What information does K. Hartwall collect about me?
General information of this data protection statement
We, K. Hartwall Oy Ab (hereinafter "K. Hartwall" or "we"), take the protection of your personal data very seriously and adhere strictly to the rules of the applicable data protection laws. These include above all the Basic Regulation on Data Protection (hereinafter: "DS-GMO", Regulation (EU) 2016/679 of the European Parliament and of the Council. Personal data is collected on our website and when using our apps and services only to the extent necessary and processed for the specific purpose. Personal data is data that identifies you personally or other data linked to you.
Responsible body within the meaning of Data Protection Legislation
K. Hartwall Oy Ab
Kay Hartwallin tie 2
Tel. +358 9 413 18 33
Fax +358 9 272 1484
Processing within the K. Hartwall Oy Ab
The data collected can be processed if:
- you have given your express and informed consent elsewhere (e.g. reference in the enquiry form),
- it is necessary with a specific purpose and the division of labour; corresponding contractual agreements have been concluded for this purpose,
- the data is made available pseudonymised by the responsible party and the responsible party guarantees that the commissioned group company cannot de-pseudonymise this data, or
- the data is stored anonymously by the responsible body and the data stored in this way is no longer subject to data protection regulations.
Transfer to third countries
K. Hartwall Oy Ab process/transmit the data provided by you in/at locations in Finland, the European Union and third countries (including the USA) which have an appropriate level of data protection in accordance with Article 45 DS-GVO or offer suitable guarantees in accordance with Article 46 DS-GVO.
Scope of the data protection statement
The following statement gives you an overview of how we guarantee data protection, what kind of data is collected and processed for what purpose and on what legal basis. It applies in principle to all websites and apps for which K. Hartwall is responsible. If K. Hartwall websites and apps deviate from these principles of data processing or supplement them with their own, this will be indicated in a suitable manner on the corresponding websites or in the apps.
- The first part (regulations for private users) applies to the private users of K. Hartwall services.
- The second part (provisions for business users) applies to business users of K. Hartwall services.
- The third part (regulations for applicants) applies to the private users of K. Hartwall services with regard to applications.
- The fourth part (general information and regulations for K. Hartwall websites and apps) applies to all users using K. Hartwall services or websites and apps.
- The fifth part (information on rights of data subjects) applies to all users whose data is subject to data protection law, but not legal entities.
Furthermore, our websites may contain links to websites of other providers to which this data protection declaration does not apply.
I. Regulations for private users
This part of the data protection statement applies to private users of K. Hartwall Services. The legal basis for processing your data is based on your consent to this data protection statement as consent or in order to be able to provide you with information, services or products requested inaccordance with DSGVO Article 6 Para.1 lit.b).
Use and verification of personal data
The following, are some of the personal data types you provide:
- your name
- your address (postal code, city, street and house number, address supplements if applicable)
- your email address
- your date of birth
- your sex
- your telephone number and/or mobile phone number
- your country
- your payment information
- product name of your K. Hartwall product
- serial number of your K. Hartwall product
If you provide us with personal data, we use it to answer your questions, to process and carry out your consultation request, for technical administration, for login activities and the services provided within the respective websites or apps. The legal basis for this is Art. 6 para. 1 sentence 1 b DS-GMO or your consent. You can revoke your consent to the use of your provided data at any time. To do so, please contact: email@example.com, stating the service(s) used if possible.
K. Hartwall contact by telephone
If you have agreed to our data protection statement and have given us your telephone number when making a consultation request, we will contact you by telephone before forwarding your consultation request to our partner company in order to check the accuracy of your information, to discuss your project and to be able to refer you to the appropriate specialist company.
Information about the transfer of your data and evaluation
If you have agreed to our data protection statement and provided us with your e-mail address when making a consultation request, we will inform you by e-mail about the current status of your consultation request via our service. Among other things, we will send you a message with the contact details of the referred specialist partner and, after your consultation, an opportunity to evaluate this specialist company. If you do not provide your e-mail address when you request specialist advice, we cannot provide you with a specialist advice service.
Passing on of personal data
With your consent, we will forward the personal data you have entered to external specialist companies who cooperate with our company as partners and who are active in your region, in order to provide the service of providing specialist advice and/or the purchase, maintenance or repair of a heating system or other product from the K. Hartwall product range.
This specialist partner will be asked to contact you within a fixed time frame in order to be able to provide the specialist advice and/or quotation you have requested. For this purpose, the specialist company will contact you by e-mail and/or telephone.
Further processing and deletion of your data
Furthermore, your data will not be passed on or sold to third parties, i.e. persons or companies not belonging to the K. Hartwall. Stored personal data will be deleted if you revoke your consent to its storage, if the data is no longer required for the purpose intended by the storage or if its storage is inadmissible for other legal reasons.
Advertising and advertising consent
We, K. Hartwall, will only inform and ask you about K. Hartwall products and services by e-mail, post or telephone and if you have expressly given us your consent to use your personal data for advertising purposes (opt-in).
This is done by actively ticking the box next to the statement, "Add my email to the K.Hartwall Newsletter subscribers' list."
Please note: The text displayed on the respective website/app may list different companies if they are affected by your request.
If you have given us your consent for such use but no longer wish to receive advertising or surveys from K. Hartwall in future, you can revoke your future consent at any time. Your data will then be deleted or, if it is still required for billing and accounting purposes, stored for these purposes. Please send an e-mail to firstname.lastname@example.org.
Use of personal data when using the contact form
If you send us enquiries using one of our contact forms, your details from the enquiry form, including the contact data you have provided there, will be stored with us for the purpose of processing your enquiry and in the event of follow-up questions on the same subject. This data will not be passed on to third parties.
You can revoke your consent to the use of the data provided via the contact form at any time. Please contact: email@example.com
II. Provisions for business users
This part of the data protection regulations only applies to business users such as trade businesses, industrial businesses, municipalities, commercial businesses, planners, etc. and only insofar as these make personal data available from contact persons for the conclusion and execution of contracts in accordance with DSGVO Article 6 Para.1 lit.b) on our websites and in our apps.
Personal data is collected and processed by K. Hartwall for the following purposes:
- Mediation of customer inquiries
- Mediation to inquiring customers
- Display in K. Hartwall specialist company directories (e.g. specialist partner on-site search at khartwall.com)
As far as you have made personal data available to us, we use it only for answering your inquiries, for processing contracts concluded with you, for technical administration, for login activities and the services made available within the respective Internet pages or apps.
Stored personal data will be deleted if you revoke your consent to its storage, if it is no longer required for the purpose for which it was stored or if its storage is inadmissible for other legal reasons. Please contact firstname.lastname@example.org. Your data will then be deleted or, if it is still necessary for verification, billing and/or accounting purposes, stored for these purposes.
For further personal data processed in the context of the delivery and performance of products and services pursuant to Article 6, paragraph 1, letter b), the data protection provisions in the respective general terms and conditions of sale apply.
III. Regulations for applicants
This part of the data protection regulations applies to applicants on job advertisements of K. Hartwall. This only applies insofar as these applicants submit personal data to K. Hartwall as part of the application procedure, e.g. application in paper form, e-mail, contact forms with attachments or portals operated by K. Hartwall or the use of electronic job exchanges of third parties in accordance with the required content, also in accordance with other regional legal requirements.
We use your personal data only to process your application. Application documents submitted on paper are retained only for the duration of the recruitment process, the paper is then disposed of via certified service providers in compliance with data protection laws.
The deletion of the personal data of the applicant takes place automatically at the earliest after 4, but at the latest after 6 months, from the time at which the applicant was informed that the position is not occupied by him and that there are no further legal requirements to the contrary. The deadline is based on the provisions of the Equality Act 2010.
If you send us application documents in paper or electronic form without reference to job advertisements you express consent for your data to remain stored in our system in order to be considered for future other job advertisements.
IV. General information and regulations for K. Hartwall websites and apps
These provisions apply in addition to the provisions for private users and the provisions for business users for K. Hartwall websites and apps.
Data processing by accessing our Internet pages and using our apps
K. Hartwall automatically collects and stores information in its server log files that your browser or app transmits to us. K. Hartwall cannot assign this data to individual persons. This data is not merged with other data sources. These are:
- Browser type/ version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP addresses v4 and v6)
- Time of the server request
The IP address is the globally valid identification of your computer at the time of allocation by your Internet provider and consists, in its currently most common form (IPv4), of four blocks of digits separated by dots. In most cases, as a private user, you will not use a constant IP address, as this is only temporarily assigned to you by your provider (so-called "dynamic IP address"). With permanently assigned IP addresses (so-called "static IP addresses"), a clear assignment of user data via this feature is technically easy.
The mentioned data will be processed by us for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring comfortable use of the aforementioned website
- Evaluation of system security and system stability
- For further administrative and statistical purposes
The personal data of the server log files is processed on the basis of Art. 6 para. 1 lit. f DSGVO. This authorisation allows the processing of personal data in the "legitimate interest" of the person responsible, provided that your fundamental rights, freedoms or interests do not prevail. Our legitimate interest is in the easier administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons which exist in your particular situation and which contradict the data processing. All you need to do is send an e-mail to the data protection officer. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
The server log files with the above data are automatically deleted after 30 days or anonymised if used for statistics. We reserve the right to store the server log files for longer if facts exist which suggest the assumption of unauthorised access (such as an attempt at hacking or a so-called DDOS attack).
Linking to external websites
This data protection statement applies exclusively to the K. Hartwall websites and apps. These may contain links to third-party websites. This data protection statement does not extend to these. If you leave the K. Hartwall websites and apps in order to visit the services of a third-party provider, we recommend that you also carefully read this provider's data protection statement.
Information on cookies and the use of analysis tools
The processing of personal data through cookies and analysis tools (Google Analytics and Google Tag Manager, Google Adwords Conversion Tracking, Third-Party-Cookies, Re-Targeting-Technologies, Google Remarketing, Facebook Remarketing and Inspectlet) is based on Art. 6 Para. 1 lit. f DSGVO. This authorisation allows the processing of personal data in the "legitimate interest" of the person responsible, provided that your fundamental rights, freedoms or interests do not prevail. Our legitimate interest is to analyse the use of our website.
The processing of personal data by Google AdWords (list all retargeting technologies) is based on Art. 6 Para. 1 lit. f DSGVO. This authorisation allows the processing of personal data in the "legitimate interest" of the person responsible, provided that your fundamental rights, freedoms or interests do not prevail. Our legitimate interest is in the personalised display of targeted advertising and the statistical analysis of the effectiveness of advertising (e.g. determining how many clicks on an advertising banner have led to a purchase from our website).
K. Hartwall uses so-called cookies in several places on its websites and in its apps. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Cookies do not cause any damage to your computer and do not contain any viruses.
K. Hartwall also uses analysis tools for this purpose, such as Web Trends or Google Tag Manager (Firebase). The data provided and used is collected and stored completely anonymously. This data may also be stored outside Finland or the European Union.
When implementing and using analysis tools and tracking technologies, we make personal data anonymous as quickly as possible either on the part of the provider, regulated by appropriate contracts, or within the scope of our first use, so that the right to information on your part cannot be exercised on all technologies listed below.
You can prevent the transmission of such data by making the appropriate settings in your browser, app or the operating system environment (iOS, Android). However, this may lead to problems in calling up, operating or functionality of the content or service offered.
Google Analytics and Google Tag Manager
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
We would like to point out that Google Analytics has been extended to include the "anonymizeIp" function on this website to ensure that IP addresses are collected anonymously (IP masking).
This website also uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.
Google Adwords Conversion Tracking
As a Google AdWords customer, K. Hartwall uses Google Conversion Tracking, an analysis service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;"Google"). Google AdWords sets a cookie on your computer ("conversion cookie") if you have accessed our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If you visit certain pages of ours and the cookie has not expired, we and Google may detect that someone has clicked on the ad and has been redirected to our site. Each AdWords customer receives a different cookie. Cookies cannot therefore be traced via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.
However, they do not contain any information with which users can be personally identified.
K. Hartwall makes use of a number of advertising partners who help to make the Internet offer and the websites more interesting for you. For this reason, cookies from partner companies are also stored on your hard drive when you visit the websites. These are temporary/permanent cookies that are automatically deleted after the specified time. These temporary or permanent cookies (lifetime 14 days to 10 years) are stored on your hard disk and delete themselves after the specified time. The cookies of our partner companies also only contain pseudonymous, usually even anonymous data. This includes, for example, data on which products you have looked at, whether something was purchased, which products were searched for, and so on.
Some of our advertising partners collect information about which pages you have visited before or which products you have been interested in, for example, in order to be able to show you the advertising that best suits your interests. This pseudonymous data will never be combined with your personal data. Their sole purpose is to enable our advertising partners to address you with advertising that might actually be of interest to you.
Our websites use so-called re-targeting technologies. We use these technologies to make our website more interesting for you. This technology makes it possible to address Internet users who are already interested in our products with advertising on the websites of our partners. We are convinced that the insertion of personalised, interest-related advertising is generally more interesting for the Internet user than advertising that has no such personal reference. The insertion of these advertising materials on the pages of our partners is based on cookie technology and an analysis of the previous user behaviour. This form of advertising is completely pseudonymous. No user profiles are merged with your personal data.
By using our site, you consent to the use of so-called cookies and thus to the collection, storage and use of your user data. Furthermore, your data is stored in cookies beyond the end of the browser session, so that it can be called up again the next time you visit the website, for example. You can revoke this consent at any time with future effect by refusing to accept cookies in your browser settings.
To do this, Facebook stores a small file with a sequence of numbers in the browsers of visitors to our website. This number is used to record visitors to the website and anonymised data on the use of the website. No personal data of visitors to the website is stored. If you visit Facebook below, you will see ads that are highly likely to include previously accessed product and information areas. If you do not want the data to be collected by Facebook, you can refuse to save it by clicking on the following link: https://www.facebook.com/settings/?tab=ads If you use several browsers, you must carry out the process individually.
V. Information on the rights of data subjects
This part of the data protection statement provides additional information on how you can exercise your rights as a data subject vis-à-vis K. Hartwall.
In order to comply with the rights of affected DS-GMOs, it may be necessary for K. Hartwall to request further information to prove your identity in cases of personal data collected on the basis of contractual relationships on a random sample basis or in cases of justified doubt. This is especially true if a request for information is available in electronic form, but the sender's details do not reveal the identity of a natural person concerned.
- to request information about your personal data processed by us in accordance with Article 15 DSGVO. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if this has not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Article 16 DSGVO;
- to request the deletion of your personal data stored by us in accordance with Article 17DSGVO, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- pursuant to Article 18 of the DSGVO, to restrict the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing pursuant to Article 21 of the DSGVO;
- to receive, in accordance with Article 20 DSGVO, the personal data you have provided to us in a structured, current and machine-readable format or to request the transmission to another person responsible;
To exercise these rights, please contact us:
K. Hartwall Oy Ab
Kay Hartwallin tie 2
Tel. +358 9 413 18 33
Fax +358 9 272 1484
In accordance with Article 7 paragraph 3 DSGVO, you may revoke your consent to us at any time. As a result, we will no longer be allowed to continue processing data based on this consent in the future. You can revoke your consent via: info.fi@K. Hartwall.com or widerruf@K. Hartwall.com or email@example.com
Complaint to a regulatory authority pursuant to Article 77 DSGVO. As a rule, you can contact the regulatory authority of your usual place of residence or our company headquarters.
Ratapihantie 9, 6. krs, 00520 Helsinki, Finland
PL 800, 00521 Helsinki, Finland
Phone: 029 56 66700
Further information - Contact details
Your trust is important to us. Therefore, we are always available to answer your questions regarding the processing of your personal data. If you have questions which this data protection statement could not answer or if you would like more detailed information on any point, please contact us:
K. Hartwall Oy Ab
Kay Hartwallin tie 2
Tel. +358 9 413 18 33
Fax +358 9 272 1484
We endeavour to store your personal data by using technical and organisational means in such away that they are not accessible to third parties. When communicating by e-mail, complete data security cannot be guaranteed, so we recommend that you send confidential information by post.
Changes to the data protection statement
This data protection statement is currently valid and is dated May 2018.
Due to further development of our website and services offered above or due to changes in legal or official requirements, it may become necessary to amend this data protection statement. You can call up and print out the current data protection statement on the website at khartwall.com/privacy-policy at any time.
Your trust is important to us. We would therefore like to be accountable to you at any time regarding the handling of your personal data. If you have any questions which have not been answered by this data protection statement, or if you would like further information about any particular point, please contact us:
Kay Hartwallin tie 2
Tel. +358 9 413 18 33
Fax +358 9 272 1484