Privacy Policy /-clause

Updated 20 May 2021

Introduction

The careful and cautious processing of your personal data is important to us at PRP-Plastic Oy. We process your personal data in compliance with data protection legislation and good information management and processing practices.

The data we process can be divided into: data provided by the user, data observed from the use of online services, and data derived with the help of analytics.

We use the data to deliver and personalize services, for customer service, and to display more relevant advertising.

Please note that our websites may contain links to other companies’ sites or services that have their own privacy practices separate from PRP-Plastic Oy. In such situations, we recommend familiarizing yourself with the privacy practices of the third parties in question.

Our privacy practices may change slightly as we develop services or as legislation changes. You can find up-to-date information about our practices on this website.

Please also read the register statement in accordance with the Personal Data Act.

More information:

• In the processing of personal data, we always comply with the basic principles defined in the GDPR:

• personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”)
• personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (“purpose limitation”)
• personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimization”)
• personal data must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”)
• personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (“storage limitation”)
• personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (“integrity and confidentiality”).

For what purposes do we collect your personal data?

Your personal data may be used to provide products and services, respond to your requests and questions, perform contracts, process orders, and carry out other similar activities. Your data is also used for PRP-Plastic Oy’s risk management and for fulfilling obligations based on legislation and authorities’ regulations and instructions, such as identifying users and ensuring information security as well as preventing and investigating misuse.

We also use your personal data for customer communications. For example, we may send you bulletins and change notifications regarding our products and services. We may use your personal data for the marketing of products and services and for market research with your permission or when otherwise permitted. In addition, we may also use your personal data to target our products and services to you, for example by recommending or displaying targeted content in our service.

With your permission and within the limits permitted by law, we may also combine data collected in connection with a certain product and/or service with data collected in connection with our other products and/or services.

What data do we collect?

Our register contains personal data of persons who have a customer relationship with PRP-Plastic Oy.

We collect, among other things, the following personal data about you:

Data provided by the user or personally identifying data:

• contact details, such as name, address, phone number, email address
• registration details required for a digital account, such as username, nickname, password and any other possible unique identifier
• demographic information, value or profession, and native language
• data related to the customer relationship, such as billing and payment details, product and order details, customer feedback and contacts, draw and competition response details, and cancellation details
• profiling and interest data provided by the user
• permissions and consents
• data provided in surveys and studies
• other data collected with the user’s consent

Data observed from the use of services:

• usage and browsing data of the service features, advertisements that have been shown, and data about clicking on advertisements.
• the page from which the user moved to our pages, the device model, a unique device and/or cookie identifier, the data collection channel (internet browser, mobile browser, application), the browser version, IP address, internet service provider, session identifier, session time and duration, and screen resolution and operating system.
• the identifier of an observed, non-logged-in user is typically a cookie or other similar identifier.
• location data, such as coordinates calculated using GPS or WLAN access points or mobile network base stations, if the user has given explicit permission for this.
• we monitor what files users download from our sites. With this information, we aim to find out what information is most essential for the users of our site.
• on certain pages, we use separate analytics software to analyze the structure of our website. We are able to check whether people have problems navigating the website. This enables us to improve the structure and offer a better experience to visitors
• other data collected with the user’s consent.

How do we collect your personal data?

We collect your personal data primarily directly from you either orally or in writing. They may be data collected by us ourselves or by our partners on our behalf.

Forms sent through the pages contain personal data: at a minimum, first name, last name, and email address. By submitting the form, you accept that the owner of the pages records the personal data you provide in their own system in order to deliver the service you requested.

The data may also be collected by services we use.

In addition, we receive information from registers maintained by authorities, from credit information and customer disturbance registers, and from other reliable registers.

We may use cookies (small text files stored on the device) on our sites so that our services work as well as possible.

Use of cookies:

You can edit cookie settings from the lower left corner of the page.

The stored information is stored in the form of a cookie (“cookie”), or a similar file. This way we can serve you better. Cookies are small text files that are transferred from the website to your hard drive or browser, which in turn can store the cookie on your hard drive.

According to the Act on the Protection of Privacy in Electronic Communications, storing cookies or other data describing the use of the service on the user’s terminal device and using such data is permitted for the service provider if the user has given their consent and the service provider provides the user with understandable and comprehensive information about the purpose of the storage or use.

PRP-Plastic Oy may use cookies to identify returning visitors and determine the order in which pages are used. The aim is to measure how effectively the PRP-Plastic Group’s website is visible on the Internet. The data collected with cookies are combined and compiled anonymously.

Cookies tell the time and duration of the visit to the site, and which pages you visited and from which site you came to our site. They also tell your Internet service provider. With the help of the data, we can measure website traffic and tailor the site according to your wishes. The goal is that using the site is faster and more useful. Because the data tells how and when our site is used, we can continuously develop the site. Cookies are used only to view data on your hard drive that the website has stored. We do not collect personal data with cookies, such as names or email addresses.

We use session-specific and persistent cookies. Session-specific cookies exist only for the duration of the session, i.e., one transaction, and they are automatically deleted when the browser is closed. Persistent cookies exist for a period of time, and they remain on the computer even after the end of the session, unless you delete them yourself before that.

Cookies do not harm your device or your files.

You can control the use of cookies, for example through the management functions of browsers. More information about cookies can be found in the privacy or instruction documentation of each browser.

The use of cookies may change due to the continuous development of web technology. With the help of the following list, we aim to provide information about our purposes for using cookies:

Edit cookie settings

How do we process your personal data?

We process your personal data in accordance with the GDPR, respecting your rights and freedoms. We ensure that data protection principles are complied with at all stages of personal data processing.

Your data is processed only by those employees of PRP-Plastic Oy or its partners who have the right to process personal data. We have ensured staff information security awareness and competence through continuous training and up-to-date instructions.

Your personal data may be processed in several different information systems, which are managed either by PRP-Plastic Oy or its partners.

More information:

With partners, we have valid agreements in accordance with the data security regulation. In accordance with them, we have received sufficient guarantees from personal data processors that the processing of personal data they perform meets the requirements of the GDPR.

In connection with the processing of personal data, we have implemented appropriate technical and organizational measures to implement data protection principles. Technical and organizational measures refer to protective measures such as staff training, instructions and regulations given to staff, confidentiality commitments, access control, usage monitoring through self-monitoring, information system security, data encryption, data anonymization, data pseudonymization, audits, remote access connections, technical restrictions, inspection and monitoring systems, the data accounts reporting process, the implementation of codes of conduct and certificates.

To whom do we disclose your personal data?

PRP-Plastic Oy purchases certain personal data processing services from partners. We have selected only such personal data processors as partners who comply with good personal data processing practices through appropriate technical and organizational measures, meet the requirements of the GDPR, and are able to ensure the realization of your rights.

With all partners, there is a written agreement defining the subject, purpose and duration of the processing of personal data and agreeing on the personal data to be processed.

We process data as a rule within the EU and the EEA.

How long do we store your personal data?

We retain your data at least for the duration of the customer relationship. After the end of the customer relationship, the retention period depends on the data and its purpose of use.

We strive to keep the personal data in our possession correct and up to date by deleting unnecessary data and updating outdated data

Your rights as a customer

You have the right to inspect the data concerning you, the right to request the rectification of incorrect or incomplete data, as well as the deletion of data in the register that is unnecessary or outdated in terms of the purpose of processing.

You also have the right to prohibit the use of your data for direct marketing as well as for market research and opinion polls by contacting the controller.

You have the right to be notified of a personal data breach involving your personal data

We have an obligation to notify personally those data subjects whose data is affected by a personal data breach. The right comes into force if the breach is likely to result in a high risk to the rights and freedoms of the individual, for example in the form of identity theft, payment instrument fraud, or other criminal activity

Who can you contact?

Please address inquiries and requests concerning the processing of personal data primarily to the controller at: prpplastic@prpplastic.fi.

Please also read the register statement in accordance with the Personal Data Act.