1. THE COLLECTED DATA AND ITS USE
The collection of your personal data
We collect various personal data from our service system customers, and the unregistered customers of our webstore, as well as other unregistered users of our website.
We collect customer data from our service system customers, and the unregistered customers of our webstore, such as:
• First and last name
• Contact details
• Other optional information from our service system customers, such as information about the space and location where the product, service and systems would be possibly installed
In addition, we collect other customer data from our service system customers and the unregistered customers of our webstore, such as:
• From our service system customers: the starting time of the customer relationship, as well as direct marketing consents and bans
• From our service system customers: information relating to offers and other communication, such as benefits, services and campaigns we have offered
• Information relating to purchases and claims
We collect identification data relating to the use of our services, such as usernames, solely from our service system customers.
When contacting our customer service by email, telephone or contact form, we may process the following personal data:
• First and last name
• Contact details
• IP address
• Business ID/VAT number
• Communication between you and the customer service
• Other information you have disclosed in the reference
We also collect technical data from all the users of our website, such as:
• IP address
• Operating system and device
• The products searched for on our website, page history of our website and other possible analytics data
If you visit our website without logging in to your customer account, the technical data collected from you cannot be linked to you. The technical data may, however, be linked to your IP address, whereupon the data is considered to be personal data.
We collect the majority of the customer data, when you become a service system customer, when you buy products in our webstore.
In order for your information to be up to date, we may update your personal data by exploiting public registers, updating services, or the information relating to your orders.
The legitimate grounds and purposes for the processing of your personal data
We process your personal data to pursue our legitimate interest to run our business operations, improve your customer or visitor experience and conduct direct marketing. We do not, however, use your personal data for direct marketing purposes without your consent.
We process your personal data in order to fulfill the contractual obligations based on the customer relationship, when you become a service system customer by buying products in our webstore.
We process your personal data for the following purposes:
• In order to maintain the customer relationship, such as in order to inform you about our web services, products and customer service system program
• In order to handle payment transactions
• In order to target marketing
• In order to develop the quality of our web services by analysing, for instance, the products you have viewed and purchased, the feedback you have provided, and the sections you have visited
2. THE STORAGE OF YOUR DATA
The storage and transfer of your data
We transfer personal data relating to the customer service system within the Kelosound group in order to identify our service system customers. The data from our customer service system can be seen by employees working for Kelosound Oy, and authorised subcontractors, who are all bound by professional secrecy. As a consequence, Kelosound Oy’s affiliates outside can get access to the customer service system information. The access is, however, limited to the purpose of identifying the service system customer. In addition, Kelosound Oy may disclose information relating to the service system customers (such as name, email, other contact details and company name) to advertising network service providers in order to conduct targeted marketing. The recipient of the personal data is in that case Kelosound Oy’s authorized service provider, which processes the personal data transferred by Kelosound Oy in order to offer marketing services to Kelosound Oy. Our advertising network service providers may store the data outside of the EU/EEA. If personal data is transferred outside the EU/EEA, we will ensure that appropriate contractual measures (e.g. using standard contractual clauses of the EU Commission) are applied to the transfer, the transfer is lawful, and that the processing and confidentiality are in compliance with the applicable laws.
Kelosound Oy does not transfer your personal data outside of our organization apart from the following situations:
• You have given your consent to the transfer
• The transfer is based on law
• The personal data is transferred to an authorized service provider of Kelosound Oy, and the terms of the processing of personal data have been agreed upon with the service provider
The erasure of your data
We process some of the personal data relating to your service system customer relationship solely based on the contractual relationship. We delete such data as soon as possible when you no longer are our service system customer. We store the personal data relating to your purchases and claims as long as it is necessary, for instance for defending legal claims, or for complying with bookkeeping and legal obligations.
The analytics data of our website is stored for 26 months. An example of analytics data is the products you have searched for on our website.
You may, at any time, unsubscribe from our mailing list and prohibit us from sending you electronic direct marketing.
3. YOUR RIGHTS
Your right to receive your data
You have the right to know which data relating to you is processed by Kelosound Oy. The data will be given for free once a year if requested by sending email to email@example.com.
In addition, you may require us to provide you with a report regarding the following matters:
• Why is your data processed
• Who we have disclosed your data to, or who we plan to disclose your data to
• How long we store your data
If it is not possible to communicate the accurate storage time, we will inform you about the criteria for defining the storage time. Such criteria may be based for instance on a certain law or industry-specific instructions.
Your right to rectify your data
If the data relating to you is incorrect you have the right to require the rectification of such data.
You may ask us to rectify your data by contacting our customer service, the contact details of which are set forth in section 4 of this privacy statement. If you are registered as our service system customer and have activated your user account, you may modify the information relating to you by logging in to your customer account on our website.
Your right to require the erasure of your data
You have the right to ask us to erase your data. You may ask us to erase your data by contacting our customer service, the contact details of which are set forth in section 4 of this privacy statement. If you ask us to erase your personal data, we aim at erasing all data relating to you as soon as possible.
We will store your data despite your erasure request only if there is a legitimate ground to store the data, such as a legal obligation.
Erasing your data may also mean that the service/product you have ordered will not function any longer. Data erasing may result in a non-functioning service/product. The service/product requires at least an email address, the name of the customer, and a password in order to function.
If the service/product is being transferred or sold to another person, we will maintain the previous customer’s data in our system. The previous customer can ask us to delete the data when transferring or selling the service/product to another person.
The right to object and limitation of processing
You have the right to object to the processing of your data, or profiling, when your data is used for direct marketing. You have the right to require the limitation of processing of your personal data, for instance when the data relating to you is incorrect.
In addition you have, in certain special circumstances, the right to object to the processing of your personal data based on your particular situation.
You may invoke your objection and limitation rights by contacting our customer service, the contact details of which are set forth in section 4 of this privacy statement.
Your right to lodge a complaint
You have the right to lodge a complaint with a competent national supervisory authority, if you find the personal data processing activities of Kelosound Oy to be non-compliant with data protection legislation.
4. CONTACT DETAILS
Controller: Kelosound Oy, Business ID:FI28045139
If you have a request, notification, or you have something else to ask regarding the processing of personal data, you may contact our customer service in the following ways:
• By sending an email to the address firstname.lastname@example.org
• By calling the number +358 50 596 9078 (local network charge/mobile call charge or international call charge), on business days from 9 am to 5 pm