Graphic Concrete Privacy Statement
Your privacy is important to us. This privacy statement explains the personal data Graphic Concrete collects, how Graphic Concrete processes it and for what purposes.
Last update: May 2020
Principles of protecting personal information while using the services of Graphic Concrete
Graphic Concrete Ltd protects the personal information of the users of its services and complies with the Personal Data Act, other relevant legislation and good privacy practices. This Privacy Statement describes how Graphic Concrete collects and processes personal information. Personal information includes any data item that can be associated with an identifiable person.
The primary basis for handling personal information is the use of the services of Graphic Concrete or the consent of the user.
By submitting your personal information to Graphic Concrete, you agree to the terms of this Privacy Statement.
What information do we collect?
Graphic Concrete may collect information on the users of its services for the purposes specified in this Privacy Statement. The kind of information collected on the users is determined by the needs of different situations.
For example, your personal information may be collected when you subscribe to our newsletter, visit our website or otherwise communicate with us. Graphic Concrete collects personal details such as those mentioned below.
1. Information provided by you to Graphic Concrete
- Contact details, such as name, addresses, telephone numbers, email addresses
- Information about your interests
- Gender, title or occupation
- Place of work
- Information on the customer relationship, customer feedback, contacts, memberships, representations and replies to customer queries
- Registration data
- Information on communications and use of services and access to content in the context of various sites, events, services and channels including user-generated content
- Any permits and consents
- Any opt-in and opt-out data
- Any other data collected with your consent
2. Information observed and deduced from the use of services
When using the services of Graphic Concrete, we collect the following information:
- The website used to access the Graphic Concrete website
- Device identifiers, such as terminal device model and unique device and/or cookie ID
- Data collection channel: Internet browser, mobile browser, application and browser version
- IP address
- Session ID as well as session time and duration
- Information obtained from reliable public data sources
- Other data collected with your consent
- Browser type/version
- Operating system
- Referrer URL
- Host name of accesing computer
- Time of service request
Why do we process personal information?
1. Customer service
Your personal information may be used for user identification and to improve the services of Graphic Concrete. This helps us make our services more personal and user-friendly. Your personal information may also be used to respond to your requests and questions, carry out your choices and perform other similar tasks, as well as to provide for security and the prevention of service abuse.
2. Improving services
Your personal information may be used for inquiries and surveys related to the services and contents provided by Graphic Concrete. We can combine data collected through various services and generate statistics for the purpose of developing services.
3. Marketing and customer communications
Your personal information may be used, with your permission, for marketing and customer communications related to the services of Graphic Concrete, such as to send you notices about our services and contact you in matters concerning customer service or our services.
Do we disclose personal information?
Graphic Concrete will not, in principle, disclose your personal information to parties outside Graphic Concrete, except in the following situations:
1. Subcontractors and service providers
Graphic Concrete may use subcontractors and service providers for technical maintenance of its services, customer service, user data management and analysis, surveys, customer communications or implementation of various campaigns. Your personal information may be disclosed to the subcontractors and service providers of Graphic Concrete only to the extent necessary for them to participate in the provision of the services of Graphic Concrete and implement the functions described in this Privacy Statement.
Such third parties may not use your information for any other purpose than those described in this Privacy Statement and defined by Graphic Concrete. Graphic Concrete obliges them to keep your information confidential and provide adequate security to protect your personal information.
2. International data transfers
To carry out services and process your personal information, Graphic Concrete uses primarily providers and services located within the EU or EEA. Even if the information is transferred outside the EU, Graphic Concrete will ensure an adequate level of protection of your personal information by agreeing on the confidentiality and processing of personal data as required by law using, for example, the standard contractual clauses approved by the EU Commission. Processing of personal data is carried out in accordance with this Privacy Statement.
3. Disclosures required by mandatory legislation
Your personal information may be disclosed to satisfy the requests of competent authorities and statutory requirements.
How do we ensure the timeliness of the information?
We take all reasonable care to ensure that the personal information in our possession is valid by removing unnecessary data and updating outdated information.
Please note that it is up to you to update your personal information.
How do we protect your personal information?
We pay special attention to data protection and security in the design, implementation and maintenance of our services. We use appropriate physical, technical and administrative safeguards to protect your personal information. Data protection and security are in the hands of specifically assigned persons. Access to systems containing customer data is limited to employees who need to process such data in the course of their work duties. The data is saved in databases protected by firewalls, passwords and other technical means.
In the implementation of data protection and security, we use measures such as proactive risk management, awareness of data protection and security during service design, providing training to our employees, and regularly verifying that our services comply with laws and regulations.
Cookies may be stored on the visitor’s computer from time to time.
Cookies can be used to collect information about the website that you came from, which pages you have viewed and when and what is the IP address of your computer, that is, what is the online origin of data sent by you and where to receive information sent by us.
Cookies help Graphic Concrete and its partners track the volume of service users as well as analyse and develop services to better serve the visitors. In addition, the partners of Graphic Concrete may target advertising by using cookies that collect information about users’ visits to this and other sites. The information collected with cookies is used to provide targeted advertising based on the visitor’s interests. When targeting advertising with cookies, visitors are not identified and the information is not linked to any personal information received from the user in some other connection.
Visitors can block cookies by changing their browser settings so that the browser does not allow cookies to be saved. The visitor accepts the fact that the blocking of cookies may affect the functionality of some services.
How long is the information retained?
We will retain your information in accordance with current legislation only for as long as is necessary for the purposes defined in this Privacy Statement or for a maximum of five years after the last activity. Once the basis for processing your personal information has ceased to exist, we will remove your personal information.
What are your rights?
Under law, you are entitled to inspect the information we have collected about you. You also have the right to demand correction or removal of incorrect, incomplete, unnecessary or outdated personal information.
You can make a request for inspection or removal of your customer data by emailing contact(at)graphicconcrete.com. To identify the user, the request must be sent from the same email address that you have provided to Graphic Concrete. Information about the personal data on file will be returned to that address.
Changes to this Privacy Statement
Graphic Concrete may periodically make changes to this Privacy Statement without prior notice. Such changes may also be warranted by changes in legislation. We recommend that you read this Privacy Statement from time to time to learn about any changes.
Who is the controller and who can I contact?
The controller of your personal information is Graphic Concrete Ltd at Itälahdenkatu 18 C 5 krs, 00210 Helsinki.
Please note that for security purposes we may need to verify your identity before fulfilling your request.