Privacy Policy

O.V. Lahtinen Oy (“O.V. Lahtinen”, “We”, “Our”, “Us”) respects the privacy of those using our [online marketplace platform] for [container sales and rentals], including our website (found at www.ovlahtinen.com) as well as any other service provided by by us related to it (together “Services”). This Privacy Policy helps you understand what personal data and non-personal data We collect, and how such data is used and processed. We receive, collect and process your personal data when you as a data subject (“you”, “data subject”), use the Services.

“Personal Data” refers to data which can identify a data subject directly or indirectly as defined in the European Union’s General Data Protection Regulation 2016/679 (“GDPR”). This is opposite to “non-personal data” meaning data that cannot be used to specifically identify any person. When processing your personal data, we comply with the GDPR and other applicable laws regulating the processing of personal data. Key terms used in this Privacy Policy, such as data subject, processing, controller and data subject’s rights shall have the meaning defined in the GDPR.

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. If we make significant changes to this Privacy Policy, we will post a notice in the Service along with the updated Privacy Policy or contact you by email (using the address you have provided in the Services).

LEGAL BASIS FOR PROCESSING

The legal basis for the processing of your Personal Data is, where not stated otherwise or another legal basis is otherwise applicable, the performance of the contract for providing Our’ Services to you, as permitted by GDPR article 6(1)(b).

O.V. Lahtinen can also process your Personal Data where We have a legitimate interest to do so, as permitted by GDPR article 6(1)(f), such as for marketing purposes. Where We rely on legitimate interests as a reason and legal basis for processing personal data, We have considered whether or not those interests are overridden by the rights and freedoms of the data subjects and We Have concluded that they are not.

Where the processing is such that your consent is required by the applicable legislation, We will state so and obtain your consent, and this will be the legal basis for the processing of your Personal Data, as permitted by GDPR article 6(1)(a). However, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If such withdrawal means that We are no longer able to provide the Services to you, We may cease to provide the Services.

TYPES OF PERSONAL DATA AND SOURCES

Personal Data collected and processed by O.V. Lahtinen is mainly collected directly from the data subject. O.V. Lahtinen will only collect such Personal Data that is relevant for the purposes described in this Privacy Policy, including information you give to us, and technically gathered information when you use Our Services.

While the provisioning of certain Personal Data is necessary for the use of Our services, certain Personal Data is provided voluntarily. Personal Data may be updated and supplemented by collecting data from private and public sources, such as commercially available directories and websites.

Personal Data and non-personal data are collected directly from you, such as through registration or by logging the activities in the Services.

This data may include:

*sections thus marked are necessary to provide the Services and fulfill legal obligations. Furthermore, the blocking or the non-provisioning of certain personal data may affect the proper functioning of the Services or O.V. Lahtinen may not be able to provide the Services if said data is not provided.

If you do not provide O.V. Lahtinen the required information, this may mean that We are not able to provide the Services to you, perform the contract necessary for the provisioning of the Services or to comply with O.V. Lahtinen’ legal obligations.

In addition to Personal Data, O.V. Lahtinen will collect non-personal data relating to you. This information includes either anonymous or anonymized data or data linked to Personal data that is generated during the use of the Services, such as actions in the Services and access times.

O.V. Lahtinen retains the Personal Data collected pursuant to this Privacy Policy for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Thereafter, if the collected Personal Data is no longer needed for purposes specified in this Privacy Policy, O.V. Lahtinen will delete all aforementioned Personal Data in its possession within a reasonable timeframe or render it anonymous, meaning “non-personal data”. Further, O.V. Lahtinen will store the following categories of your Personal Data for the retention periods outlines below:

HOW PERSONAL DATA IS USED  

Your Personal Data may be used in order to:

• Provide the Services as requested by you;
• Improve and personalize the Services, as well as to develop new products and services;
• Correspond with you regarding customer service issues;
• For marketing and communication purposes;
• To enforce the terms of the Services;
• Ensure the functioning and maintenance of the Services;
• Ensure you of compliance with the Terms and this Privacy policy; and
• To comply with legal obligations applicable to O.V. Lahtinen

O.V. Lahtinen will use your Personal Data for targeted in-service marketing and other similar purposes, and upon your consent, to email marketing by O.V. Lahtinen. You can opt-out of receiving promotional emails by following the instructions in those emails. If you opt-out, O.V. Lahtinen can still send you non-promotional customer information, such as emails about your account, providing the Services or regarding Our ongoing business relationship.

THIRD PARTY ANALYTICS TOOLS AND DISCLOSING INFORMATION

For the purposes stated in this Privacy Policy, Personal Data may be disclosed to third parties, such as third-party service providers. In such a case, the Personal Data will only be disclosed for purposes set-out in this Privacy Policy. A list of the processors and other recipients can be provided upon request.

In order to analyse and improve the Services, O.V. Lahtinen uses third party service providers and tools provided by the third-party service providers to collect and use non-personal data. Data Subjects can decline the collection and storage of such data from their devices’ settings.

O.V. Lahtinen will not disclose your stored Personal Data to third parties for direct marketing, market research, polls or public registers without your consent or except as part of a specific program or feature for which you will have the ability to opt-in or opt-out. O.V. Lahtinen has the right to share non-personal data (such as anonymous usage data, platform types, asset views, number of clicks, etc.) with interested third-parties to assist them in understanding the usage patterns for certain content, services, advertisements, promotions, and/or functionality of the Services.

Personal Data may also be transferred regularly outside the European Union and the European Economic Area (“EU/EEA”) to O.V. Lahtinen’ service providers. In case Personal Data is transferred outside EU/EEA, such transfers are either made to a country that is deemed to provide a sufficient level of privacy protection by the European Commission or transfers are carried out by using appropriate safeguards such as standard data protection clauses adopted or otherwise approved by the EU Commission or competent data protection authority in accordance with the GDPR. More information can be provided upon request.

SECURITY

O.V. Lahtinen takes reasonable measures to protect Personal Data as the data is transferred from your devices to O.V. Lahtinen and to protect the data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, you should always keep in mind that no Internet transmission is 100% secure or free from errors. For the avoidance of doubt, the safeguarding of all account registration information and credentials are your responsibility.

The register will be maintained on external service providers’ servers with appropriate safeguards. The register is protected by appropriate industry standard, technical and organizational safety measures. Although O.V. Lahtinen makes good faith efforts to store the data collected from the Services in a secure operating environment that is not available to the public, O.V. Lahtinen cannot guarantee the absolute security of that information during its transmission or its storage on Our systems. O.V. Lahtinen will post a notice in the Services in case material security breach that endangers your privacy or Personal Data, and if necessary, will contact affected Data Subjects directly. O.V. Lahtinen may also temporarily shut down the Services to protect the Personal Data.

COOKIES AND OTHER TRACKING TECHNOLOGIES

A cookie is a string of information or a small text file that a website stores on a visitor’s device, and that the visitor’s browser provides to the website each time the visitor returns. O.V. Lahtinen may utilize cookies to help it identify and track visitors, their usage of the Services’ website access preferences, improving quality, tailoring recommendations, and developing the Services. Data subjects who do not wish to have cookies placed on their computers can set their browsers to refuse cookies before using the O.V. Lahtinen websites, with the drawback that certain features of the website may not function properly without the aid of cookies.

If O.V. Lahtinen will use other tracking technologies in addition to cookies, O.V. Lahtinen shall notify you of use of such tracking technologies.

You can set or amend your web browser controls to accept or reject cookies. If you choose to reject cookies, you may still use our websites and some services, however your access to some functionality and areas of our website or services may be restricted substantially.

For more information, see our Cookie Policy.

RIGHTS OF DATA SUBJECTS AND CONTACT INFORMATION

Right to access

You may contact Us, and We will inform you what Personal Data We have stored regarding you, and the purposes such data is used for.

Right to rectification

You have the right to have Us correct any incorrect, incomplete, outdated, or unnecessary Personal Data stored about you by contacting Us at the email address provided bellow.

Right to erasure

You may also ask Us to delete your Personal Data from Our systems. We will comply with such request unless We have a legitimate ground to not delete the data. After the data has been deleted, We may not immediately be able to delete all residual copies from all of Our systems. Such copies shall be deleted as soon as reasonably possible.

Right to Object or Restrict Processing

You may object to certain use of Personal Data when such processing is based on legitimate interest, including direct marketing or profiling. You may opt-out of receiving promotional emails by following the instructions in those emails. If You opt-out, We may still send you non-promotional customer information, such as emails about Your account, providing Our services and products or Our ongoing relationship with You.

You may request that We restrict processing of certain Personal Data. Your Personal Data will then only be stored and not processed otherwise; this may however lead to fewer possibilities to use the Services. If such restriction means that We are no longer able to provide the Services to you, We shall be entitled to stop providing the Services.

Right to data portability

You have the right to receive Personal Data provided by You to Us in a structured, commonly used format. We provide no guarantee that this information will be compatible, relevant or useful to any other service.

How to exercise your rights

These rights may be used by sending a letter or e-mail to the addresses set out below. Your identity will be verified before the information is given out, which is why We may have to ask for necessary additional details. We will respond to the request within a reasonable amount of time and, where possible, within one month of the request and the verification of Your identity. If your request cannot be met, the refusal shall be communicated to you in writing. O.V. Lahtinen may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

Complaints

If you consider Our processing activities of Personal Data to be inconsistent with the applicable data protection laws, you have the right to lodge a complaint with a supervisory authority for data protection applicable to the jurisdiction You are in.

Contact info:

O.V.Lahtinen Oy

Business ID: 2155907-3

Email: sales@ovlahtinen.fi

WWW: www.ovlahtinen.com

This Privacy Policy has been published on 29/03/2023, version 1.0.