Privacy Statement

1. Introduction

In this Privacy Statement, we will tell you how we collect and process data on Routa Markkinointi Oy’s (hereinafter referred to as “Routa” or “we”) website and when offering services (hereinafter referred to as the “Service”).

We have committed ourselves to protect the privacy of the Services’ users in accordance with the applicable legislation.

2. Purposes and legal basis of the processing

Purposes of the processing of personal data

Routa collects and processes personal data in order to

• maintain and develop the customer communications as well as customer and service relationships; 
• enable the user to use certain Services offered by Routa; 
• market, in accordance with the user’s consent, the Services provided by Routa or selected third parties; and 
• enable Routa to develop the Services and user experience of the website by collecting information using cookies and other analytical techniques. 

Legal basis of processing personal data

Routa collects and processes personal data in order to comply with the obligations under the agreement and fulfil its legal obligations. Furthermore, Routa processes personal data on the basis of a legitimate interest in order to maintain and develop its business operations and Services.

3. Which personal data will be collected?

Routa collects personal data concerning the users of its Services which is necessary for the purposes defined in this Privacy Statement:

A) Information provided to Routa by you

• Contact information of the responsible persons of customer companies and companies related to maintaining contact.
  
• Information related to a contractual relationship, such as descriptions of products and Services, invoicing and payment information, customer feedback and contacts.
  
• Recorded customer calls.
  
• Other information possibly provided by the user which we need for the purposes defined in the Privacy Statement.

B) Information collected from public registers, such as the Trade Register

C) Information generated by the use of the Services

We use, for example, cookies and other analytical techniques to monitor the use of the Services. Read more about the use of cookies from our Cookie Policy. We monitor the following aspects related to the use of the Services, among others: 

• Information related to the using and browsing of the Service’s functionalities, such as advertisements displayed and information on clicking the advertisements. 
• Website through which the user has accessed our website, device model, individual device and/or cookie ID, date collection channel, browser version, IP address, session ID, session time and duration as well as screen resolution and operating system. 
• Location information if the user has given their express consent for it. 
• Other data collected with the user’s consent.

Online behavioral data may also be combined with the customer's other information collected by Routa for marketing activities and advertising targeting.

D) Data derived from the use of the Services

The derived data is gathered from the observed use of the Service and/or information provided by the customer using analytics, for example, based on the user’s possible interests or segmentation of a certain user group.

4. How long will the data be retained?

Routa retains the users’ personal data only for as long as it is necessary for the purpose for which it is collected or for the maximum period permitted by law. Thus, the retention period of personal data varies depending on the data. This also means that we may retain your personal data although our contractual relationship would have been terminated, but only for as long as we have a reason for it.

5. Transfer of personal data

To offer Routa’s Service

We only transfer personal data to the extent required by third parties needing the access to personal data processed by us in order to offer Routa Services for purposes defined in this Privacy Statement.

Third-party marketing and advertising

Routa shall not disclose the users’ personal or identification data to marketing and advertising parties. In order to target the communications and marketing more accurately, we may transfer anonymised demographic information, interest information or, for example, targeting value information based on location to third parties.

Your consent

If the user has given their consent, we may share the user’s information with selected third parties in order to allow them to contact the user.

Scientific research

We may disclose information for scientific or historical research, provided that the data has been converted into a format such that the data subject can no longer be identified from the data.

About the legal reasons

Your personal data may be disclosed according to the requirements imposed by competent authorities and conditions based on law. If we sell, buy, merge or otherwise organise our business operations, the user’s personal data may be disclosed to the buyers and their advisers.

Regular disclosures of data

In addition to what is stated in this privacy statement, we may disclose personal data to Sanoma Media Finland for the purpose of establishing and maintaining customer relationships, marketing products and services, and also to partners carefully selected by Routa for the purpose of marketing and organizing events in the field.

6. International data transfers

Routa aims to implement the Services and process personal data by using operators and services in the EU or EEA area.

Some of our subcontractors, distributors and partners are located outside the European Economic Area. In this case, your personal data may be transferred between different countries. Such transfers may include the disclosure of your personal data to countries outside the EU or EEA area where the personal data legislation deviates from the requirements laid down in Finnish law. In such cases, Routa shall ensure an adequate level of protection of personal data by, for example, agreeing on the matter with the processor using standard contractual clauses or other means in accordance with the personal data protection legislation when transferring data to third countries. 

7. Protection of personal data

Routa uses up-to-date practices to safeguard personal data. This means that we use physical, administrative and technical safeguards to minimise the risk of personal data loss and reduce misuse as well as unauthorised access, publishing or editing. We store your personal data on protected servers, which means that only authorised persons are allowed to access the data on these servers. Routa may also protect your personal data using the Secure Sockets Layer (“SSL”) or other similar encryption software.

8. Third-party websites

This Privacy Statement only applies to Routa’s Services and we shall not be responsible for the data protection practices of other websites. We recommend that the user check the data protection clauses of the websites they use. 

9. Amendments to the Privacy Statement

Routa may amend this Privacy Statement. The amended Privacy Statement is available on Routa’s website to ensure that the users are always aware of how their personal data is processed. 

10. Your Rights

Right of access

You have the right to check which information concerning you has been stored in the register.

Right to rectification

You have the right to request for rectification of inaccurate and incorrect data.

Right to erasure of data

You can request the erasure of your personal data from our systems. We will carry out the requested measures, unless we have a justified reason not to erase the data.

Right to restrict the processing of personal data

We may restrict the processing of data in certain legally defined cases.

Right to object to the processing of data

You also have the right to request restrictions of your personal data if your data is being processed for purposes other than the implementation of our Services or fulfilling of legal obligations. If you object to the processing of your personal data, your opportunities to use our website may be limited. You have the right to object to electronic direct marketing by following the instructions included in all the marketing messages that we send.

Right to transfer data from one system to another

You have the right to obtain your personal data in a structured and commonly used format so that you can transmit the data to another controller if the processing of your personal data is based on consent or an agreement between us.

Right to withdraw the consent

If your personal data is processed based on consent, you have the right to withdraw your consent at any time.

11. Exercising your rights

We shall implement the rights as they are defined in the General Data Protection Regulation. The extent of the data processing depends on the basis of the data processing.

You can exercise your rights by sending us a letter or email including your name, address, telephone number and a copy of your valid identity card. If your request concerns personal data included in a cookie, you must attach a copy of the cookie in question to your request. We may request further information in order to confirm your identity. We may reject the request if the requests are repeated unreasonably often or are excessive or unjustified.

If you think that the processing of your personal data contravenes applicable law, you can lodge a complaint with the local Data Protection Ombudsman.

12. Who is the controller and whom can I contact?

Controller:
Routa Markkinointi Oy, FI24551800
Lemminkäisenkatu 14–18 C
20520 Turku, Finland

Contact in register-related issues:
info@markkinointirouta.fi