PRIVACY POLICY
Website, marketing, suppliers & customers
General
In order to give you the best possible service and to provide relevant communications, we may need to collect and process certain personal data about you. However, we respect and value your privacy and we are committed to protect it. This privacy policy contains information about what personal data we collect, what are the key principles of processing the data and what rights you have relating to your personal data.
Nordic Lights Ltd processes your personal data in compliance with this privacy policy and applicable laws, so we ask you to read this policy carefully. We may do updates to this privacy policy from time to time associated with the development of our business operations or changes in applicable laws. The updated privacy policy can be found from our website, so we ask you to visit this page from time to time.
By using our services and website or contacting us, you accept that we process your personal data according to this privacy policy.
For what purposes is personal data collected and used?
We collect, store and process your personal data only for predefined purposes. The main purposes for processing personal data are:
● marketing purposes, including marketing analytics and direct marketing in compliance with applicable laws;
● customer relationship management;
● developing our website and its content;
● fulfilling our contractual obligations;
● fulfilling legal obligations and responding to legal claims;
● customer communications and responding to contact requests;
● development of our business; and
● offering relevant products and services to you.
What data do you collect about me and from which sources?
We collect personal data about you mainly from yourself when you contact us or use our services and website. In addition to this, we may collect personal data about you from public sources and registers, such as your professional data found in LinkedIn. We also collect personal data about our website visitors with Google Analytics, so that we could analyze the use of our website, in order to develop it further and for targeting relevant marketing content for our customers and website visitors.
Typically, we may get the following personal data directly from you:
● your name, employer, job title and work contact details as well as your interest in our products and services.
Personal data from public sources:
● website use statistics from Google Analytics and possibly your professional data from LinkedIn or similar online services, where you have personally entered and published your work-related personal data.
What is the basis for processing your personal data?
We make sure that we always have a legal basis to process your personal data. We may process your data on several different basis. Firstly, we may process your data to fulfill and execute a contract and to meet legal obligations. Secondly, we may process your data also to further our legitimate interests, which are the offering of our services and operating and developing our business. Some personal data we may process based on your consent.
Who processes my personal data and is it transferred to anyone else?
Primarily your personal data is processed by people within our own organization. We may also outsource some parts of the processing to third parties, such as the data systems used to store and process personal data. In these situations, we make sure with contracts and otherwise that the confidentiality of your personal data is secured and that the data is processed according to the applicable laws. We may also disclose information to fulfill our other contractual or legal obligations or when a legal authority requires a disclosure. We may also disclose your personal data if we are a party of a business sale, such as a merger or an acquisition.
We may also transfer personal data about potential or existing customers to our local business partners for the purpose of handling contact requests as well as sales and customer service locally. These partners are considered as new data controllers and they process the personal data in accordance with their privacy policies.
Is my data transferred outside the EU?
By default, your data is not transferred outside the EU. Possible transfers concern certain specific situations. Firstly, we could transfer personal data outside the EU where some of the servers where our data is stored would be located in such a place. If this would happen, we would make sure that your data is transferred and processed in a legal manner with adequate safeguards. Secondly, we may transfer your personal data outside the EU within our group of companies or to a local reseller or business partner, but only to further the specific purposes defined earlier in this privacy policy. When transferring your personal data for such purposes, we will again make sure that it is done in a legal manner with adequate safeguards.
How long is my data stored?
We will not store your personal data for a longer period than necessary for its purpose or required by contract or law. The storage times for personal data may vary based on its purpose and situation. We also intend to keep your data up to date.
How is my data stored and kept secure?
Your data is stored on the servers provided by our service providers, which are secured according to general industry standards and practices. We consider and keep your personal data confidential and do not disclose them to anyone else than those who need it for their work or confidentially to our customers based on contracts we have made with them. Access to your personal data has been protected with user-specific logins, passwords and user rights.
Is it mandatory to provide personal data? What happens if I don’t give it to you?
By default, it is not mandatory to provide us personal data. For instance, you can use our website without providing your personal data. However, in some instances, if you don’t provide us some of your personal data or allow the processing of it, it may limit the services that we are able to provide you.
Does your website use cookies and what are those?
We use cookies on our website to provide the best possible user experience for our website visitors. Cookies are small text files that are placed on a web user’s computer and are designed to hold a modest amount of data particular to a user and a website. Cookies give us information how users use our website. We may use cookies to develop our website and services, analyze website use as well as target and optimize marketing efforts. If you do not wish to receive cookies, you may set your web browser to disable them. Please note that most browsers accept cookies automatically. If you disable cookies, you should understand that certain services at our website may not function correctly.
What rights do I have relating my personal data?
Withdraw your consent
If we process personal data based on your consent, you can at any time withdraw your consent by notifying us, for instance by sending email to privacy@nordiclights.com.
Access to data
You have the right to have confirmed if we are processing your personal data and also to know what data we have about you. In addition, you have the right to some supplemental information described in the law about the processing activities.
Right to have errors corrected
You have the right to request that we correct any inaccurate or outdated personal data we have about you.
Right to prohibit direct marketing
You have the right to request that your personal data is not processed for direct marketing purposes by sending an email to privacy@nordiclights.com.
Right to object processing
If we process your personal data based on public interest or our legitimate interest, you have the right to object the processing of your data, to the extent that there is no such significant other reason that would override your rights, or the processing is not necessary for handling legal claims. Please notice that in this situation we may not be able to serve you anymore.
Right to restrict processing
In certain situations, you have the right to require that we restrict processing of your personal data.
Right to data portability
If we process your personal data based on your consent or fulfilling of a contract, you have the right to require transfer of the data you have provided to us to another service provider in a commonly used electronic format.
How can I use my rights?
You can execute and use your rights by contacting us, for instance by sending an e-mail to privacy@nordiclights.com. In such case, we ask you to provide us your name, contact details, phone number as well as a copy of a valid personal ID, such as a driver’s license or passport, so we can verify your identity. If you consider that the processing of your personal data is not lawful, you can also always make a notification of this to a supervisory authority.
Can this privacy policy be updated?
We may make updates to this privacy policy when our operations change or develop. Also changes in law may make it necessary to update this privacy policy. The changes become valid once we have published them in the form of an updated privacy policy. Therefore, please visit this page and read this privacy policy from time to time.
Who can I contact in privacy matters?
Contact details:
Nordic Lights Ltd, Bennäsvägen 155, 68600 Jakobstad, Finland, Tel: +358 20 1345100, contact person: Matti Leipälä, email: firstname.lastname@nordiclights.com