Content
1 Description of the file
1.1 Name of the data file
1.2 Purpose of the processing of personal data
1.3 Description of data subjects and processed data
1.4 Regular sources of information
1.5 Data storage
1.6 Disclosure of data
1.7 Disclosure and transfer of data outside the European Union or the European Economic Area
1.8 Principles for the protection of data files
1.8.1 Manual files
1.8.2 Files stored electronically
1.9 Rights of the data subject
1.10 Cookies

1      Description of the file
This Privacy Notice has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.

Data Controller
INTO Concept Oy
Lemuntie 3-5 C
00570 Helsinki
Tel. +358 40 670 7819
E-mail: contact@intoconcept.com

1.1    Name of the data file
Customer and Marketing Register of INTO Concept Oy.

1.2    Purpose of the processing of personal data
Personal data is processed for the management of customer relationships, customer communications and marketing. The aim is to provide communication that is as relevant and useful as possible to the recipient. Data is also used for monitoring and documenting marketing activities. The processing of personal data is based on INTO Concept’s legitimate interest in maintaining customer relationships and developing business operations, or on the data subject’s consent where required (for example, for the use of cookies).

1.3    Description
Data subjects include INTO Concept’s customers, potential customers and recipients of marketing communications.

The personal data processed may include:
– Name
– Email address
– Company name
– Company address
– Business phone number

INTO Concept never collects their customers’ social security numbers or other personal contact information, such as personal phone numbers or home addresses.

1.4    Regular sources of information
Personal data is primarily collected directly from the data subject. Data may also be obtained through INTO Concept’s website (contact forms, downloads, orders), event registrations, customer interactions (trade fairs, seminars, sales contacts, competitions) and from publicly available sources.

Data may also be updated by INTO Concept personnel or by third parties, within the limits permitted by applicable law.

1.5    Data storage
Personal data is retained only as long as necessary to fulfill the purposes defined in this Privacy Notice, unless longer retention is required by law (for example, accounting obligations). Outdated or unnecessary data is deleted securely.

1.6       Disclosure of data
The register is used only by INTO Concept Oy. Personal data will not be disclosed to third parties unless required by law.
Personal data may be deleted upon request, unless its retention is required by law, contract or service provision.

1.7    Disclosure and transfer of data outside the European Union or the European Economic Area
Personal data may be transferred outside the European Union or the European Economic Area if we use service providers whose servers are located elsewhere. In such cases, we ensure that transfers are carried out in compliance with EU data protection requirements and that an adequate level of data protection is guaranteed.

1.8    Principles for the protection of the data files
Personal data is handled confidentially and protected using generally accepted industry-standard technical and organizational measures (such as firewalls, passwords and access control).
Access to personal data is restricted to employees who need it for their work.

1.8.1      Manual files
No manual records are maintained.

1.8.2      Files stored electronically
Data is stored in systems and cloud services that are protected by appropriate security measures. Backups are taken regularly and stored securely.

1.9 Rights of the data subject
The data subject has the right to access their personal data and to request that any inaccurate or incomplete information be corrected or deleted. They also have the right to restrict or object to the processing of their personal data, and may withdraw their consent at any time. In addition, the data subject has the right to prohibit the use of their personal data for direct marketing purposes.
All requests related to personal data can be sent by email to contact@intoconcept.com. Identity may be verified before access to data is provided.

1.10 Cookies
Our website uses cookies to ensure technical functionality, analyze usage and target marketing. We use the Cookiebot service to manage cookie consents. Users can give or withdraw their consent at any time and can adjust their cookie settings by clicking the cookie banner visible on the site.

With the user’s consent, we use third-party tools such as Google Analytics, Microsoft Clarity and other marketing and tracking services.