PRIVACY STATEMENT - CONSUMER CUSTOMERS
This Privacy Statement (“Privacy Statement”) explains how Inderes Oyj (“Inderes” or “Us”) processes the personal data of Users using Inderes' services (“Service”) via Inderes’ websites.
In this Privacy Statement:
“User” refers to any natural person using the Service.
Inderes reserves the right to update this Privacy Statement to reflect changes in Inderes’ data processing practices, legal requirements, or operational needs. The most recent version of this Privacy Statement will always be available at Inderes’ websites.
DATA CONTROLLER AND CONTACT INFORMATION
Inderes Oyj, Business ID 2277600-2
Porkkalankatu 5, 00180 Helsinki
Victor Mustala
+358 50 358 1234
privacy@inderes.com
PROCESSED PERSONAL DATA AND THEIR SOURCES
Inderes processes the User’s email address, name, and username, which are collected when the User creates a Service account. If the User holds a Premium account, their address is also processed.
Inderes processes profile data collected voluntarily on Inderes’ websites and analyses User behaviour data to enhance the Service’s user experience.
PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
Inderes processes personal data in accordance with this Privacy Statement for the purposes listed below, along with their corresponding legal bases:
INTERNATIONAL DATA TRANSFERS
Inderes primarily stores personal data within the EU/ EEA. However, Inderes and/or Inderes’ service providers may transfer personal data to, or access it from, countries outside the EU/EEA.
Inderes ensures that personal data is appropriately protected in all countries where it is processed. When personal data is transferred outside the EU/EEA, Inderes takes steps required by applicable data protection laws to ensure an adequate level of protection, including by using appropriate safeguards for such transfers.
DISCLOSURE OF PERSONAL DATA
Inderes shares personal data within the organisation (and, where applicable, with group companies) only to the extent reasonably necessary to fulfil the purposes described in this Privacy Statement or to comply with legal or contractual obligations.
Inderes discloses personal data to external third parties only in accordance with this Privacy Statement and applicable law, and only where one of the following applies:
STORAGE PERIOD
Inderes does not store personal data longer than permitted by law or longer than necessary to fulfill the purposes described in this Privacy Statement. The storage period depends on the type of personal data and the specific purpose for which it is processed. Therefore, the storage period may vary based on how the data is used.
YOUR RIGHTS
Right to access your data
You have the right to access or request a copy of the personal data Inderes processes about you. Inderes may refuse to provide a copy if doing so would compromise the rights or freedoms of others.
Right to withdraw consent
If Inderes processes your personal data based on your consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
Right to correct data
You have the right to correct or complete any incorrect or incomplete personal data Inderes holds about you.
Right to delete data
You can request that Inderes permanently deletes your personal data from Inderes’ systems. Inderes will carry out the request unless Inderes has a lawful reason not to delete the data.
Right to object to processing
You have the right to object to Inderes’ processing of your personal data where Inderes relies on legitimate interest as the legal basis. Inderes will stop processing your personal data unless Inderes has a legal basis to process your personal data. Please note that exercising this right may limit your ability to fully use the Service.
Right to restrict processing
You have the right to request that Inderes restricts the processing of your personal data, for example, while Inderes reviews a deletion or correction request or when there is no valid legal basis for continued processing. Please note that exercising this right may limit your ability to fully use the Service.
Right to transfer data
You have the right to receive your personal data in a commonly used format and to transfer it to a third party of your choice.
How to exercise your rights
You can exercise these rights by sending an email to the address provided above, including your full name, address, email address, and telephone number. Inderes may ask for additional information to confirm your identity. Requests that are too frequent, excessive, or clearly unfounded may be refused.
REFERRAL TO AN AUTHORITY
If you believe that Inderes’ processing of personal data violates applicable data protection laws, you have the right to file a complaint with your local supervisory authority. In Finland, the competent authority is the Finnish Data Protection Ombudsman.
CYBER SECURITY
Inderes implements administrative, organisational, technical, and physical measures to protect the personal data Inderes collects and processes. These measures include, where applicable, encryption, pseudonymization, firewalls, secure storage facilities, and systems with restricted access rights. Inderes’ security framework is designed to maintain the confidentiality, integrity, availability, and resilience of Inderes’ processing systems, as well as to enable secure data recovery when necessary.
If, despite these measures, a security breach occurs that is likely to negatively impact your privacy, Inderes will notify the affected individuals and, where required by law, the appropriate authorities as soon as possible.