HKScan Oyj, 0111425-3, and/or any affiliate entity owned or controlled by HKScan Oyj in Finland (hereinafter jointly and separately “HKScan”, “we”, “us”) is the data controllers in relation to the processing of your personal data as a consumer. Therefore, this privacy notice applies to communication between you and us as part of HKScan’s consumer services or consumer marketing activities in Finland.

On this page, we describe how we collect, process and share the personal data that we receive, collect and store. Personal data means any information which may be used to identify an individual.

It is important to us that you feel safe with how we handle your personal data. We take measures to ensure that your personal data is protected and that the processing of your personal data is carried out in accordance with applicable data protection regulations and our internal policies and procedures. In order to obtain more specific information of the retention periods of personal data, please see your local language version of this privacy notice.

We may collect your personal data in the following ways:

Personal data that you give to us, e.g. by way of filling in forms on our website, corresponding with us through website’s chat function, by telephone or email.

Personal data that we collect or generate automatically, e.g. when you visit our website, we will automatically collect personal data about you and your visit from website cookies that we use, including the internet protocol (IP) address used to connect your device to the internet (read more about processing of your personal data on our websites here).

We process your personal data for the following purposes:

Answer questions and handle feedback

If you contact us to provide feedback or ask questions, we will process your personal data for the purposes of answering your questions and handling feedback. You may provide feedback or questions to us via different channels, e.g. by filling and submitting forms on our website, by communicating with us through website’s chat function or by calling our consumer services.

Answer complaints and handle claims

If you contact us to provide a claim for compensation, such as complaint on the quality of our product and a claim for compensation due to harms caused by our product, we will process your personal data for the purposes of answering your complaint and handling the claim.

Ensure quality of and improve our consumer services

When you contact us by telephone, we will automatically record calls received. In this connection, we may process your personal data for the purposes of ensuring quality and improving our consumer services. For instance, we may use call records to ensure that you have received good service from us or to improve the quality of our consumer services through internal trainings.  

Promote our brand and carry out prize draws or competitions

When you participate to price draws or competitions organized by us, we will process your personal data for the purposes of promoting our brand in connection with carrying out the prize draw or competition in question. We will contact prize draw or competition winners separately in order to deliver the prize. You may participate to our price draws or competitions by providing your personal data to us through digital platforms (e.g. social media or our website) or on live events.  

Communication for brand building and marketing purposes

If you sign up to subscribe newsletters or similar information provided by automatic means, we will process your personal data for the purposes of providing the requested subscription or information to you as well as in order to promote our brand and products.

Comply with legal obligations

We process your personal data in order to fulfil legal obligations, e.g. accounting or tax related obligations.

Where necessary, we share your personal data with others. The recipient is the data processor for the processing of your personal data, unless we have stated otherwise.

We share your personal data with:

Service providers

In order to fulfil the purposes of the processing of your personal data, we share personal data with service providers that we have engaged. These service providers provide IT (such as operation, technical support and maintenance of IT systems), consulting and marketing services to us. The service providers may only process your personal data for these purposes and in accordance with our instructions and not for their own purposes. We are the data controller for the processing of personal data that the service providers carry out on our behalf.

Other recipients

In certain cases we share, if necessary, your personal data with other recipients for certain purposes e.g. when fulfilling our legal obligations or handling and defending legal claims.

We always strive to store and process personal data within the EU/EEA. However, some of our service providers are located outside the EU/EEA and in such a case personal data will be processed outside the EU/EEA. In order to ensure that the personal data is protected we make sure that appropriate safeguards are in place in relation to the service providers which handles your personal outside the EU/EEA, e.g. by way of data transfer agreements (which include standard data protection clauses adopted by the EU Commission). If you have questions regarding to which countries your personal data is transferred and which safeguards we take to protect your personal data, or to request a copy of such safeguards and information, respectively, where they are available, please contact us at privacy@hkscan.com.

Under data protection regulations, you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfill your rights. Please submit requests for exercising your rights through our data privacy website or by contacting us at privacy@hkscan.com.

You have the right to:

Access your personal data

You have the right to access personal data we process about you. You may request a copy of your personal data through our data privacy website, which can be found here. We will provide you with it unless we have lawful reasons not to share this data or if sharing the data would adversely affect the rights and freedoms of others.

Update your personal data

Furthermore, you have the right to request that incorrect or incomplete personal data is corrected or completed.

Withdraw consent

To the extent we rely on your consent to process personal data you have the right to at any time with­draw your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Object to the processing of personal data

You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concerns your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest over­rides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims.

Delete your personal data

Under certain circumstances you have the right to request that your personal data is deleted. However, we cannot delete your personal data if we for example are obligated under law to keep the data.

Restrict the use of your personal data

You have the right under certain circumstances to request that the processing of your personal data is restricted. If the processing of your personal data has been restricted we may only, besides storing the data, process your personal data with your consent, or in order to establish, exercise or defend legal claims or to defend rights of others.

Transfer your personal data (data portability)

Finally, you have the right to request a copy of the personal data that we store about you in a struc­tured, commonly used and machine-readable format (data portability). The right to data portability, compared to the right to access, only comprises such personal data you yourself have provided and which we process based on certain legal grounds, e.g. your consent.

We may occasionally update this information, e.g. if we would process personal data for new pur­poses, collect additional categories of personal data or share personal data with other recipients. In such a case we will notify you in an appropriate way. The latest version of the information is always published on this page.

If you have any questions regarding the processing of your personal data, please do not hesitate to contact us. See below for contact details. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority within your jurisdiction.

HKScan Oyj
Company registration number: 0111425-3
Lemminkäisenkatu 48, 20520 Turku
E-mail: privacy@hkscan.com

Please see the table below for further information regarding which categories of personal data that we process.