CONTROLLER
Hupikupla Oy ("Hupikupla" or "we") processes personal data of its customers for the purpose of managing customer relationships, fulfilling contractual obligations, maintaining its CRM system, customer communication, and direct marketing purposes. In addition to current customers, Hupikupla may process personal data of potential customers.
It is important for us that you understand how we process your personal data. Below, we provide more information about the processing of your personal data.
Please note that this Privacy Statement ("Privacy Statement") applies only to the processing of personal data of corporate customers by Hupikupla as the data controller.
CONTROLLER'S CONTACT INFORMATION
Hupikupla Oy
Business ID: 3393530-4
Address: Jumalniementie 3, 48600, Kotka
Phone number: +358440666086
Sähköpostiosoite: lassi@hupikupla.fi
Website: www.hupikupla.fi
Person responsible for the customer register: Lassi Heikkinen
PROCESSED PERSONAL DATA AND SOURCES OF INFORMATION
We collect customer-related information ("Customer Data") and technical analytics data ("Analytics Data") from our customers.
Although we do not typically use Analytics Data to identify individuals, sometimes individuals may be identifiable from such data either alone or when combined or linked with Customer Data. In such cases, Analytics Data is considered personal data under applicable law, and we treat combined data as personal data.
Hupikupla collects and processes the following Customer Data:
- First and last name;
- Represented organization;
- Email address;
- Postal address, postcode, and location
- Phone number;
- Personal identification number/date of birth
- Communication;
- Billing and payment information;
- Consents or prohibitions related to direct marketing, or
- other information provided by the customer or added to the CRM system (e.g., expressed interest in specific types of services);
Most of the Customer Data is obtained directly from the customer or the data subject. In addition, personal data may be collected and updated from various data services and public registers.
Analytics Data collected and processed during the use of our website includes the following information:
- Customer's IP address;
- Customer's device and device identifier;
- Operating system;
- Visiting times;
- URL route on the website;
- Browser type and version; and
- Language settings.
COOKIES AND WEB ANALYTICS
Hupikupla may use cookies and other technologies to collect Analytics Data when you visit our website.
A cookie is a small text file sent to and stored on a user's computer, enabling the website's administrator to recognize frequently visiting visitors, facilitate visitors' use of services, and compile aggregate information about visitors. This feedback helps us continually improve our website and better serve our customers. Cookies do not harm users' computers or files. We use them to provide customers with information and services tailored to their individual needs.
You can prevent the use of cookies in your browser or set your browser to alert you when cookies are being installed. For example, the following links provide information on changing cookie settings in popular browsers:
Safari
Google Chrome
Internet Explorer
Mozilla Firefox
Please note that our website may not function properly if the use of cookies is disabled.
We use Google Analytics and other web analytics tools on our website to collect Analytics Data and reports on visitors' usage of our website. For more information about Google Analytics, visit the Google Analytics website. You can refuse Google Analytics from collecting data by downloading the following add-on to your browser: Google Analytics Opt-out Add-on.
PURPOSE AND LEGAL BASIS OF PERSONAL DATA PROCESSING
PURPOSES
Hupikupla processes personal data for the following purposes:
Service provision
We process personal data primarily to provide services to our customers and to conduct, maintain, and develop our business. Personal data may be used to fulfill our contractual obligations to customers. If a customer contacts our customer service, we use the information provided to respond to inquiries and resolve any problems.
Customer communication and marketing
We may process personal data to contact our customers regarding service-related matters, notify customers of changes to services, collect and process customer feedback, and market our services.
Visitor analytics and trend identification
We may process information about the use of services to improve the quality of our services, such as analyzing various usage trends and developments related to services. We use anonymized or pseudonymized data whenever possible, where individuals cannot be identified.
LEGAL BASIS OF PROCESSING
We process personal data based on our legitimate interests in conducting, maintaining, and developing our business and in creating and maintaining customer relationships. When processing your personal data based on our legitimate interests, we weigh our legitimate interests against your privacy rights.
Additionally, we process personal data to fulfill our legal obligations, such as documentation requirements under accounting law.
In some cases, we may request consent for the processing of personal data. In these cases, any consent given can be withdrawn at any time
RETENTION PERIOD
We only retain personal data for as long as required by law or as necessary to fulfill the specified purposes mentioned above.
INTERNATIONAL TRANSFERS OF PERSONAL DATA
Hupikupla primarily stores your personal data within the European Economic Area.
However, our service providers operate in various geographical areas. We and our service providers may transfer personal data or access it from countries outside the European Economic Area or your country of residence.
In such cases, we ensure that the level of protection for your personal data is adequate in the areas where your personal data is processed. We arrange sufficient protection for the transfer of personal data to countries outside the European Economic Area with our service providers through contracts based on the European Commission's approved model contract clauses or any other arrangement approved by the EU Commission, such as the Privacy Shield program.
RECIPIENT GROUPS OF PERSONAL DATA
We do not disclose your personal data to parties outside the Hupikupla organization except in the following situations:
Sharing is necessary for the purposes outlined in this Privacy Statement
To the extent that third parties need access to personal data to perform services, Hupikupla has taken appropriate contractual and organizational measures to ensure that personal data is processed solely for the purposes outlined in this Privacy Statement and in accordance with applicable laws and regulations.
For legal reasons
We may disclose personal data to third parties outside the Hupikupla organization if access to and use of personal data is reasonably necessary: (i) to comply with any applicable law, regulation, and/or court order; (ii) to detect, prevent, and address fraud or security issues, and resolve such matters; and/or (iii) to protect Hupikupla's or our customers' interests or property, or to ensure safety or public interests in accordance with the law. Where possible, we will inform customers about such transfers and processing.
To Authorized Service Providers
We may disclose personal data to authorized service providers who provide services to us (including subcontractors providing data storage, sales, marketing, and customer support services). In accordance with the commitments included in agreements with our service providers, service providers undertake to comply with at least the privacy and security standards outlined in this Privacy Statement. Please note that when you provide your personal data directly to a third party through a link on our website, for example, the processing of personal data is typically based on the documentation and standards of that third party.
With Explicit Consent
We may disclose personal data to third parties outside our organization for purposes other than those mentioned above when we have the explicit consent of the customer. Customers have the right to withdraw their consent at any time.
For Other Legitimate Reasons
If Hupikupla is involved in a merger, acquisition, or other business transaction, we may disclose personal data to a third party involved in such business transaction. However, we ensure that all personal data remains confidential in such cases. In this case, we will notify customers whose personal data is being transferred or whose processing of personal data is subject to a different privacy statement as soon as reasonably possible.
DATA SUBJECT RIGHTS
Right to Access Information
Data subjects have the right to access their personal data processed by Hupikupla. You can contact us to find out what personal data we process and for what purposes it is used.
Right to Request Correction of Information
You have the right to request the correction or completion by us of any incorrect, inaccurate, incomplete, outdated, or unnecessary personal data we hold. By contacting us, you can update your contact information, for example.
Right to Request Deletion of Information
You may request us to delete your personal data. We will take action on your request unless we have a legitimate reason not to delete the information.
Right to Object and Restrict Processing
You have the right to object to the processing or profiling of your data if your data is processed for direct marketing purposes. You also have the right to request the restriction of the processing of your personal data, for example, when the information about you is inaccurate. Additionally, in certain special situations, you have the right to object to the processing of your personal data if the basis is a personal special situation.
Right to Data Portability
Data subjects have the right to receive their personal data from us in a structured and commonly used format and to independently transfer the data to a third party.
Exercising Rights
If you wish to exercise any of the above rights, please send the following information by post or secure email: name, address, telephone number, and a copy of a valid identification document. To verify your identity, we may request additional information.
We may reject requests that are made unreasonably frequently, are excessive, or are clearly unfounded.
DIRECT MARKETING
We may send you newsletters regarding our services and other direct marketing.
Data subjects always have the right to prohibit us from using their personal data for direct marketing, market research, or profiling by contacting us using the contact information provided above or by using the unsubscribe option provided in direct marketing messages.
DATA SECURITY
We have implemented administrative, organizational, technical, and physical security measures to protect the personal data we collect and process. Our security measures are designed to maintain an appropriate level of confidentiality, integrity, and availability of data.
Only individuals whose job requires it may process personal data. The use of personal data is protected by appropriate user-specific identifiers, passwords, and access rights.
MAKING A COMPLAINT
You have the right to lodge a complaint with the supervisory authority if you consider the processing of personal data by [Hupikupla] to be contrary to data protection legislation