1. Introduction
In this privacy statement, we explain how we collect and process personal data when providing FinnWarma Oy's services (including, but not limited to, the website lumox.com, all related discussion forums, directories and databases, and the services provided by FinnWarma Oy) (the “Service”). We are committed to protecting the privacy of users of the Services in accordance with applicable law.
2. Purposes of processing and legal basis
Purposes of processing personal data
We collect and process personal data so that:
- users can be registered for certain services on our website;
- users can use certain services on our website;
- we can market our or selected third parties' services to users with their consent;
- we can improve users' experience of the Service by collecting website usage data using cookies and other analytical techniques;
- our website can be managed.
Legal basis for processing personal data
We collect and process personal data to fulfil our contractual obligations and comply with our legal obligations. We also process personal data on the basis of legitimate interests to maintain and develop our business and services.
3. What personal data do we collect?
We collect personal data from users of our services that is necessary for the purposes set out in this privacy statement:
a) Information you provide to FinnWarma Oy
- Contact and registration details
- Demographic data, such as age and gender
- Contract-related data, such as product or service descriptions, billing and payment details, customer feedback and communications
- Recorded customer calls
- Profiling and interest information provided by the user
- Permissions and consents
- Other information the user may provide that we need for the purposes set out in this privacy statement
b) Information that may be collected from public registers
c) Information observed from the use of the Services
Cookies and other analytical technologies are used to observe the use of the Services. The use of cookies is common, and many websites use them. A cookie is a small data storage program that a computer browser installs on the user's computer hard drive. Every time the user's browser retrieves the website from the Company's server, a message is sent back to the user's computer. The sent message speeds up the website and simplifies logging in, stores the user's usage data and targets the website to the user.
The following information, for example, is collected using cookies and other analytical technologies:
- Usage and browsing data of the Service's features, such as ads that have been displayed, and information about clicking on ads
- The page from which the user navigated to our pages, device model, unique device and/or cookie identifier, data collection channel, browser version, IP address, session identifier, session time and duration, and screen resolution and operating system
- Location data, if the user has given explicit permission for this
- Other data collected with the user's consent
d) Information derived from the use of the Services
Derived data is inferred using analytics from observed use of the Service and/or information provided by the customer themselves, for example, the user's possible interests or segmentation into a group of certain types of users. All data we collect may be used to target the Service to the user. We use cookies to track data that our website's cookie has installed on the user's computer. Most browsers have a Help menu that explains how cookie acceptance can be prevented, how the browser notifies about receiving cookies, and how cookies can be blocked. If cookies are blocked, use of the website may be limited or prevented.
4. How long is users' data stored?
We store users' personal data only for as long as it is needed for the purpose for which it was collected, or for the maximum period permitted by law. The length of the personal data storage period therefore varies depending on the data. This also means that we may retain your personal data even after your contractual relationship with us has ended, but only as long as we have a reason to do so.
5. Transfer of personal data
To provide FinnWarma Oy's service
We transfer personal data only to the extent that third parties need access to the personal data we process to provide the Service for the purposes set out in this privacy statement.
Third-party marketing and advertising
We do not share users' personal or identifiable data with marketing or advertising parties. To target communications or marketing correctly, we may transfer anonymised demographic data, interests, or location-based targeting values to third parties.
Your consent
If the user has given their consent, we may share the user's data with selected third parties so that they can contact the user.
Scientific research
We may transfer data for scientific or historical research provided that the data has been converted into a form such that the data subject is no longer identifiable from it.
For legal reasons
Your personal data may be transferred in accordance with the requirements of a competent authority and statutory requirements. If we sell, purchase, merge, or otherwise arrange our business, users' personal data may be transferred to buyers and their advisers.
6. International data transfers
FinnWarma Oy aims to provide services and process personal data using operators and services located in the EU or EEA. Some of our subcontractors, distributors, and partners are located outside the European Economic Area. In such cases, your personal data may be transferred between different countries. Such transfers may include transfers of personal data outside the EU or EEA to countries whose personal data processing laws differ from the requirements of Finnish law. In such cases, FinnWarma Oy ensures an adequate level of personal data protection, for example by agreeing to this with the personal data processor using standard contractual clauses or other means compliant with data protection laws for the transfer of personal data to third countries.
7. Protection of personal data
FinnWarma Oy uses up-to-date practices to protect personal data. This means that we use physical, administrative, and technical safeguards to reduce the risk of personal data loss and to prevent misuse as well as unauthorised use, publication, or modification. We store your personal data on secure servers, so that only authorised persons can access the data on these servers. FinnWarma Oy may also protect users' personal data using Secure Sockets Layer ("SSL") or other similar encryption software.
8. Third-party websites
This privacy statement applies only to our Services, and we are not responsible for the privacy practices of other websites. We recommend that users check the privacy statements of the websites they use.
9. Changes to the privacy statement
We may change this privacy statement. The revised privacy statement will be available on the Company's website so that users are always aware of how their personal data is processed.
10. Your rights
Right of access
You have the right to check what information about you is stored in the register. We will provide the data in the form required by law.
Right to request correction of data
You have the right to request the correction or completion of incorrect, inaccurate, incomplete, outdated, or unnecessary data.
Right to request deletion of data
You can request that we delete your personal data from our systems. We will take the actions required by your request unless we have a legitimate reason not to delete the data. The data may not be removed immediately from all our backup or other similar systems.
Right to restrict data processing
You can request that we restrict the processing of certain personal data of yours. A request to restrict data processing may lead to more limited opportunities to use our website and services.
Right to object to data processing
You can also request restrictions on the processing of your personal data if your data is processed for purposes other than providing our service or fulfilling a legal obligation. Objecting to the processing of personal data may lead to more limited opportunities to use our website. You have the right to opt out of electronic direct marketing by following the instructions included in all marketing communications we send.
Right to transfer data from one system to another
You have the right to receive your personal data from us in a structured and commonly used format so that you can transfer the data to another data controller.
Right to withdraw consent
If the processing of your data is based on consent, you have the right to withdraw your consent at any time.
11. Exercising your rights
You can exercise your rights by sending a letter or email containing your name, address, phone number, and a copy of a valid form of identification. If your request concerns personal data in a cookie, you must attach a copy of the cookie in question to your request. We may request additional information that is necessary to verify your identity. We may reject requests that are unreasonably repetitive, excessive, or unfounded. If you believe that the processing of your personal data is in conflict with applicable law, you can make a complaint to the local data protection supervisory authority.
12. Who is the data controller and whom can I contact?
Data controller: FinnWarma Oy
For matters regarding the register, you can contact:
jaakko.sillanpaa@finnwarma.fi
pasi.sillanpaa@finnwarma.fi