Privacy policy for online services

Last modified: 12.3.2024

This Online Services Privacy Policy helps users of our online services ("You" or "User") understand what personal data and other information Atria Suomi Oy and Atria Oyj ("Atria" or "we") collect on our online services and how we process that data. This Privacy policy is part of Atria's online service terms and conditions, which can be read at www.atria.com .The Privacy policy applies to the use of all of Atria's online services. If the user of the online services does not accept this Privacy policy or the terms and conditions of Atria's online services, the online services should not be used.

 

1 Contact details for registry matters

Atria

PL 900, Atriantie 1, Nurmo

60060 ATRIA

Phone number: 020 472 8111

Email: tietosuoja@atria.com

 

2 What data do we process and what is the purpose and legal basis for processing personal data?

Atria only collects personal data that is relevant for the purposes specified in this Privacy Policy. Such information includes in particular:

 

  • ·         User account ID and registration date
  • ·         Browser used, operating system, device model, IP address, connection time and connection duration
  • ·         The web pages from which you have accessed our website, the pages you have viewed, all other activity on our website, including information about clicks on links, icons and images on our websites and other choices you have made, the search terms you have used and the sites you have accessed
  • ·         Cookies and other identifiers
  • ·         Information regarding your consent status for the use of cookies
  • ·         Information from third parties. Atria obtains contact information and other personal data about media contacts and influencers from various sources, including Cision. For more information on how Cision collects and uses such information, please see Cision's Privacy Policy here.
  • ·         Name and email address of our newsletter and stock exchange release subscribers

 

As part of its online services, Atria may process personal data relating to

  • ·         the use of online services
  • providing, maintaining and developing online services
  • protecting online services from spam, abuse, fraud, vulnerabilities and other technical threats to ensure the security of online services
  • the statistics on the use of online services
  • reaching users of online services
  • improving Atria's other products and services
  • drawing up market and other surveys and reports on online services and Atria's other products and services
  • to interpret users in order to provide more relevant service and content
  • sending newsletters and stock exchange releases to their subscribers
  • targeting advertising to visitors of our websites
  • managing the consent status for cookie usage and transmitting consent status information to Google and other website analytic tools and marketing service providers. To manage the consent status regarding the use of cookies and to transmit information about the consent status to Google and other web analytics and advertising service providers we use.
  •  

The processing of personal data for the purposes identified above is based on Atria's legitimate interest, the user's separate specific consent, and the performance of a contract concluded with you.

 

3 Who can process your data and whether we disclose it to third parties?

Atria will not publish the personal data of Users in online services. The Users of online services can personally make data about themselves public to other users for online service use, such as by leaving comments within the online services.

Atria may use services provided by third parties to provide, maintain, develop and protect its online services, and for communication purposes to the extent necessary to.

 

Atria uses companies that provide, for example, IT services, consulting or marketing services to process the personal data it collects. These partners may act as processors of your personal data in accordance with our instructions, in which case we contractually bind them not to use your data for their own purposes, but they may also act as separate, independent controllers of the personal data necessary to provide the service.

 

Atria's website may contain links to third-party services, for example social media services, whose cookies allow you to play YouTube videos on our website or to like on Facebook, Instagram or other social media channels. Atria's website may also contain links to third party service providers' own terms of use and privacy policies. Atria is not responsible for the privacy practices of social media services or other third-party service providers that operate independently, and we recommend that you review the content and the applicable terms on each provider's own platform or through a link that Atria provides on its website.

 

In specific exceptional circumstances, Atria may be required to disclose personal data to third parties in situations where required by applicable law or regulation or other order of a public authority, or in order to monitor and ensure the terms and conditions of the online services and to ensure the security of the online services.

 

Atria may also disclose personal data in connection with a potential acquisition or business transaction in which Atria or part of its operations are sold to the recipient of the data.

 

4 Do we transfer personal data outside the EU or EEA?

We transfer personal data outside the EU or the EEA if it is necessary for the purposes of the processing of personal data or for the technical maintenance of the data. Where personal data is processed outside the EU or EEA, we will ensure that the conditions for transfer set out in the EU General Data Protection Regulation are met. In such cases, Atria will ensure, among other things, that the data it collects is transferred only to third countries or entities whose level of data protection has been determined by the European Commission to be adequate or that the subcontractor has committed to the European Commission's Model Clauses for the processing of personal data and, where necessary, has put in place adequate additional technical safeguards.

 

5 How we protect your data and how long we will store it?

All personal data is protected against unauthorized access and accidental or unlawful processing in accordance with Atria's data security policy.

 

Information security is a process for ensuring the confidentiality, integrity and availability of information. At Atria, information security is managed in accordance with the Group's information security policy. The information security policy applies to all information assets and related processes that Atria manages or processes. This applies to data processing relating to Atria and its staff, as well as to its partners and customers. Atria's systems and processes are highly secure and protected against data breaches and denial of service attacks.

 

Personal data is maintained on a secure server. The data is collected in databases that are protected by firewalls, passwords and other technical means. These protections include, among others, password protection, which allows access to the stored data only to Atria employees and Atria partners who have been explicitly authorized by Atria to do so. The register is appropriately protected in accordance with industry standards and through technical and organizational security systems. While Atria makes best efforts to protect the information it collects, it cannot guarantee that the information will be absolutely secure when processed, transmitted or stored. Atria will notify you through its online or other services of any potential security threats to the security of your personal data. Atria may also temporarily shut down online services to protect your personal data.

 

Atria staff are obliged to keep all personal data strictly confidential.

 

We store the personal data of users of our online services only for the time necessary to fulfil the purposes of use specified in this Privacy Policy. In addition, we may store some data for longer periods to the extent necessary to fulfil our legal obligations.

We regularly assess the necessity of storing data in the light of applicable law. In addition, we will take reasonable steps to ensure that no personal data relating to data subjects that are incompatible with the purposes of the processing, outdated or inaccurate are kept in the register. We will correct or destroy such data without undue delay.

 

6 Cookies and other usage tracking tools 

A cookie is a small file that a website stores on the device used by the visitor for browsing and which the visitor's browser offers to the website every time they visit the site again. The User accepts the use of cookies or similar technologies when they arrive at the site. For example, cookies allow a site to maintain a session (a single visit to the site) during its use. Also, cookies transferred to the User's computer do not allow the data on the participant's hard disk to be viewed.

 

Atria uses cookies or similar technologies to identify and track visitors at its website, their online service use and usage habits to improve the quality and adaptability of online services and to offer recommendations, and to further develop the online services and to target its marketing.

 

The online services may include third-party advertisements or material that may store their own cookies on the User's computer, or may use other tracking tools. Please note that these third party cookies may also send data outside the EU. Such third-party services are subject to their own privacy policies, and Atria is not responsible for data collection or processing by those operators.

 

7 What are your rights as a data subject?

The User has the right to inspect the data contained in Atria's register. When the User wishes to exercise their inspection right, they must send a request to tietosuoja@atria.com. The User has the right to request personal data about them to be rectified, supplemented or deleted from the register if the data is incorrect, unnecessary, incomplete or outdated for the purpose of processing personal data. Atria also takes the above measures on its own initiative. The User also has the right, under certain conditions, to request the restriction of processing, to object to the processing of personal data or to request the transfer of their personal data to another system.

 

To the extent that the processing is based on consent, you also have the right to withdraw or modify your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that took place before the withdrawal of consent.

You have the right to refuse to receive Atria's promotional emails by following the instructions in these messages for deletion from the mailing list. If You choose not to receive promotional emails, Atria may still send You non-promotional customer messages, such as emails regarding your user account, online service provision or Atria's business.

 

For specific personal reasons, you also have the right to object the processing of your personal data where the basis for the processing is a legitimate interest. When making your request, you should identify the specific situation on the basis of which you object to the processing. We can only refuse to comply with an objection request on the grounds provided for by law.

 

If you notice deficiencies or illegalities in our processing of personal data, you have the right to file a complaint with the data protection authority at tietosuoja@om.fi.

 

8 Amendments to this Privacy policy

We may update this Privacy Policy from time to time and will post any changes on this page. When we change this Privacy Policy, we will also change the date on which the changes take effect. If the changes are significant, we will also post them on our websites. By continuing to use our online services after such change, we will assume that you have accepted the amended terms of the Privacy Policy. 

 

9 Cookie management

When you visit our website for the first time, you agree to the use of essential cookies. To use other cookies and similar technologies, you must give your explicit consent to their use in our cookie notice. On subsequent visits, your browser will read the cookie stored on your computer and transmit the data back to the website.

 

You can manage your consent status for the use of cookies on the Cookie Notice on the Atria website.

 

For more information about how we process your personal data and how you can contact us, please see the Privacy Policy above. 

Please provide your consent ID and date when contacting us regarding your consent.

Your consent applies to the following areas: www.atria.com