Sections 10 and 24 of the Personal Data Act (523/1999)
The privacy statement is based on the EU's General Data Protection Regulation (GDPR), which sets out the data protection rights of EU citizens, as well as the confidentiality of their personal data.
REGISTRAR
Aqva Finland Oy
Business ID: 2351337-8
address: Puusepänkatu 2D, 00880 Helsinki
https://www.aqva.fi
PERSON KEEPING THE PERSONAL REGISTER
Customer service:
myynti@aqva.fi
NAME OF THE REGISTER
AQVA Customer and marketing register
BASIS AND PURPOSE OF THE USE OF PERSONAL DATA
The legal basis for processing of personal data is the contractual relationship between the user and the registrar.
The purposes of processing personal data include providing water purification and filtration products and water analysis services to households, businesses, and public entities, establishing and maintaining customer relationships, and conducting business operations. Personal data is processed for these purposes mainly with the consent of the user, to fulfill a contractual obligation, and on the basis of the legitimate interests of the registrar. Personal data is only processed for as long as it is necessary to fulfill the purposes of the processing or to comply with a legal obligation.
Personal data is collected and used for the following purposes:
- Products and services (private and business clients): The purpose of user data processing is to offer and deliver water purification and processing solutions and analysis services to varying customer segments such as households, businesses and public entities. Customer orders are registered in the ERP system, and private customers can use the webshop to place orders and service requests.
- Customer relationship management: User data is used to track transactions, develop customer services, promote services and products, and manage customer relations.
- Marketing: The registrar may send customers targeted offers and newsletters to the email address provided by the user. The opening of links in newsletters is tracked through cloud services to be able to further improve the customer experience provided. The user may opt out of receiving the newsletter at any time.
- Analytics: We track the use of our website to improve our services and provide a better user experience.
- Location data: We may collect location data from our users, but only with their consent.
Personal data may be later used for another purpose only if it's compatible with the original purpose of use. Personal data shall be processed only in so far as is necessary for the purpose for which the registers are used.
REGULAR SOURCES OF INFORMATION
The registers contain information collected from the user themselves.
INFORMATION CONTENT OF THE REGISTER
The registrar only collects personal data that is relevant and necessary for the use purposes disclosed in this privacy policy.
The registers contain contact information received from the customer. The contact information are updated by the customer's demand or when the customer updates them through the webshop. This ensures that the register stays up to date.
The registers contain new customer acquisition, marketing and contract customer information.
The following data can be processed:
- Name
- Address
- Post office and number
- Telephone number
- Email address
- Company
- Company ID
- Links opened
- How long the person has been on the page
- Payment information
- Device maintenance information
USER TRACKING AND USE OF TAGS
We use various tracking technologies and tags on our website to improve user experience, to analyze the use of webpages and to ensure the security of your services. The services we use include:
- Our pages use Tiktok and Meta pixels, which activate when the user visits our site through an ad on Tiktok or Meta sites (Facebook/Instagram). These pixels collect information of the actions the user takes on our website to measure advertising and campaign performance. The pixels work like cookies and their use is based on user consent. If the user does not enter our website through these ad campaigns, the pixels do not collect any information on the user. You can read more on TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy. You can read more on Meta's privacy policy at: https://www.facebook.com/policy.php.
- Google Analytics (GA): Analyzes traffic on website and how users navigate and act on our site in order to improve our services.
- reCAPTCHA: Protects the site from harmful use and automated attacks by ensuring the user is a human.
These tracking technologies are based on user consent, which can be managed through cookie settings. You can opt out of using these technologies by changing the cookie settings on your browser or through our site's cookie management tools.
Our company also uses Groweo Oy's services such as chat conversations. More information (in Finnish) on Groweo's privacy policy can be found at https://www.groweo.com/rekisteriseloste-ja-tietosuojaseloste. As the registrar our company manages the purpose and means of personal data collection and management, and Groweo processes the data.
REGULAR DISCLOSURE OF INFORMATION
In principle, the data will not be passed on to third parties unless required by law. Data may thus be disclosed, to the authorities if required for legal reasons.
The registrar may use services provided by a third party. The registrar has the right to disclose personal data to them to the extent necessary to provide the services to the user.
When a customer pays with Svea Payments, they provides the information to Svea Payments. Our company does not process payment information, as they are processed by the payment provider in line with their own privacy policies.
If you use the chat service on the company's website, the information will be passed on to our partner, who will handle the chat service on our behalf.
TRANSMISSION OF REGULAR DATA AND TRANSFER OF DATA OUTSIDE THE EU OR THE EUROPEAN ECONOMIC AREA
As a general rule, data will not be transferred or transferred outside the EU or the European Economic Area unless this is necessary for the technical implementation of the processing, in which case the transfer will comply with the requirements of personal data law.
DATA RETENTION PERIOD
Personal data will only be stored for the time necessary for the purpose it was collected for or for as long as required by law. After this time the registrar will delete or anonymize the data.
The registrar may be required to process personal data in the register longer than stated above for legal reasons or if ordered to do so by authorities.
PRINCIPLES FOR THE PROTECTION OF THE REGISTER
The registrar handles personal data in a way that aims to ensure their safety, including protecting the data from unauthorized processing, and accidental loss, destruction, or damage.
The registrar uses appropriate technical and organizational safety procedures to ensure the above, including use of firewalls, encryption technologies, safe devices, control of access, and staff guidance.
The staff of the registrar that have access to user data are bound by professional secrecy through Finnish law and additional NDAs.
PROFILING
Personal data will not be used for profiling or automated decision-making.
USER RIGHTS
RIGHT OF INSPECTION
The user has the right to know if personal data related to them is processed, and if so, receive a copy of the data.
RIGHT TO REQUEST CORRECTION OF INFORMATION
The user has the right to ask, that incorrect personal data related to them is fixed. The user also has the right to have missing personal data filled by providing them to the registrar.
RIGHT TO REQUEST DELETION OF DATA
The user has the right demand the deletion of personal data related to them if
a. the personal data is no longer needed for the purpose they were collected for; or
b. the personal data has been processed illegally.
RIGHT TO LIMIT PROCESSING OF DATA
The user has the right to demand limiting of processing personal data related to them if
a. the user denies the accuracy of the data; or
b. if the personal data has been handled illegally, and instead of deleting it, the user chooses to demand to limit their processing; or
c. if the registrar no longer needs the personal data for the original purpose of use, but the user requires them for a legal claim.
RIGHT TO MOVE INFORMATION TO ANOTHER REGISTER
The user has the right to receive the personal data related to and provided by them, and the right to forward the data to another registrar.
RIGHT TO MAKE A COMPLAINT
Compliance with data protection legislation in Finland is supervised by The Data Protection Ombudsman. The user has the right to request their services regarded to the rights of data subjects or violations related to the processing of personal data.
The contact information for The Data Protection Ombudsman are:
Address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki
Email: tietosuoja@om.fi
Telephone: +358 295666700 (local/mobile network fee)
Website: www.tietosuoja.fi/en
CHANGES TO THE PRIVACY POLICY
The registrar is constantly developing its activities and reserves the right to change this privacy statement. Legislation may also change, so the contents of the privacy statement should be reviewed at regular intervals.
If the changes include new purposes of use for processing personal data or otherwise change significantly, the registrar will inform the users beforehand and ask for consent if required.
