Privacy policy
Updated 2.1.2020
Saroki Oy is committed to protecting the privacy of its customers and other visitors to our websites. This privacy policy describes how Saroki Oy handles personal data. The Privacy Policy applies to all Saroki websites, products and services where personal information is collected or where there is a link to the Privacy Policy or where the Privacy Policy can be viewed. Definitions of terms used in the Privacy Policy are provided in Section 13 below.
It is important to us that you know what personal information we collect and that you know the rights to your personal information. This Privacy Policy explains the purposes for which we collect and use personal information and how we have ensured that you have sufficient control over the use of your personal information.
We encourage you to read this Privacy Policy carefully, as it contains important information about the personal and other information we collect.
1. Legal grounds for processing
2. Personal information to be collected
3. Use of personal information
4. Use location information
5. Retention period of personal data
6. Disclosure of Personal Information to Others
7. Children’s personal information
8. Personal data protection measures
9. Any processing operations
10. Use of cookies and other similar technologies
11. Third Party Websites
12. Changes to Privacy Policy
13. Definitions
14. Contact Information
1. Legal grounds for processing
Summary
The three most important legal grounds for the processing of personal data are (1) our consent, (2) our contract and (3) our legitimate interests. The collection of personal data is based on one or more of the following legal grounds:
We have obtained prior (written, oral or online) explicit consent to the processing of personal data (this legal basis is only used in the context of purely voluntary processing – it does not apply if processing is in some way necessary or mandatory).
Consideration is needed in the context of the agreement with Sarok (“contractual need”).
The processing is in our legitimate interest for reasons related to the management, administration or promotion of our business and is not overridden by your own interests or your fundamental rights or freedoms (“legitimate interests”).
You have the right to withdraw your consent to the processing of personal data at any time by contacting our customer service.
2. Personal information to be collected
We collect the following information:
information you provide directly
information collected in connection with the use of our websites or our interactive products or services
information related to purchases and other transactions with us
information collected from other sources that can be combined with user account information.
Please note that we do not collect payment information. All payment information is processed by authorized external payment service providers.
Personal information may be collected either directly from you, or automatically from the devices on which you use our services, or from external sources as described below.
Data collected directly:
contact information: name, e-mail address (es), telephone number, postal address
demographics: gender, date or age of birth, language, occupation or value, income data, housing data, family size
user account information: payment type or method, username, encrypted password, image attached to your account
consents given, messages sent, feedback given
reported personal interests
job-related information provided: name and contact details of the company / employer
information on gift purchases: recipient’s name, postal address, delivery address (es), telephone number and e-mail address (es)
other information collected with the prior, explicit and voluntary consent (including public profiles of social media).
Information collected in connection with your use of our websites or our interactive products or services:
user account credentials and Registration Date (if you are logged in)
browser used, operating system, device model, IP address, connection time, and connection duration
location information (including Wi-Fi hotspot information, GPS coordinates, or similar location information (see “Using location information” for more information))
the web pages that led to our site, the pages you viewed, and all other activities on our site (e.g., selections made; sites visited; and keywords used)
cookies and other tags
marketing information: benefits, campaigns and services directed to or offered to the customer and their use
other information collected with your consent.
Information related to your purchase:
information about your orders, deliveries, payment methods, billing addresses and delivery addresses, as well as other information about your transactions with Sarok
your contact with our customer service and related communications
your participation in our campaigns and competitions
your contact information.
Information collected from other sources that may be associated with your user account:
If you have connected to a Sarok website, service or social media channel using any of your social media profiles, we may collect public information available in that profile.
We may purchase information from third parties that supplements the information we collect.
We may collect information from public registers maintained by the authorities if such registers are available in your country of residence.
We may collect updated shipping and contact information from shipping companies.
An external service provider may be used to process payments, in which case you will be directed to the website of such third party. The site is subject to the terms of that service provider. Saroki does not store credit card information.
3. Use of personal information
We collect your personal information in order to provide our products and services in the best possible way, to create a smooth shopping experience, and to ensure the efficient operation and maintenance of our websites and services. We use the information we collect for the following purposes:
product offering, marketing and personalization
loyalty programs and other user accounts
customer service
product and service development and anonymized reporting
orders
detection, investigation and prevention of illegal activities
user identification.
We may process your personal information for the following purposes:
I. Product offering, marketing and personalization
We want to offer you the most interesting products and services possible, and we can therefore analyze your interests, preferences and needs.
We may process your personal information for the following marketing and sales purposes related to customer relationship management: customer relationship lifecycle management, customer segmentation, and efficiency improvement.
In addition, we may process your personal information to optimize our websites, product recommendations, and product range to better suit your preferences. This allows us to show and offer you better and more interesting products and content. For this purpose, we may create an account (which may be a guest account for non-logged-in users) based on the information you provide and the information we collect in accordance with this Privacy Policy. The account can also store information about whether you opened the emails we sent and clicked on the links in them.
The purpose of processing your personal information may be to provide information about our products and services, to announce the launch or benefits of new products or services, or to conduct market research. It is a condition then that we have first obtained your consent in accordance with the applicable law, if this is necessary for the purpose in question. Such marketing can take place as follows:
direct marketing by mail or telephone, including text messages
electronic communication: e-mail and other electronic messages
digital marketing (e.g. display advertising, Search Engine Marketing).
II. Loyalty programs and other user accounts
If you have registered for our loyalty program or created a user account on one of our websites, we may process your personal information when providing benefits and services related to the loyalty program and notifying you of changes.
III. Customer service
We may process your personal information in order to provide a personalized, customized service when you contact our customer service.
Our customer service may process your personal information when you contact it. Calls to customer service can be recorded, and the recording will then be announced in advance. We may combine personal information collected by our customer service with other personal information, such as purchase history. This allows us to provide the most efficient and personal service possible.
Your personal information may also be processed in connection with warranty matters, such as the activation of warranty, warranty claims and the registration of additional warranties for certain products.
IV. Product and service development and anonymized reporting
The development of products and services is of paramount importance to us, as it enables us to offer our customers even better, more innovative and easier-to-use products and services.
We may process your personal information and user account information both to improve existing ones and to develop new products and services. We can link the feedback provided and the messages sent to the user account.
We can use your responses from consumer surveys, consumer panels, and consumer surveys to analyze our customers ’preferences, expectations, and opinions. This data protection policy applies to the processing of personal data collected through consumer surveys, panels and surveys. Such studies, panels or surveys may include, for example:
Surveys / surveys conducted on our websites: We may from time to time use survey tools on our websites in an effort to improve the customer experience.
We may ask our customers in our customer program to respond to inquiries or inquiries (on paper or online) about our products and services to improve our service and program according to customer needs.
Inquiries / Inquiries to be sent by e-mail or text message: We may from time to time send inquiries to our customers about our products and services by e-mail or text message, always in compliance with this Privacy Policy and the requirements of applicable law.
We use anonymized data for reporting purposes. Anonymized information cannot be used to identify individuals. We use such information to analyze the achievement of our commercial objectives, such as the effectiveness of our product campaigns. Anonymized information may include the following:
the total number of visitors to our websites
average duration of visit
a typical visitor path to our site or store
certain measurements of sales of our products.
V. Orders
If you have ordered products or services from one of our online stores, we may process your personal information when processing the order.
Payment information is not stored in our systems, but you provide it directly to an external payment service provider in connection with the transaction.
VI. Detection, investigation and prevention of illegal activities
We may process your personal information to detect, investigate and prevent illegal activity. We may provide your information to law enforcement authorities upon their request or on the basis of a legal basis for the prevention and investigation of fraud and other illegal activities as defined by applicable law. We may disclose your personal information to other parties by order of a competent court.
VII. Identifying users
We can identify you so we can offer him a more personalized, customized service and a better experience.
We may use cookies to identify your online activities. Read more about the cookies we use. In mobile apps and online stores, the user can be identified based on their login information.
To identify you in our stone foot shops, we need your name, postal address and possibly your ID.
VIII. Sweepstakes and competitions
If you have given us your consent to direct marketing, we may send you invitations to sweepstakes and contests.
Your information will be retained for an appropriate period of time after the draw or competition to communicate with the winner or, if necessary, to select a new winner. The personal information you provide will then be deleted.
4. Use location information
We may collect information about your physical location through the Website. Location data is based on data collected by Google Analytics. To learn more about Google Analytics, visit the Google Details page.
5. Retention period of personal data
Your personal information will be retained for as long as your account is valid and until the statutory limitation period has expired and possibly longer if required or permitted by applicable law.
Be sure to update your information if there are any material changes.
We will make every reasonable effort to ensure that your personal information is processed only for as long as is necessary for the purposes set out in this Privacy Policy.
If you have created an account in one of our online stores or loyalty programs, your personal information will be retained until you terminate the account or request that the information be deleted.
To ensure you receive news, offers and other interesting information, we may ask you to update your information every 12 months when you use an e-commerce account or purchase products from one of our local stores.
The retention period for your personal information is as follows: We will retain copies of your personal information in an identifiable form only for the time required by the purposes set out in this Privacy Policy, unless a longer retention period is required by applicable law. In particular, your personal data may be retained for the time necessary to verify, exercise or defend our legal rights.
6. Disclosure of Personal Information to Others
We do not share your personal information with third parties. Exceptions are processors of personal data and authorized third parties to whom your data is disclosed in accordance with applicable law. We do not sell or rent personal information. Your data will be adequately protected if it is transferred to other countries. We may disclose your information if it is necessary for lawful requests, to combat fraud, in connection with mergers or acquisitions, or to protect our interests.
We will not sell, rent or otherwise disclose your personal information to any third party in a manner inconsistent with this Privacy Policy.
We will only disclose your personal information to the parties listed below for the following reasons:
International data transfer. We can provide our services using resources and servers located in different countries, including non-EU / EEA countries. Your personal information may therefore be transferred outside the country in which our services are used. If your personal data is transferred outside the EU / EEA, we will ensure that the transfer is subject to appropriate contractual measures (eg using the European Commission’s standard contractual clauses), that the transfer has an appropriate legal basis and that the processing and confidentiality comply with applicable law. You may wish to request a copy (where applicable) of the applicable standard contract clauses. Contact details are in section 14 below.
Statutory requests. The requirements of applicable law, responding to legal proceedings or other requests based on law may oblige us to disclose your personal information to authorities or third parties.
Protecting our interests and fighting fraud. We may also disclose or otherwise process your personal information in accordance with applicable law in order to defend our legitimate interests (for example, in civil or criminal proceedings) and to combat fraud.
Mergers and acquisitions. If our businesses are sold, merged or reorganized (for example, mergers and acquisitions), we may disclose your personal information to potential or actual buyers or their advisors, as appropriate.
7. Children’s personal information
We only accept product orders from consumers over the age of 18. Therefore, we do not seek to collect children’s personal information.
8. Personal data protection measures
We take care to protect your personal information with appropriate safeguards. We have taken both technical and organizational measures, and only well-defined staff have access to your information. However, caution should be exercised when transferring information over the Internet, as it is the sender’s own responsibility to send information to our website.
We have taken appropriate technical and organizational measures, based on applicable law, to protect your personal information from accidental or unlawful destruction, loss or alteration, unauthorized disclosure, unauthorized access, and other unlawful or unauthorized processing.
We protect personally identifiable information through a variety of physical and electronic means and through a variety of policies. In particular, we work to prevent unauthorized access to our systems through commercially accepted practices and systems. Only our specifically designated employees and third parties working for or on behalf of us (“Authorized Third Parties”) have access to or the right to process your personal information.
All persons handling such information must have a personal authorization. Access levels vary depending on the type of information you need to access or process. Our system is protected by a firewall. Manually stored and processed data that may contain your personal information is stored in locked, fireproof spaces. Only our specifically authorized employees or authorized third parties have access to such facilities or the right to process such information. All Sarok employees and employees of authorized third parties who are granted access to your personal information are required to maintain the confidentiality of such information.
Unfortunately, transferring data over the Internet is never completely secure. While we make every reasonable effort to protect your personal information, we cannot guarantee the security of the information you submit to our site, and it is the sender’s sole responsibility to provide it. Once we have received your information, we strive to prevent its unauthorized use through our strict policies and security features.
9. Actions you may take in relation to the processing of personal data
Subject to applicable law, you may have the following rights with respect to the processing of personal data:
non-disclosure of personal data
access to or obtaining a copy of personal data
reviewing and editing information in the user account
prohibition of direct marketing
reviewing and editing personal information
blocking and deleting cookies
allowing or denying the processing of location data
deleting or restricting the processing of data
opposition to the processing of personal data
withdrawal of consent
transfer of data to another controller
making a complaint to the supervisory authority.
We always strive to ensure that the personal information we hold is accurate. We therefore encourage you to update your account information if there have been any changes. The following is a list of personal data processing rights that may be available to you, subject to applicable law. We will use reasonable efforts to ensure that we only process your personal information that is reasonably necessary to process for the purposes set forth in this Privacy Policy.
Please note that if you exercise any of the rights listed below, you may be asked to provide additional information to verify your identity. Such additional information will not be used for any other purpose and will be deleted once your identity has been verified.
Providing Information: You may choose not to provide personal information to us. Please note that not all features of our websites and other services may be available to you if you do not provide your personal information (for example, we may not be able to process your order without the necessary information).
Right of access: You may have the right to request access to or request a copy of your personal data, as well as information about their nature, processing and disclosure.
Prohibition of direct marketing: We will add a cancellation link to all emails we send. Consent to direct marketing may be revoked at any time. If you withdraw your consent, we will update our database immediately and will no longer send direct marketing messages. However, we may still contact you if necessary due to the products or services you have ordered.
Checking and editing personal information: If you have a user account, you can edit and complete your personal information yourself. If you do not have a user account, you can contact our customer service, which will correct or delete incorrect, unnecessary or outdated information or complete the missing information at your request as soon as possible.
Blocking and deleting cookies: You can block the use of cookies by changing your browser settings. Please note that blocking the use of cookies may affect the usability of our websites. You can also delete cookies from your browser by changing its settings. The information collected by the previous cookie will then not affect the account that will be created based on the information collected after deleting the cookies.
Allow location information to be used: You can give your consent to the use of location information in device or application settings. You can also revoke your consent at any time via your account settings menu or by contacting our customer service.
Deletion or restriction of data processing: If you believe that the data we process is inaccurate or incorrect, that the processing is unlawful or that we process the data inappropriately, or if you wish to object to the processing, you can contact our customer service and request deletion or restriction. their processing. Please note that we’ll investigate your request as soon as reasonably possible before deciding what to do next.
Right to object: You may have the right to object to the processing of your personal data for a valid reason.
Withdrawal of consent: You can withdraw your consent to the processing of personal data at any time. If you withdraw your consent, we may still process your personal information on other legal grounds, such as handling orders and storing order information in accordance with the requirements of applicable law. However, please note that your user account will be deleted and the benefits you will receive through the account will be reset. Please also note that the withdrawal of consent does not affect the lawfulness of the processing that took place before the notification of withdrawal was received.
Right to transfer data from one system to another: You may have the right to transfer your personal data to another controller, where applicable, in a structured, commonly used and machine-readable form.
Making a complaint to the supervisory authority: If you think that we are processing your personal data in a way that violates your legal rights, you can make a complaint to the local supervisory authority. A list of supervisory websites can be found here.
10. Use of cookies and other similar technologies
Cookies are small text files, often consisting of letters and numbers, that a browser stores on your computer or other device when you use websites. You can find more information about cookies in our cookie policy.
11. Third Party Websites
Please note that certain features of our website are provided by third parties and are subject to third party privacy policies.
Our websites and services have features that allow you to share content on social media, such as the “Share” button on Facebook. Such features are provided directly by external service providers (e.g. Facebook, Twitter, Instagram, Google+). Such service providers may collect personal information related to visits to and use of the sites in accordance with their own privacy policies and policies.
Saroki is not responsible for the privacy practices or terms of such third parties.
12. Changes to Privacy Policy
We may update this Privacy Policy from time to time. Changes will be announced on this site.
Saroki reserves the right to change this Privacy Policy from time to time. When we post changes, the effective date shown at the top of the Privacy Policy will change to the effective date of the changes.
If the changes are material and adversely affect the user, Saroki will notify you by e-mail and in a prominent manner at the beginning of this Privacy Policy and on the front page of our websites.
13. Definitions
The following definitions apply to the terms used in this Privacy Policy:
“Data controller” means the body that decides how and why personal data is processed. In many jurisdictions, the controller has the primary responsibility for complying with applicable data protection laws.
“Personal data” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to identification information such as name, identity number, location, online identification or one or more specific physical, physiological, genetic, mental, economic, cultural or social factors.
The terms “process”, “processing” and “processed” refer to everything that is done with personal data, either through automatic data processing or manually, such as collecting, storing, organizing, structuring, storing, editing or modifying, retrieving, querying, using, transferring data , by disseminating or otherwise making available, coordination or aggregation, restriction, deletion or destruction of data.
“Processor of personal data” means a person or entity that processes personal data on behalf of the controller (other than employees of the controller).
14. Contact Information
For general data protection matters, matters related to user accounts and matters concerning the cancellation of marketing communications, please contact our customer service: [email protected]