Privacy statement
Privacy statement
Data controller
Innojok Oy
0810888-4
Business ID: 0946281-8
Address: Sirrikuja 3L 00940 Helsinki
Tel.+358 9 4272 0637
email: info@innolux.fi
Grounds and purpose for processing personal data
The legal basis for processing personal data is the legitimate interest of the controller based on a customer relationship between the data subject and the controller. The personal data that is collected is used to identify the user on the website for purposes such as a customer relationship on the online store. In addition, the service may send notifications to customers. The grounds for processing are specified in more detail in the section entitled “Regular data sources and grounds for processing personal data”.
Collected data
We collect the following data from data subjects and customers who have placed orders:
First and last name
Email address
Address
Phone number
Order and delivery history, customer communication and behaviour on the website.
Additional information provided by the customer
Marketing consent and prohibition
Corresponding data for corporate customers, as well as the business ID.
Cookies
A cookie is a small text file saved on a computer. The website uses cookie files in a way that does not violate the user’s privacy. We use cookie files on our website primarily for the purpose of improving the user experience and functionality of the site and to evaluate how the content on the site is used. Cookies can be used to collect data such as which page you came from to the current address, which of our web pages you have browsed and when, which browser you use, the resolution of your display, your operating system and your computer’s IP address – in other words, the internet address at which you send and receive data.
Cookie files enable the number of visitors to the service to be tracked by Innolux and its partners. The numbers can then be analysed to improve the service for its users. In addition, Innolux’s partners may target advertisements using cookies that collect data about the visitor’s activities here and on other websites. Cookies enable the collected data to be used to produce advertising that targets the user’s interests. When cookies are used to target advertising, the user is not identified, nor is the data combined with any personal data that the user may provide in other contexts.
This website uses third-party website analytics and marketing systems, such as Google Analytics, Facebook Pixel and Klaviyo. These systems use cookies to collect anonymous data on the website in order to assess and improve the use of the site. This data includes the route that the user took to find the website and how the user behaves on the site. The providers of the systems transfer and retain the collected data on their servers.
Regular data sources and grounds for processing personal data
he data saved in the personal file is regularly obtained from the data subjects themselves, and we process personal data in order to fulfil agreements or orders. Data is collected when a user registers on the website or online store.
In addition, we collect data about the products purchased, comments written and behaviour in the service. Technical analytical data is saved automatically when you visit the website.
If you have subscribed to our newsletter or otherwise expressed your consent to receive direct marketing, we may process your personal data in order to send direct marketing material. You are always entitled to decline electronic direct marketing or withdraw your consent to the processing of personal data.
Disclosure of personal data
In general, personal data is not disclosed, and we process personal data inside the EU. Should personal data be transferred outside the EU, we ensure that the agreements on the transfer of personal data include model clauses concerning international transfers and meet the EU legal criteria. However, data may be disclosed to parties such as public authorities based on a legal demand, as well as to authorised service providers such as shipping companies.
Protection of personal data
The website server is protected by SSL, and personal data is stored in an encrypted database. Personal data is only processed by personnel who need to process it as part of their work duties.
Data retention period
Data is retained for as long as the user account or customer relationship is registered. If a user deletes their account or sends an erasure request, the collected data is anonymised by removing all identifying data, such as names, addresses and phone numbers. As a general principle, we only retain personal data for as long as is required by law or when it is necessary to process personal data in order to fulfil the purposes of use.Profiling
Data on previously purchased products or behaviour on the website/service can be used as a source when offering the user additional services or targeted marketing..
Rights of data subjects
Right of access to personal data
Data subjects are entitled to receive confirmation of whether their personal data is processed. If such data is processed, data subjects are entitled to receive a copy of their personal data.
Right of rectification of personal data
Data subjects are entitled to request that any inaccurate and incorrect data about them are corrected.
Data subjects are also entitled to have incomplete personal data supplemented by providing the necessary additional information.
Right of erasure of personal data
Data subjects are entitled to request the erasure of personal data about themselves in the following circumstances:
The personal data is no longer needed for the purposes for which it was collected
The personal data has been processed unlawfully.
Right to restrict processing
Data subjects are entitled to restrict the processing of personal data about themselves in the following circumstances:
The data subject contests the accuracy of their personal data
The processing is unlawful, and the data subject objects to the erasure of their personal data, instead demanding a restriction on the use of the data
The controller no longer needs the personal data for the original purposes of processing, but the data subject needs the data in order to prepare, bring or defend a legal action.
Right of objection
At any time, data subjects are entitled to object to the processing of personal data concerning themselves on grounds related to their particular personal situation.
The controller must stop processing the data subject’s personal data, unless the controller can demonstrate that the processing is based on a compelling legitimate interest that overrides the data subject’s interests, rights and freedoms or if it is necessary in order to prepare, bring or defend a legal action.
If personal data is collected for the purpose of direct marketing, data subjects are entitled to object to the processing of their personal data for such marketing at any time, including profiling related to such direct marketing.
Right to avoid being subjected to automated decision-making
Data subjects are entitled to avoid being subjected to automated decision-making that is based solely on automatic processing, such as profiling, and that has a legal impact on data subjects or significantly affects them in a corresponding way.
The foregoing does not apply if the decision is essential in order to conclude or enforce an agreement between the data subject and controller or is based on the data subject’s express consent.
Right to transfer data from one system to another
Data subjects are entitled to receive the personal data concerning them and provided by them in a structured, widely used and machine-readable format and are entitled to transfer this data to another controller.
Right to submit a complaint to the supervisory authority
The national supervisory authority in matters pertaining to personal data is the Data Protection Ombudsman, who operates under the Ministry of Justice. Service users are entitled to bring a case before the supervisory authority if they deem that the processing of personal data about themselves has violated the applicable legislation.
Contact
n any matters related to the processing of personal data or to exercise the data subject’s rights, email info@innolux.fi or mail Innojok Oy / Sirrikuja 3L, 00940 Helsinki, Finland.
Updated 12 May 2020