PRIVACY NOTICE CUSTOMERS AND WEBSITE
1. CONTROLLER
Name of the controller: Bou Oy
Business ID: 2896836-3
Address: Mikonkatu 17, 00100 Helsinki, Finland
Email address: holla@bou.co
2. GENERAL
In this privacy notice we tell you how we process your personal data when you visit our website or use our services.
3. LEGAL BASIS AND PURPOSES OF PROCESSING
When you visit our website the processing of personal data is primarily based on our legitimate interest in ensuring the functionality and security of our website and the development of our website. In addition, personal data will be processed to develop and tailor the content of the website to those interested in our services. In addition, we process personal data for monitoring visitor numbers, for the compilation of statistics on the use of the site and for determining the effectiveness of our promotional campaigns. Whenever possible, we use anonymized data for these purposes.
We also process your personal data as the contact person of our current or potential customer. The processing of personal data is primarily based on our legitimate interest in processing personal data in order to manage and develop customer relationships.
The purpose of processing personal data is to provide our services to you and to develop these services, implement marketing and sales measures, identify individuals in the customer register, manage contact information and contact with customers.
4. PERSONAL DATA COLLECTED
When you visit our website, we process data generated, such as your Internet Protocol (IP) address and/or browser and device characteristics. We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.
As the contact person of our customer or potential customer we process the following information:
name
contact information (e.g., phone number and email address)
employment or employment information (e.g., organization and job title)
categorization information (e.g., marketing bans and feedback, interests)
5. RETENTION PERIOD OF PERSONAL DATA
We store your personal data as long as necessary for the purpose it was collected. We retain the data collected from you as our customer as long as we have an active customer relationship. We may however keep some data related to you even longer if required to do so by law, such as invoicing information in accordance with the Accounting Act.
6. DISCLOSE OR TRANSFER OF DATA
Processing tasks may be outsourced to the external service providers in accordance with and within the limits set by data protection legislation. Main operators to whom processing tasks have been outsourced are accounting firms.
7. TRANSFER OF DATA OUTSIDE THE EU/EEA
Personal data will not be transferred outside the European Union or the European Economic Area.
8. RIGHTS OF THE DATA SUBJECT
Right to access: You have the right to receive confirmation from us on whether or not we process personal data that concerns you. We provide you with a copy of the personal data being processed. As a rule, the exercise of rights is free of charge.
Right to rectification: You have the right to demand the rectification of inaccurate personal data concerning them and to have incomplete personal data completed.
Right to erasure: In certain cases, specified in Article 17 of the GDPR, you have the right to have us erase data concerning you. For example, when the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
Right to restriction of processing: In certain cases, specified in Article 18 of the GDPR, you can request us to restrict the processing of your personal data. The right to restriction exists for example, when you contest the accuracy of the personal data. In such cases, the processing will be restricted for a period enabling us to verify the accuracy of the personal data.
Right to object: In certain situations, you have the right to object to the processing of your personal data, that is, request us not to process it at all. If the data is processed for the performance of a task carried out for the purposes of the compelling legitimate interests pursued by us or a third party, you have the right to object to the processing on grounds relating to your particular situation. In such cases, the processing must be stopped unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
If the personal data is processed for direct marketing based on legitimate interest, you have the right to object at any time to the processing without any specific grounds, after which the data may no longer be processed for purposes of direct marketing (this includes profiling related to direct marketing).Right to data portability: You have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format and, if desired, transmit that data to another controller.
Right to withdraw consent: If personal data is processed based on consent, you have the right to withdraw your consent by informing us. Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal of consent.
Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with the competent supervisory authority if you consider that we have not complied with the applicable data protection regulation. The supervisory authority in Finland is the Office of the Data Protection Ombudsman, www.tietosuoja.fi.
9. CONTACT INFORMATION AND THE USE OF DATA SUBJECT RIGHTS
In all matters relating to the processing of personal data and in situations involving the exercise of rights, you should contact us using the contact details provided at the beginning of this privacy notice.
