Last updated 29.10.2021
PRIVACY NOTICE
This Privacy Notice (together with our Terms & Conditions of Use and Conditions of Sale and any other documents referred to herein) describes how we collect and process your personal data in connection with www.rapala.com website (including other domains directing to this site). The terms, “Rapala”, “we”, “us” and “our” as used herein refers to Rapala VMC Corporation, a Finnish publicly listed corporation with a Finnish business ID 1016238-8. Also all Rapala VMC Corporation subsidiaries apply this policy in their business if applicable.
Please read the following carefully to understand our policies and practices regarding your personal data and how we will treat it. This Privacy Policy may change from time to time so please check this Privacy Policy frequently for updates. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you and your account.
If an you have any questions regarding this Privacy Notice or about the processing of your personal data or if you wish to exercise your rights as a data subject please contact us at:
F.A.O – Rapala VMC Corp.
Privacy Manager Mr. Kimmo Valkkio
Rapala VMC Corporation
Mäkelänkatu 87
00610 Helsinki
Finland
Phone: +358 9 7562 540
Fax: +358 9 7562 5440
email: privacy@rapala.fi
WHAT PERSONAL DATA DO WE COLLECT & PROCESS?
Depending on whether you make a purchase, create an account or contact us online, by phone or otherwise, we collect and process various personal data categories. Much of the personal data we process is obtained directly from you, for example when you register and provide your contact details. We also receive technical device and log information which is automatically collected when you interact with our online services. This may, for example, be your IP-address and the timestamp of your visit.
The following principle generally applies: If we request you to provide your personal data, you can decide what information you want to share with us. However, in certain situations personal data is needed to provide our services. For example, you can’t place an order without giving your address where to deliver your purchases.
Profile information. Profile information is collected when you create an account and make a purchase. This information includes your email address, your name and your contact details.
Purchase data. Purchase data includes the products that you have ordered, dates, prices, transactions and delivery information.
Messages and communications data means the information collected when you contact us or our customer service contacts you. This includes the contents of the messages you send and the method(s) used for communicating with us.
Technical information. When using our online services, we automatically receive technical data such as your IP-address and information about your device.
Marketing related data. We collect and process various categories of data related to our marketing activities. We might categorise or profile you based on your purchase history to send you relevant advertisements. This data includes for example the advertisements you have seen, clicked or interacted with, the marketing messages we have sent to you and your marketing preferences.
Cookie information. We use cookies and similar technologies to gather data from your visits on our websites and the interactions you do on these sites. This data includes for example unique cookie IDs, the pages you have visited and the products you have looked.
Social Media data. When you interact with social media features implemented on our website or our social media channels, we receive certain information such as your comments, likes and posts.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Contractual necessity
For us to fulfil and manage your purchases, orders, payments, returns/exchanges or requests for information or us to otherwise service you, we need to process your personal data in order for us to performance these actions. In other words providing certain personal data is condition of service and if you are not providing the asked information we cannot do business with you or deliver any products to you.
With your consent
Based on your consent we deliver advertisements, coupons, newsletters, promotions, notification of events and special offers, email or mobile messages, etc. to you.
If you have given your consent, we use cookies and similar technologies on our website to gather statistics and to deliver targeted advertisements to you. You can read more about cookies and similar technologies from our cookie policy.
Legal obligations
As a company, we are subject to various legal obligations that require us to process your personal data.
For example, tax and accounting laws require us to retain certain information related to your purchases.
Legitimate interests
We process your personal data for administrative and logistical processes, analysis, reporting and to optimise business processes within our group in order to develop these in a more efficient and secure manner. For example these includes the improvement of our customer service processes or delivery times of ordered products.
We may also process your personal data when it is necessary for the prevention of fraud and such similar criminal activities.
If you are already our customer and have purchased products, we deliver advertisements to you based on our legitimate interests.
Please note that you have always the right to object the processing of your personal data that is based on legitimate interests.
DO WE SHARE YOUR PERSONAL DATA WITH 3RD PARTIES?
Rapala only shares your personal data if this is allowed by law. The principal recipient of your personal data is Rapala VMC Corporation We also work particularly closely with certain service providers, for example in the area of product shipping (e.g. shipping and delivery service providers), and with technical service providers (e.g. companies running data centres where we host our IT-systems). These service providers may generally only process your data on our behalf under special conditions.
Group companies. Many systems and technologies are shared within Rapala VMC Corporation which us to offer you a more economical, secure, unified and personalised service. Therefore, companies within Rapala group which require access to your data to fulfil our contractual and legal obligations, or to fulfil their respective functions within our group, receive your personal data.
IT & Data centre providers. We work with different IT service providers in order to be able to provide our services. These service providers include, for example, IT-system providers, Cloud providers and data centre providers.
Warehouse & logistics providers. To deliver your orders, we disclose your personal details and purchase information to our warehouse partners as well as carrier providers that will deliver your purchases.
Marketing partners. With your consent we may share your browsing data across social media platforms, such as Facebook and YouTube to conduct our marketing activities. Moreover we may share your browsing information with other third party services to manage and provide advertising on our website and to make your online experience more focused to your interests.
Product suppliers, distributors and manufacturers. In some situations, your personal data can be disclosed to different product suppliers and manufacturers. For example, regarding product liability issues, your contact details could be disclosed to a manufacturer to make sure your damaged product gets replaced.
Payment providers. When you do a payment via credit card or online banking, your personal data is shared to payment providers to enable the payment process.
Social media companies. Our website permits you to use a third party social networking platform such as Facebook, Pinterest, Twitter, and Google+. This includes use of social media plugins such as Facebook “Like”, Tweet, Pinterest “Pin,” Google “+1” buttons, etc. When you use social networking platforms and plugins, you share your information with them and their privacy policy applies to disclosure of such information. In addition, they may be able to collect information about you, including your activity or may notify your connections on the social networking platform about your use of this website. Such services may allow your activity to be monitored across multiple websites for purposes of delivering more targeted advertising. Please note that their own privacy polices apply and we encourage you to read them. We may add new social networking plugins and buttons to our websites from time to time.
Other. In addition we may also disclose your personal data to third parties for us to comply with any court order or a other legal obligation, for us to enforce or apply our Terms & Conditions of Use or for us to protect the rights, property, or safety of Rapala, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. In the event of merger, acquisition, or any form of sale of some or all of our assets, in which case personal information held by us about our customers could be among the assets transferred to the buyer.
DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE EUROPEAN ECONOMIC AREA?
Outside the European Union Rapala VMC Corporation receives and transfers personal data to and from the United States of America in order to provide the web shop service rendered on our website in association with our affiliates and subcontractors located the United States of America.
All relationships are covered with necessary data protection agreements and we go great lengths to ensure all our international partners are following necessary legislation.
When your personal data is transferred to a Third Country, the level of protection guaranteed in the GDPR might decrease. Therefore, before any transfer, we aim to take necessary measures to ensure the high level of protection of your personal data as required by the GDPR. Such measures we have implemented include the use of so called ‘standard contractual clauses’ (“SCC’s”) approved and provided by the EU Commission as part of our agreements we enter into with the recipients of personal data in Third Countries. You can read more about the SCC’s here:
HOW LONG DO WE KEEP YOUR DATA?
Generally your personal data may not be kept in a form which permits identification longer than is necessary for the purposes for which the personal data is processed for. Therefore we must delete or alter the data so that in is not identifiable anymore when there is no use for the data anymore. Rapala has strict practices on data retention in place and we are doing our very best to remove any old and unused data.
As the purposes of processing (please check the part FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA? above) vary so does the retention times of your personal data. For example due to security reasons complete credit card numbers are never saved or stored by us. Data we need to complete your order we process until you have received your order and as long we have an obligation by the law to track our transactions. Again as long we have your consent it is our honor to serve our marketing material for you.
Bear in mind that even though your client relationship would end with us we might still process your personal data as long as we have a valid legal reason to do so. This might be for example for us to enforce our legal rights in which case the data will be kept until the legal matter has been fully ceased.
HOW DO WE KEEP YOUR DATA SAFE?
Rapala applies strict and up-to-date data security means to protect your personal data. It is important for us to protect confidentiality and integrity of your personal data when we are processing it. We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure.
Your personal data is protected by physical, organizational and technical means. Data is mainly stored on servers securely located at our own offices behind firewalls and when we are using our partners to process your personal data we require them to follow the same rules that we follow. Only authorized persons are allowed to access the data and we keep up different kind of technical measures to protect the data and control the access. Any payment transactions will be encrypted using SSL technology. All of this is done by us to reduce any risk of loss, misuse or unauthorized access, disclosure or modification of your personal data in our possession.
YOUR RIGHTS AS A DATA SUBJECT
As according to the General Data Protection Regulation of the European Union you have certain rights you may exercise to limit the usage, control and protect your personal data.
First of all you have a right to request from us an access to and rectification or erasure of your personal data as well as the right to data portability. Moreover you may demand us to restrict processing of your data or you may object the processing. Where the processing of your personal data is based on your consent, as is the case with our marketing, you have a right to withdraw your consent at any time.
When exercising your rights, please be prepared to prove your identity by means specified by Rapala.
On our website you can review and update your personal information or cancel your consent on our marketing by logging into our website and visiting the My Account profile page and making changes at any time. If you have forgotten your password, once you have tried to register and failed, you can click on the "Forgot your password?" link to reach a page on which you can submit your email address. Your user name and password then will be emailed to you. If you want to delete your whole account kindly contact us through customerservice@rapalaeurope.com.
If you have provided your consent for us to use your personal data for marketing, further to ensure that you will not receive recurring marketing or other information from us unless you choose to, we will provide you with simple instructions on each marketing email from us for you to let us know that you have chosen to stop receiving such email messages from us. Bear in mind that you may cancel this consent from your My Account page at any time.
And remember, if you believe that we have not followed the data protection obligations applying to us, you always have the right to lodge a complaint with your local supervisory authority.
