Effective Date: 18 December 2024
PRIVACY POLICY
Nartio Limited (the “Company”) is committed to protecting the privacy of the information shared by individuals visiting its website. This privacy policy has been created to inform you about which information is processed, how it is processed, with whom it is shared within the scope of your consent and legal regulations, and how the Company protects it. Additionally, this privacy policy outlines how you can verify the accuracy of this information and request its deletion via the Company’s website. All services provided by the Company will be referred to as “Services.”
As Nartio, we have prepared this privacy statement to inform our Online Visitors and Potential Customers regarding the processing, storage, and transfer of their personal data within the scope of relevant legislation and legal regulations.
Nartio respects your concerns about privacy and the protection of your personal data. In this regard, we take care to process your personal data in compliance with all applicable regulations.
The processing and use of data relating to an individual will only occur if the individual voluntarily provides data or explicitly consents to it. By providing data or giving explicit consent, you agree to the following terms. Certain information is stored on the web server when you visit the website.
1) Categories of Personal Data We Process and Purposes of Processing
Your personal data is processed by Nartio in accordance with the following principles:
(a) Processed lawfully, fairly, and transparently (“lawfulness, fairness, and transparency”);
(b) Collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes shall not be considered incompatible with the initial purposes (“purpose limitation”);
(c) Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (“data minimization”);
(d) Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);
(e) Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposessubject to the implementation of appropriate technical and organisational measures deemed necessary by the GDPR to protect the rights and freedoms of individuals (‘retention limitation’);
(f) Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (“integrity and confidentiality”).
Your personal data may include: identity information (e.g., name, surname), contact information (e.g., phone number, email address), transaction security information (e.g., IP address), customer transaction information (e.g., payment information, card details).
Personal data may be processed for the following purposes:
- Conducting activities in compliance with legislation.
- Managing information security processes.
- Ensuring customer loyalty to products/services.
- Managing communication activities.
- Conducting business operations/audits.
- Evaluating and responding to improvement suggestions for business processes.
- Ensuring business continuity.
- Conducting product/service sales processes.
- Providing after-sales support services.
- Conducting marketing analysis activities.
- Managing customer relationship processes.
- Conducting customer satisfaction activities.
- Monitoring requests/complaints.
- Managing product/service marketing processes.
- Conducting storage and archiving activities.
2) Methods of Collecting Personal Data
The personal data categories mentioned above are collected through partial or fully automated means during your use of our website, such as through registration forms, contact forms, or support requests.
3) Legal Grounds for Collecting Personal Data
Your personal data is processed by Nartio based on the following legal grounds:
- Necessity for the performance of a contract.
- Compliance with legal obligations.
- Protection of vital interests of the data subject or another person.
- Performance of tasks carried out in the public interest or in the exercise of official authority.
- Necessity for the legitimate interests pursued by the controller or a third party.
4) Sharing Personal Data with Third Parties
Personal data may be shared with authorized public institutions, organizations, or third parties as required by legal regulations. For example, data may be shared:
- To comply with legal obligations.
- With legal advisors and judicial authorities for resolving legal disputes.
- With business partners to provide services effectively.
Additionally, personal data may be shared with service providers (e.g., Microsoft Azure for data storage, Gmail for email communications, and Google Analytics for website usage analysis).
5) Retention of Personal Data
Personal data will be retained for one year after account deletion to comply with legal, tax, and accounting requirements and to detect/prevent misuse of the platform.
6) Communication
We may use your contact information (email, phone) to communicate with you regarding legal, marketing, or business purposes.
7) Exercising Your Rights
You have the right to request access, deletion, or modification of your personal data. You can submit these requests electronically.
8) Policy Changes
We may update this privacy policy from time to time. Significant changes will be announced at the top of the policy with the “Effective Date.” Changes take effect when posted on this page.