1. Data controller

Company: Ouneva Group / Ase Utra Oy
Business ID: 0157948-0
Address: Valokaarentie 8
Postal code: FI-80710
City: LEHMO
Email: lauri.kakkonen@aseutra.fi

2. Person responsible for register matters

Company: Ouneva Group / Ouneva Oy
Name: Mari Räty
Address: Teollisuustie 21
Postal code: FI-82730
City: TUUPOVAARA
Email: mari.raty@ouneva.fi

3. Data protection officer

Company: Ouneva Oy
Address: Teollisuustie 21
Postal code: FI-82730
City: TUUPOVAARA
Email: tietosuojavastaava@ounevagroup.fi

4. Name of the register

  • Register of visitors to the aseutra.fi website

5. Purpose of the register

The purpose of the register of visitors to the aseutra.fi website is to develop the operation and user experience of the website, to target marketing, and to manage existing customer relationships and create new ones.

The register is used to monitor and analyse use of the website and visitor behaviour on the site. This information is used for:

  • improving the content and functionality of the website,
  • targeting marketing communications and measuring their effectiveness,
  • identifying leads and managing customer relationships,
  • supporting customer service and sales.

The processing of data is based on legitimate interest relating to the development of business operations and the maintenance of customer relationships. The following third-party services are used on the site: Leadfeeder, HubSpot, Google Analytics and Meta (Facebook) Pixel, which are used to collect information about visitor activity and website use.

The processing of personal data is based on the data subject’s explicit consent in the following situations:

  • Cookies and tracking technologies: The site uses cookies and other similar technologies (such as Leadfeeder, HubSpot, Google Analytics and the Meta/Facebook pixel) to track and analyse visitor behaviour. Their use is based on consent given by the user, which is requested via the cookie banner or cookie settings.
  • Contact forms and other communication: If a user provides their contact details, for example via a contact form, processing is based on the user’s consent and on the data being used for contacting them and possibly for initiating a customer relationship.

The data subject has the right to withdraw their consent at any time.

7. Data content of the register

The register may contain the following information about website visitors:

  • Technical data and cookie data:
    • IP address
    • Browser type and version
    • Operating system and device type
    • Time and duration of the visit
    • Pages visited and actions taken on the site
    • Data collected by means of cookies and other tracking technologies (e.g. Google Analytics, Leadfeeder, HubSpot, Meta/Facebook pixel)
  • Information provided by the user themselves via a contact form or otherwise:
    • Name
    • Email address
    • Phone number
    • Company and position
    • Additional information voluntarily provided in the message field
  • Data collected through marketing automation systems:
    • Email open and click data
    • Form submission data
    • Customer lifecycle stage and areas of interest

8. Data retention period

Personal data is retained only for as long as is necessary to fulfil the purpose for which it was collected or to meet obligations required by law. Retention periods are determined as follows:

  • Data collected by means of cookies and tracking technologies is retained for a maximum of 26 months depending on the type of cookie, unless the user withdraws their consent earlier.
  • Data provided via contact forms is retained for a maximum of 12 months from the handling of the enquiry, unless a customer relationship continues or the user requests earlier deletion of the data.
  • Data processed in marketing automation systems (e.g. HubSpot) is retained for as long as the user remains on the marketing list or until consent is withdrawn.

Data may be retained for longer where necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

9. Regular sources of data

The web analytics services used on the website collect information about website visitors that does not identify them at an individual level, comprising among other things the following:

  • the visitor’s estimated age, gender, country, city and language
  • internet service provider information
  • number and duration of sessions, site usage data
  • technical characteristics of the device
  • interests estimated on the basis of browsing behaviour
  • terms entered into the site’s search fields

This data is collected by means of cookies and other tracking technologies and cannot be linked to an identified person without the user’s own active contact. If a user contacts us, for example via a form, and provides their personal data, that data is not stored in the analytics tools.

The web analytics services through which data is collected are:

10. Regular disclosures of data and transfers of data outside the EU or the European Economic Area

Data is not regularly disclosed outside the companies belonging to Ouneva Group. The companies belonging to Ouneva Group are:

  • Alsiva Oy (Business ID: 0962501-5)
  • Jotwire Oy (Business ID: 0657122-6)
  • Ouneva Oy (Business ID: 0157948-0)
  • Valukumpu Oy (Business ID: 2126932-4)
  • Top Speed Oy (Business ID: 2677355-4)
  • Ase Utra Oy (Business ID: 1743053-3)

Data you enter on Ouneva Group’s websites is transferred outside the EU and EEA in connection with the use of the HubSpot service. The database of the service provider HubSpot Inc. is located in the United States, in the East 1 – Virginia region.

In connection with the use of the Google Analytics service, your personal data is transferred outside the EU and EEA.

Apart from the above, your personal data is not transferred outside the EU or the EEA.

11. Use of cookies

We use so-called cookies on our pages. A cookie is a small text file sent to and stored on the user’s computer, which enables the administrator of the internet pages to identify visitors who visit the pages frequently, to make it easier for visitors to log in to the pages, and to make it possible to compile aggregate information about visitors. This feedback allows us to continuously improve the content of our pages. Cookies do not harm users’ computers or files. We use them so that we can offer our customers information and services tailored to their individual needs.

If a user visiting our pages does not want us to obtain the information described above by means of cookies, most browser programs make it possible to disable the cookie function. This is usually done through the browser’s settings.

It should be noted, however, that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we offer.

12. Protection of the register

Data is transferred over an SSL-secured connection.
Electronic data is protected by a firewall, usernames and passwords.
Access rights to the data are held only by those persons employed by the controller who need the data in their duties.

13. Automated decision-making

No automated individual decisions (Article 22 of the EU General Data Protection Regulation) are made.

14. Rights of the data subject

The data subject has the right to check what information concerning them has been stored in the personal data register. A written request for access must be sent, signed, to the person responsible for register matters.

The right of access is free of charge when exercised no more than once a year.

The data subject has the right to require the rectification or erasure of incorrect or outdated data, or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.

The data subject has the right to withdraw consent previously given for the processing of data, or to lodge a complaint with the supervisory authority about matters relating to the processing of their personal data.

The data subject also has the right to prohibit the use of their data for direct marketing purposes.