We collect information about you in three ways: directly from your input, from third-party sources, and through automated technologies.
User-provided information: When you visit the webpages, attend webinars or events, you may provide, and we may collect Personal Data. Examples of Personal Data include name, organization, title, email address, mailing address, mobile phone number. Personal Data also includes other information, such as geographic area or preferences, when any such information is linked to information that identifies a specific individual. You may provide us with Personal Data in various ways on the webpages, webinars, events etc. For example, when you register for newsletter, or send us offer requests.
“Automatically Collected” information: When you visit the webpages, we may automatically record certain information from your device by using various types of technology, including cookies. This “automatically collected” information may include IP address or other device address or ID, web browser and/or device type, the web pages or sites visited just before or just after visiting the webpages, the pages or other content you view or interact with on the webpages, and the dates and times of the visit, access, or use of the webpages. We also may use these technologies to collect information regarding your interaction with email messages, such as whether you open, click on, or forward a message.
Integrated services: You may be given the option to access or register for our services through the use of your user name and passwords for certain services provided by third parties, such as through the use of your Microsoft account.
Information from other sources: We may obtain information, including personal data, from third parties and other sources, such as our partners, advertisers and Integrated Services. If we combine or associate information from other sources with personal data that we collect, we will treat the combined information as personal data in accordance with this Policy.
We store user data in our data system. We use this data to produce and improve the services, send information about the services and to support our sales and marketing functions.
Use of personal data
Ecobio may use your personal data to send important information on training, events and offers, for instance, as well as other marketing communications that we believe will interest you.
Ecobio is committed to protecting your data. We will not sell or rent your data to third parties.
Purpose of data processing
The purpose of the processing of personal data is to manage the customer relationship and to handle the personal data in compliance with the General Data Protection Regulation and Finnish Data Protection Act.
To provide our services and carry out our contractual obligations
We process personal data to run, maintain and develop our business. We may use the data for example to offer essential functionalities of our services. If Customer contacts our customer service, we will use the provided information for answering questions and solving possible issues.
For user experience, communication and marketing
We may process personal data for the purpose of contacting you regarding our services and to inform you of changes in our services as well as to market our services, including direct marketing.
We use log-ins, cookies, IP addresses and other common Internet technologies to identify you and log your use in order to improve the user experience.
For quality improvement and trend analysis
We may process information regarding the use of the web pages to improve the quality of our services e.g. by analysing any trends in the use of our web pages. When possible, we will do this using only aggregated data.
Legitimate grounds for processing
We process personal data to perform our contractual obligations towards Customers and to comply with legal obligations. Furthermore, we process personal data to pursue our legitimate interest to run, maintain and develop our business and to create and maintain Customer relationships. When choosing to use your data on the basis of our legitimate interests, we weigh our own interests against your right to privacy.
In some parts of the web pages, you may be requested to grant your consent for the processing of personal data. In this event, you may withdraw your consent at any time.
International data transfers
We store all personal data within the European Economic Area.
However, if we or our service providers in the future do transfer personal data to, or access it in, jurisdictions outside the European Economic Area, we will take steps to ensure that the personal data receives an adequate level of protection in the jurisdictions in which it is processed. We provide adequate protection for the transfers of personal data to countries outside of the European Economic Area through a series of agreements with our service providers based on the Standard Contractual Clauses or other similar arrangements.
We do not store the personal data for longer than is legally permitted and necessary for the related processing purposes. The storage period depends on the type of personal data, the purposes and the applicable law and therefore varies per use.
Typically, we store personal data for as long as we have purpose to do so and, thereafter, for no longer than is required or permitted by law or necessary for internal reporting and reconciliation purposes.
We erase personal data after the above described storage period or when you request us to erase your personal data unless we have a legitimate ground not to do so.
When you click a link in marketing communication that you have received from Ecobio, we may also use a cookie that tells us which pages you visit and what content you download from our website. If you do not want cookies to be stored on your device, you can change your browser settings accordingly.
Disclosure and sharing of personal data
We do not share personal data with third parties outside of our organization unless one of the following circumstances applies:
For legal reasons
We may share personal data with third parties outside Ecobio’s organization if we have a good-faith belief that access to and use of the personal data is reasonably necessary to: (i) meet any applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security or technical issues; and/or (iii) protect the interests, properties or safety of Ecobio, our customers or the public in accordance with the law. When possible, we will provide notice about such transfer and processing.
To authorized service providers
Please bear in mind that if you provide personal data directly to a third party, such as through a link on our website, the processing is typically based on their policies and standards.
For other legitimate reasons
With explicit consent
We may share personal data with third parties outside Ecobio’s organization for other reasons than the ones mentioned before, when we have an explicit consent to do so.
Our commitment to data protection
Ecobio aims to ensure the security of your personal data. We have adopted reasonable physical, electronic, and administrative methods that enable us to protect and secure the data collected by us online or through other means.
All of the collected data will be kept within EU/EEA borders in accordance with the European Union’s current regulations on personal information.
The data system is protected from external use. The rights of the persons who update and use the data to use and process the register data are defined at the individual level, and their access is protected using personal user IDs and passwords.
All persons in the data register managed by Ecobio Oy have:
- the right to receive transparent information about the processing of personal data
- the right to access their data
- the right to rectify their data
- the right to have their data removed
- the right to restrict the processing of their data
- the right to refuse the processing of their data by the register controller
- the right to request information from those recipients of personal data who the controller must inform of the rectification, removal, and restriction of processing of personal data
- the right to transfer the data from one system to another
- the right of refusal rights related to automatic decisions and profiling
- right to lodge a complaint with the data protection supervisory authorities
We will carry out your requests based on these rights unless we have a legitimate ground not to do so.
Updates and access rights
We update our personal data system and verify its content regularly so that we can better serve our customers and other interest groups.
If you want to view your personal data or if you would like it to be deleted from our data system, please send a request to firstname.lastname@example.org.
Right to object to direct marketing
You can unsubscribe to our direct marketing email messages using the link provided with each message or by contacting us via email: email@example.com.
Controller and contact information
Business ID; 0773328-2.
Runeberginkatu 4c B 21
tel. +358 2 07 569 450
Last updated June 5, 2018