Privacy Policy

Quva Oy (“Quva”) is committed to respect privacy and to comply with applicable data protection and privacy laws. This Privacy Policy describes how we collect and use personal data where Quva is the controller. Quva will process personal data in accordance with this Privacy Policy and applicable laws. This policy was updated on May 9, 2018

1. Controller                                          

Quva Oy

Business ID: 2348506-3

Sumeliuksenkatu 18 B

33100 Tampere

Phone: +358 45 2086 816

Email: etunimi.sukunimi@quva.fi

2. Contact person

Olli Pasanen

Quva Oy

Email: firstname.lastname@quva.fi

3. Name of the register

Quva Oy’s Marketing Register.

4. Purposes of processing of the personal data

The main purpose of Quva’s processing of personal data is to:

Collecting and processing of personal data is usually based on data subject’s consent or legitimate interests of the controller.

5. Categories of data subjects and of categories of personal data

Quva may collect personal data of customer’s, potential customer’s and partner’s contact persons. Quva may also collect personal data or other information when data subjects visit on Quva’s websites.

The Quva’s Marketing Register may include following categories of personal data:

6. Source(s) from which the personal data originate

Personal data and other information may be collected when data subjects provide information to Quva, visit Quva’s websites (including social media accounts), participate research or campaigns, request services, sign up for newsletters, download guides or otherwise interact with Quva.

Personal data and other information may be updated also from Quva’s other registers, partners’ registers or supervisory authorities’ and other authorities’ registers merely to the extent provided for by applicable law.

7. Duration of processing personal data

Quva discard obsolete and unnecessary personal data in an appropriate manner. Quva only retain personal data as long as it is necessary for the purpose of processing. As required by law or competent authority personal data may be stored for longer.

8. Disclosure and transfer of personal data

In general, Quva uses the personal data only for its internal business purposes and does not transfer the data to any external parties. Some of the personal data may be disclosed to or transferred to third parties merely to the extent provided for by applicable law.

Personal data is only disclosed and transferred within Quva and to such third party service providers, who assist Quva in facilitating and providing its services as well as fulfilling its obligations towards authorities, customer and co-operation partners. Any third party having or gaining access to personal data will have access to and may use such data only to the extent it is necessary for the performance of the tasks and activities agreed upon with Quva and subject to written agreements including appropriate conditions to ensure the confidentiality and sufficient data protection.

Personal data may be transferred third party service providers outside the European Economic Area (EEA), for example the United States of America. In such cases Quva shall ensure that there is a legal basis for such a transfer and that adequate protection for personal data is provided as required by applicable law.

As required by law or competent authority data may also be disclosed and transferred to supervisory authorities and other authorities.

9. Cookies

Quva uses cookies and other similar technologies on its websites. Cookies are very small text files that are stored on computer or other device when user visit websites. These records typically include IP-address, access times, the sites linked from, pages visited, the links and features used, the content viewed or requested, browser or application type, language and other such information.

Quva uses website analytics, such as Google Analytics and Leadfeeder, to gather statistics about the users of the Quva’s website with the aim to improve the contents of the website. Generally, the information we collect using these website analytics does not identify person by name. If, however, user signs up on a newsletter or download guide on Quva’s website, Quva may link the information Quva collects using website analytics to other information that identifies person. Quva uses MailChimp to send newsletters to subscribers. MailChimp is a service provided by The Rocket Science Group, USA.

Cookies can be disabled or set browser to alert when cookies are being sent to device. However, disabling cookies may affect ability to use the Quva’s websites.

10. Rights of data subject

Right of access

Data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed in the register, and, where that is the case, access to the personal data.

Right to restriction of processing

Data subject has the right to obtain from the controller restriction of processing personal data, if controller is restricted processing of personal data under applicable law. However, the right shall not apply if there is other legal ground that permits controller processing of personal data.

Right to erasure (‘right to be forgotten’)

Data subject has the right to obtain from the controller the rectification of inaccurate personal data, incomplete personal data completed and the erasure of personal data concerning him or her. However, the right shall not apply if there is other legal ground that permits controller processing of personal data.

Right to data portability

Data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller.

Right to object

Data subject has the right to object at any time to processing of personal data concerning him or her for direct marketing.

Right to lodge complaint

Data subject has right to lodge a complaint with the relevant supervisory authority in the event the data subjects have concerns or remarks regarding Quva’s processing activities.

Other rights

Should the processing of personal data be based on data subject’s consent, data subject may at any time revoke consent by contacting Quva.

11. Contacting Quva

Anyone who wishes to use data subject rights, shall submit a written request to this effect to Quva as a personally signed or otherwise comparably verified document or appear personally in the premises of the Quva entity. Quva may ask to clarify request and verify identity person before processing any requests. Quva may not necessarily be able to fully meet the data subject’s request, if there is legal grounds that prevents Quva to adhere to the data subject’s request. In this case, the data subject will be duly notified thereof.

Quva shall provide information on action taken on a request to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. Quva shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.

12. Automated decision-making and profiling

Quva is not using personal data for automated decision-making and profiling.

13. Safeguards

Quva has assigned specific responsibilities to address privacy and security related matters. We enforce our internal policies and guidelines through an appropriate selection of activities, including proactive and reactive risk management, training and assessments. We take appropriate steps to address online security, physical security, risk of data loss and other such risks taking into consideration the risk represented by the processing and the nature of the data being protected. Also, we limit access to our data bases containing personal data to authorized persons having a justified need to access such information

14. Changes to this privacy policy

Quva may change this privacy policy as the operations or services change or develop. Because of this, Quva encourage you to regularly review the latest privacy policy.