights of the data subject (see the rights of the data subject below).|
|Other voluntarily supplied (additional) information|
*sections thus marked are necessary to provide the Services and fulfill legal obligations. Furthermore, the blocking or the non-provisioning of certain personal data may affect the proper functioning of the Services or O.V. Lahtinen may not be able to provide the Services if said data is not provided.
If you do not provide O.V. Lahtinen the required information, this may mean that We are not able to provide the Services to you, perform the contract necessary for the provisioning of the Services or to comply with O.V. Lahtinen’ legal obligations.
In addition to Personal Data, O.V. Lahtinen will collect non-personal data relating to you. This information includes either anonymous or anonymized data or data linked to Personal data that is generated during the use of the Services, such as actions in the Services and access times.
|Information you give to us|
|Technically gathered data|
HOW PERSONAL DATA IS USED
Your Personal Data may be used in order to:
- Provide the Services as requested by you;
- Improve and personalize the Services, as well as to develop new products and services;
- Correspond with you regarding customer service issues;
- For marketing and communication purposes;
- To enforce the terms of the Services;
- Ensure the functioning and maintenance of the Services;
- To comply with legal obligations applicable to O.V. Lahtinen
O.V. Lahtinen will use your Personal Data for targeted in-service marketing and other similar purposes, and upon your consent, to email marketing by O.V. Lahtinen. You can opt-out of receiving promotional emails by following the instructions in those emails. If you opt-out, O.V. Lahtinen can still send you non-promotional customer information, such as emails about your account, providing the Services or regarding Our ongoing business relationship.
THIRD PARTY ANALYTICS TOOLS AND DISCLOSING INFORMATION
In order to analyse and improve the Services, O.V. Lahtinen uses third party service providers and tools provided by the third-party service providers to collect and use non-personal data. Data Subjects can decline the collection and storage of such data from their devices’ settings.
O.V. Lahtinen will not disclose your stored Personal Data to third parties for direct marketing, market research, polls or public registers without your consent or except as part of a specific program or feature for which you will have the ability to opt-in or opt-out. O.V. Lahtinen has the right to share non-personal data (such as anonymous usage data, platform types, asset views, number of clicks, etc.) with interested third-parties to assist them in understanding the usage patterns for certain content, services, advertisements, promotions, and/or functionality of the Services.
Personal Data may also be transferred regularly outside the European Union and the European Economic Area (“EU/EEA”) to O.V. Lahtinen’ service providers. In case Personal Data is transferred outside EU/EEA, such transfers are either made to a country that is deemed to provide a sufficient level of privacy protection by the European Commission or transfers are carried out by using appropriate safeguards such as standard data protection clauses adopted or otherwise approved by the EU Commission or competent data protection authority in accordance with the GDPR. More information can be provided upon request.
O.V. Lahtinen takes reasonable measures to protect Personal Data as the data is transferred from your devices to O.V. Lahtinen and to protect the data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, you should always keep in mind that no Internet transmission is 100% secure or free from errors. For the avoidance of doubt, the safeguarding of all account registration information and credentials are your responsibility.
The register will be maintained on external service providers’ servers with appropriate safeguards. The register is protected by appropriate industry standard, technical and organizational safety measures. Although O.V. Lahtinen makes good faith efforts to store the data collected from the Services in a secure operating environment that is not available to the public, O.V. Lahtinen cannot guarantee the absolute security of that information during its transmission or its storage on Our systems. O.V. Lahtinen will post a notice in the Services in case material security breach that endangers your privacy or Personal Data, and if necessary, will contact affected Data Subjects directly. O.V. Lahtinen may also temporarily shut down the Services to protect the Personal Data.
COOKIES AND OTHER TRACKING TECHNOLOGIES
If O.V. Lahtinen will use other tracking technologies in addition to cookies, O.V. Lahtinen shall notify you of use of such tracking technologies.
You can set or amend your web browser controls to accept or reject cookies. If you choose to reject cookies, you may still use our websites and some services, however your access to some functionality and areas of our website or services may be restricted substantially.
RIGHTS OF DATA SUBJECTS AND CONTACT INFORMATION
Right to access
You may contact Us, and We will inform you what Personal Data We have stored regarding you, and the purposes such data is used for.
Right to rectification
You have the right to have Us correct any incorrect, incomplete, outdated, or unnecessary Personal Data stored about you by contacting Us at the email address provided bellow.
Right to erasure
You may also ask Us to delete your Personal Data from Our systems. We will comply with such request unless We have a legitimate ground to not delete the data. After the data has been deleted, We may not immediately be able to delete all residual copies from all of Our systems. Such copies shall be deleted as soon as reasonably possible.
Right to Object or Restrict Processing
You may object to certain use of Personal Data when such processing is based on legitimate interest, including direct marketing or profiling. You may opt-out of receiving promotional emails by following the instructions in those emails. If You opt-out, We may still send you non-promotional customer information, such as emails about Your account, providing Our services and products or Our ongoing relationship with You.
You may request that We restrict processing of certain Personal Data. Your Personal Data will then only be stored and not processed otherwise; this may however lead to fewer possibilities to use the Services. If such restriction means that We are no longer able to provide the Services to you, We shall be entitled to stop providing the Services.
Right to data portability
You have the right to receive Personal Data provided by You to Us in a structured, commonly used format. We provide no guarantee that this information will be compatible, relevant or useful to any other service.
How to exercise your rights
These rights may be used by sending a letter or e-mail to the addresses set out below. Your identity will be verified before the information is given out, which is why We may have to ask for necessary additional details. We will respond to the request within a reasonable amount of time and, where possible, within one month of the request and the verification of Your identity. If your request cannot be met, the refusal shall be communicated to you in writing. O.V. Lahtinen may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.
If you consider Our processing activities of Personal Data to be inconsistent with the applicable data protection laws, you have the right to lodge a complaint with a supervisory authority for data protection applicable to the jurisdiction You are in.
Business ID: 2155907-3