Privacy policy
Data controller
Innojok Oy
0810888-4
Business ID: 0946281-8
Address: Sirrikuja 3L, 00940 Helsinki
Tel. +358 9 4789 2200
Email: info@innolux.fi
fd Grounds and purpose for processing personal data
The legal basis for the processing of personal data is the data controller’s legitimate interest, which is based on the customer relationship between the data subject and controller. The collected personal data will be used to identify users on the website, e.g. the purposes of e-commerce services for customers. Additionally, the service may send the customers informational messages. The grounds for processing personal data are defined further in the section on regular data sources and grounds for processing personal data.
Collected data
We collect the following data from data subjects and customers who have placed orders:
First and last name
Email address
Address
Phone number
Order and delivery history, customer communication and behaviour on the website.
Additional information provided by the customer
Marketing consent and prohibition
Corresponding data for corporate customers, as well as the business ID.
In addition to the aforementioned data, we also collect technical data regarding the visitors of the website and online store. This may include information that is considered personal data. Examples of this are the computer IP address and the model or type of hardware or operating system.
Cookies
Cookies are small text files that are stored on users’ computers. The website uses cookies in a way that ensures that the privacy of the user will not be compromised. We use cookies primarily to improve the user experience and functionality of the website and to evaluate how its contents are used. Cookies can be used to gather information on several kinds of matters, such as the web page from which the user was directed to the website from, which pages they viewed and when, which browser they use, their display resolution or operating system, as well as the computer’s IP address – that is, the address from which the data is sent from and where it is received.
Innolux and its partners may use cookie data to monitor the number of visitors and analyse and improve the service to better serve the users’ needs. Innolux’s partners may also use targeting cookies that collect information about a visitor’s visits to this and other websites. The information collected using cookies is used to generate targeted advertising based on the visitor's interests. Targeting using cookies does not identify the visitor and does not associate the collected information with any personal information received from the visitor in any other context.
We use third-party analytics and marketing systems such as Google Analytics and Facebook Pixel. The systems use cookies to collect anonymous information in order to evaluate and improve the user experience of the website. This information concerns matters such as how the user has found their way to the website and their actions on the site. System providers transmit and store the collected information on their servers.
Regular data sources and grounds for processing personal data
The data saved in the personal file is regularly obtained from the data subjects themselves, and we process personal data in order to fulfil agreements or orders. Data is collected when a user registers on the website or online store.
We also collect information about purchased products, written comments and users’ behaviour while using the service. Technical analytics data is collected automatically when you visit the website.
If you have subscribed to our newsletter or otherwise expressed your consent to receive direct marketing, we may process your personal data in order to send direct marketing material. You are always entitled to decline electronic direct marketing or withdraw your consent to the processing of personal data.
Disclosure of personal data
As a rule, personal data is never disclosed and will only be processed within the EU. In the event that personal data will be transferred outside the EU, we will ensure that model clauses regarding international transfers are included in the transfer agreements and that the agreements fulfil any other requirements of the relevant EU legislation. The information may, however, be disclosed to, for example, public authorities based on legal claims, or authorised service providers, such as delivery companies.
Protection of personal data
The website server is SSL protected, and all personal data is stored in an encrypted database. Personal data is only processed by persons whose professional duties require access to the information.
Data retention period
The information is retained as long as the user’s account or customer relationship is registered. If a user deletes their account or requests that it be deleted, the collected data is anonymised so that all identifiable information, such as names, addresses or phone numbers are deleted. As a general rule, we only retain personal data for as long as the law requires or as long as it is necessary for fulfilling the purposes for which the data was collected in the first place.
Profiling
Data on previously purchased products or behaviour on the website or service can be used as a source when offering the user additional services or targeted marketing.
Rights of data subjects
Right of access to personal data
Data subjects are entitled to receive confirmation of whether their personal data is processed. If such data is processed, data subjects are entitled to receive a copy of their personal data.
Right of rectification of personal data
Data subjects are entitled to request that any inaccurate and incorrect data about them are corrected.
Data subjects are also entitled to have incomplete personal data supplemented by providing the necessary additional information.
Right of erasure of personal data
Data subjects are entitled to request the erasure of personal data about themselves in the following circumstances:
The personal data is no longer needed for the purposes for which it was collected
The personal data has been processed unlawfully
Right to restrict processing
Data subjects are entitled to restrict the processing of personal data about themselves in the following circumstances:
The data subject contests the accuracy of their personal data
The processing is unlawful, and the data subject objects to the erasure of their personal data, instead demanding a restriction on the use of the data
The controller no longer needs the personal data for the original purposes of processing, but the data subject needs the data in order to prepare, bring or defend a legal action
Right of objection
At any time, data subjects are entitled to object to the processing of personal data concerning themselves on grounds related to their particular personal situation.
The controller must stop processing the data subject’s personal data, unless the controller can demonstrate that the processing is based on a compelling legitimate interest that overrides the data subject’s interests, rights and freedoms or if it is necessary in order to prepare, bring or defend a legal action.
If personal data is collected for the purpose of direct marketing, data subjects are entitled to object to the processing of their personal data for such marketing at any time, including profiling related to such direct marketing.
Right to avoid being subjected to automated decision-making
Data subjects are entitled to avoid being subjected to automated decision-making that is based solely on automatic processing, such as profiling, and that has a legal impact on data subjects or significantly affects them in a corresponding way.
The foregoing does not apply if the decision is essential in order to conclude or enforce an agreement between the data subject and controller or is based on the data subject’s express consent.
Right to data portability
Data subjects are entitled to receive the personal data concerning them and provided by them in a structured, widely used and machine-readable format and are entitled to transfer this data to another controller.
Right to submit a complaint to a supervisory authority
The national supervisory authority in matters pertaining to personal data is the Data Protection Ombudsman, who operates under the Ministry of Justice. Service users are entitled to bring a case before the supervisory authority if they deem that the processing of personal data about themselves has violated the applicable legislation.
Contact
In any matters related to the processing of personal data or to exercise the data subject’s rights, email info@innolux.fi or mail Innojok Oy / Sirrikuja 3L, 00940 Helsinki, Finland.
Updated 12 May 2020