Vaisala Privacy Policy
Your privacy is important to Vaisala Oyj and its affiliates in the Vaisala Group of Companies (collectively “Vaisala”). This Privacy Policy (“Policy”) sets forth Vaisala’s data processing practices for:
- managing Vaisala’s customer relationships;
- provision of Vaisala’s subscription services;
- using personal data of contact persons of current and prospective customers for advertising and marketing purposes;
- managing Vaisala’s supplier and business partner relationships; and
- Vaisala’s online store operations and Vaisala-operated web sites (such sites collectively “Site”).
Vaisala collects and processes personal data in accordance with the applicable laws and this Policy.
Purposes and types of personal data Vaisala processes
Managing customer relationships, the Site and online store operations
Vaisala collects and processes personal data of the contact persons of Vaisala's customers, the Site visitors and the users of the online store. Personal data is collected directly from the (current and potential) customer’s contact person in connection with quotations and orders for Vaisala’s products or services, from the users of the Site or directly from the customer’s contact person through the registration process in the online store.
The personal data collected and processed by Vaisala may include:
- Contact details (such as name, email address, phone number);
- Other relevant information provided by the user when they register to the online store, or order a newsletter or other information asset at the Site; and
- Information collected when using the Vaisala online store (such as IP-address and web log data).
Personal data is used for the following purposes:
- Providing the products or services (such as shipping the product or making the service available to the customer), and for managing and developing the customer relationship;
- Advertising and marketing activities (such as targeted email marketing and personalizing the Site); and
- Developing services and enhancing the user experience (such as optimization and personalization of the Site).
The grounds for processing of personal data is either the fulfilment of an agreement concluded between Vaisala and the customer, the legitimate interest of Vaisala which consists of managing quotations and receiving orders, as well as developing and managing the customer relationship, business functions, advertising, marketing and communications, or a legal obligation.
Providing subscription services
For subscription services, Vaisala collects and processes personal data of users and alert recipients, who may be individual users, or customer’s employees, contractors or other individuals to whom customer has created a user account or otherwise provided access to the subscription services, in accordance with terms and conditions of the respective service. Personal data is collected directly from the customer-appointed administrator of the service when creating user accounts and/or from the user when using the service.
The personal data collected and processed by Vaisala may include:
- Contact details (such as name, email address, phone number); and
- Information collected when using the services (such as IP-address and web log data).
Personal data is used for the following purposes:
- Creating a user account and granting access to the service;
- Providing and maintaining the service;
- Modifying, personalizing and improving the service; and
- Providing in-app support services and onboarding guidance through the service.
The grounds for processing of personal data is either the fulfilment of an agreement concluded between Vaisala and the customer, the legitimate interest of Vaisala to provide the service to the users, or a legal obligation.
Where Vaisala processes usage data at an individual level to improve its subscription services, such processing is based on Vaisala's legitimate interest in developing and optimizing its products and services.
Marketing
Vaisala may collect personal data (such as name, email address, phone number) directly from the data subject, marketing data bases provided to Vaisala by third parties or public sources such as the employer’s website, professional networks, as well as different member and participant lists of business organizations and events that have relevance to Vaisala’s business operations.
Personal data is used for the following purposes:
- Contacting the current and prospective customers; and
- Marketing activities (such as targeted email marketing).
The ground for processing of personal data is either the data subject’s consent or the legitimate interest of Vaisala to promote and market services to current and prospective customers.
Suppliers and business partners
Vaisala processes personal data including contact details (such as name, email address, phone number) of suppliers’ and business partners’ contact persons, collected directly from them, in connection with the evaluation, setting up and managing the relationship between Vaisala and the entity that those contact persons represent.
Personal data is used for the fulfilment of the agreement and managing the relationship between Vaisala and the supplier/business partner.
The grounds for processing of personal data is either the fulfilment of an agreement between Vaisala and the supplier/business partner, the legitimate interest of Vaisala in managing the supplier/business partner relationship, or a legal obligation.
Transfers of personal data
Vaisala may disclose personal data to third parties and carefully selected service providers, suppliers and business partners with your separate consent or where necessary for the purposes described in this Policy.
Vaisala may disclose personal data when necessary for processing a request for quotation, fulfilling a purchase order, fulfilment of an agreement, or the provision of subscription services; including without limitation, providing necessary information to relevant finance-related companies, logistics and transport service providers and authorized after-sales service providers. Third parties may also be used to provide website and application maintenance, service hosting, backup, storage, virtual infrastructure, analysis, marketing and communication, and other similar services as well as to respond to customer requests or inquiries, or as necessary for protecting Vaisala’s, Site users’ and/or the public’s rights, property and/or safety.
These service providers, suppliers and business partners process personal data on behalf of Vaisala, in accordance with our instructions and are not permitted to use the data for their own purposes. Vaisala ensures that shared data is adequately protected and that recipients are bound by contracts with sufficient data protection terms.
Some third-party service providers that Vaisala uses to deliver its services may, in addition to acting as data processors on Vaisala's behalf, also process certain personal data as independent data controllers for their own legitimate business purposes, such as service security, fraud prevention and service improvement. Where this is the case, those service providers' own privacy policies apply to such processing.
Vaisala may share personal data within the Vaisala Group of Companies for the purposes described in this Policy. Such sharing may involve transferring data to and from other countries in which Vaisala operates, has business activities or is otherwise present.
Vaisala may use third party service providers in implementing its marketing campaigns. For the purposes of the implementation of such marketing campaigns, Vaisala may transfer personal data to third party service providers.
Additionally, Vaisala may share contact details and online behaviour data, such as data regarding Site visits, with sales channel partners for the purpose of sales and marketing of Vaisala’s products and services.
Vaisala does not sell or transfer personal data to third parties for their promotional purposes.
In accordance with the above, Vaisala may transfer your information both in and out of the European Union, the European Economic Area, the United Kingdom, and Switzerland. Such transfers will be carried out in compliance with applicable laws and necessary safeguards, such as EU Commission’s standard contractual clauses, or EU-US Privacy Framework, in order to ensure adequate level of protection for personal data. Additionally, depending on which Vaisala Group Company provides the products and services, personal data may be transferred within the United States, from the United States, or to or from other locations.
Protecting personal data
Vaisala takes commercially reasonable technical and organizational measures to prevent unauthorized access to and improper use of personal data. Vaisala maintains an Information Security Management System to secure information, including personal data. Information is considered secured only when its integrity can be maintained, its availability ensured and its confidentiality preserved. Vaisala’s information security policies and procedures ensure the protection of information from unauthorized viewing, modification, dissemination, or destruction and provide the necessary recovery mechanisms from accidental as well as malicious destruction, alteration or loss. Access to the personal data is limited only to those Vaisala’s employees, directors, officers, contractors, and service providers who need to process the personal data as a part of their duties and only in accordance with Vaisala’s instructions.
Retention of personal data
Vaisala retains personal data for a reasonable period of time as necessary for its processing purpose, not exceeding any legal requirements or limitations. Personal data will be deleted in accordance with Vaisala’s data retention procedures.
Disclosures required by law
Where necessary to
- comply with law, court order, enforceable governmental request or other judicial process;
- establish, exercise or defend legal claims;
- enforce the terms of Vaisala’s agreements and policies;
- protect Vaisala or third party rights and property,
Vaisala may disclose any personal data to competent public authorities, courts or other third parties. Vaisala will, unless prohibited to do so, make reasonable efforts to give prior notice using the contact information that has been provided to us.
Data subject rights
Data subjects may at any time exercise their right to request access to personal data and/or right to have incomplete, incorrect, unnecessary or outdated personal data deleted or rectified by contacting Vaisala. Data subjects also have the right to request restriction of, or object to, the processing of personal data, when applicable.
Data subjects are always entitled to lodge a complaint with a competent data protection authority.
Cookies
For the purposes of this section, "services" refers collectively to the Site and Vaisala’s subscription services. Where a provision applies only to one of these, this is indicated in the text.
The Site can be used for informational purposes without revealing identity to Vaisala and without providing Vaisala any personal data.
However, the Site and Vaisala's subscription services use “cookies” and similar technologies in order to create a personalized service experience, provide social media features and analyze the use of the services. Cookies are pieces of data stored on computer's hard drive, not on the Site. They are either strictly necessary for the operation of the services and used on the basis of Vaisala’s legitimate interests or to provide a requested service, or used based on consent. The categories used across Vaisala's services include strictly necessary, analytics, and marketing cookies.
Vaisala's subscription services may use cookies to enable in-app support, onboarding guidance and product analytics features. Where required by applicable law, your consent will be requested before non-essential cookies are set. You may update your cookie preferences and withdraw your consent for non-essential cookies at any time through the cookie settings available in the service. Detailed information about the specific cookies used in each service is available in the cookie notice of the respective service.
If users do not wish to receive cookies, or want to be notified when they are placed, browser settings may be set to do so. If the use of cookies is disabled, Vaisala does not gather any information on services visit, but doing so will require users to re-enter certain information at each visit, and prevent Vaisala from customizing the service features according to the user preferences.
Vaisala may link the information stored in the cookies to any personal data the users submit through online forms while visiting the services. Further, Vaisala tracks aggregate statistics, such as Internet protocol address, computer's operating system, browser type, referring websites, and general information about the services’ traffic patterns and related information to understand and improve how the services are used.
Policy changes
Vaisala may change this Policy at any time with or without notice. The effective date of this version of this Policy has been posted above for reference. If Vaisala changes this Policy resulting in a material, adverse change in the way Vaisala collects or processes personal data, Vaisala will post a notice of such change on the Site.
Contact Details
The controller for the processing of your personal data under this Policy is Vaisala Oyj, a company organized and existing under the laws of Finland whose registered office is at Vanha Nurmijärventie 21, FI-01670, Finland, or, where applicable an affiliate in the Vaisala Group of Companies. This Policy is governed by the Finnish law, excluding its choice of law provisions.
You may contact Vaisala at any time regarding data protection, including exercising your review rights. Vaisala can be contacted by sending an email to the following address: privacy[at]vaisala.com.
If you wish to report a security concern related to personal data or our services, please contact us at: security[at]vaisala.com.