PRIVACY POLICY

 

DATA PRIVACY STATEMENT

​

This is NOSTE Productions Oy EU GDPR compliant privacy policy and user data privacy statement.

Written on 1st of September 2021. Latest changes on the 3rd of March 2023. 

​

We respect laws on privacy protection when processing personal data. All data is processed confidentially and in compliance with our obligations towards our customers. We collect and process only the personal data relevant to the purpose of each processing. 

​

​

1. Register owner 

​

NOSTE Productions Oy, Sininärhentie 5 C 49 02650 ESPOO 

​

2. Contact person of the register owner 

​

Johanna Saarinen, johanna (a) nosteproductions.fi, 050 303 5013 

​

3. Register name 

​

NOSTE Productions customer data register/ NOSTE Productions marketing data register 

​

4. Type of information we collect 

​

We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. If you use our forms, we also collect personally identifiable information (including name, email, and message you send to us). 

​

5. Legal basis and purpose of processing personal data 

​

The purpose of processing personal data is to communicate with customers, maintain and develop customer relationships and market the company’s services. We process data on the following legal basis, based on the EU General Data Protection Regulation: 

• By consent of the person 

• A written contract with the person 

• Legitimate interest of the data collector 

​

6. Content of the register 

 

- Customer data register: The information to be collected to the customer data register is either part of these or all of these: name, title, company/organisation, contact details (phone number, email, company address), website, IP-address, invoicing information, social media profiles, information on services ordered/bought and other information related to the customer relationship. The data collected is kept as long as it is necessary, based on the purposes mentioned in the section five (5), but six (6) years at the most. When the information is no longer needed for the above purposes, the data will be deleted or anonymized 

​

- Marketing data register: The Te information to be collected to the marketing data register is either part of these or all of these: name, title, company/organisation, contact details (phone number, email, company address), website, IP-address, invoicing information, social media profiles, information on services ordered/bought and other information related to the customer relationship. The data collected is kept as long as it is necessary, based on the purposes mentioned in the section five (5), but six (6) years at the most. When the information is no longer needed for the above purposes, the data will be deleted or anonymized 

 

 

IP addresses of website visitors and necessary cookies for the functions of the service are processed on the basis of a legitimate interest, e.g. to take care of information security and for the collection of statistical data of website visitors in those cases when they can be considered as personal data. If necessary, consent is requested separately for third-party cookies. 

 

7. How we collect information on the website 

​

When you conduct a transaction on our website, as part of the process, we collect personal information you give us such as your name, address and email address. Your personal information will be used for the specific reasons stated above only. The information to be saved in the register is obtained from the customer, e.g. From messages sent via web forms, by e-mail, by phone, via social media services, contracts, customer meetings and other situations where the customer gives out their information. 
 
Public information about contact persons of companies and other organizations can also be collected from public sources such as websites, directory services and other companies. 

 

8. How we store the information 

​

Our company website is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to market our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. Information collected on the website with the help of cookies is never forwarded or shared to an unidentifiable recipient. 

 

9. Third-party cookies 

​

Third-party cookies are small text files stored on the user's device. They are created by a website with a domain name other than the one the user is currently visiting. NOSTE Productions uses Google Analytics to monitor visitor data, develop the visitor experience and create overall statistics. Google Analytics is a service provided by a third party that transfers website traffic data to its (Google) servers in the United States. Google Analytics does not track the personal data of the website visitor, but it anonymously tracks the pages the visitor visits and what the visitor finds interesting within the nosteproductions.fi website. This way we learn which of the contents are the most interesting and we can guarantee the best possible user experience for visitors. 

If you give your consent in the cookie bar that appears when you visit our website, you agree that Google will process data about you in the manner described in Google's privacy policy (external website). You can refuse the use of Google Analytics by blocking cookies, deactivating JavaScript or using the (opt-out) service provided by Google for this purpose (external website). 

​

10. Principles of register protection 

​

Required care is taken when processing the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job requires to do so. 

 

11. The right of review and the right to demand correction of information 

​

Every person whose data has been stored in the register, has the right to review their information stored in the register and demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about them or demand correction, the request must be sent in writing to the data controller. If necessary, the registrar can ask the requester to prove their identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month). 

 

12. Other rights related to the processing of personal data 

​

A person in the register has the right to request the removal of personal data about them from the register ("the right to be forgotten"). They have the right to have their data erased, without undue delay, by the data controller, if one of the following ground applies: Where their personal data are no longer necessary in relation to the purpose for which it was collected or processed.  

Those registered also have other rights according to the EU General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests must be sent in writing to the data controller. If necessary, the registrar can ask the requester to prove their identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month). 

 

13. Privacy Policy updates 

 

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.