Marketing privacy policy
The Evac Group and its subsidiaries (“Evac”, “we”, or “us”) value your privacy and is committed to protecting your personal data and complying with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679. This Marketing Privacy Policy (“Privacy Policy”) describes how we collect, use, and disclose personal data collected in relation to Evac’s marketing practices. This Privacy Policy also describes your legal rights with respect to such processing.
Controller’s Contact Details
Evac Group Oy and each subsidiary with respect to its own customers and prospects act as the controller of the personal data processed. If you have any comments or questions regarding this Privacy Policy or our data handling practices, please contact us at tietosuoja@evac.com.
Purpose and Legal Basis for Processing Personal Data
Evac only processes personal data that is necessary for a specific, explicit and lawful purpose. In connection with our marketing activities, we mainly process personal data for the following purposes:
- Providing, promoting, and developing our products and services, which may include marketing and advertising our products and services, such as targeted marketing via LinkedIn, sending electronic newsletters, and managing customer relationships;
- Fulfilling your requests, which may include responding to your communications or inquiries, interacting with you on social media, and registering you for Evac-hosted or sponsored events;
- Improving our website, customer relationships, and experiences;
- Carrying out our internal business purposes, such as corporate transactions, to conduct research and analytics about your use and interaction with us, assess the performance of our advertisements and marketing, optimize our advertising and marketing campaigns, and determine the effectiveness of our communications; and
- Complying with applicable law and responding to requests and communications from data protection authorities or other government officials.
The processing of your personal data is always based on one or more of the following legal bases:
- Your consent. We may rely on the consent that you provide us at the point of collection of your personal data to use such information for the purposes outlined herein. For example, you may have agreed to receive marketing materials, such as our electronic newsletters.
- Our legitimate interests. We may rely on our legitimate interests to process your personal data, provided that such interests are not overridden by your interests, fundamental rights or freedoms. In particular, we may process your personal data in reliance on a legitimate interest in the effective and lawful operation of our businesses, maintenance of our customer relationships, continued relevancy of customer and prospective communications, and the effective delivery of information and services to you. We may have other legitimate interests and, if so, we will make clear what those interests are at the relevant point in time.
- Our legal obligation. We may be required to process your personal data in order to comply with a legal obligation arising under the applicable law, to which we are subject.
Categories of Personal Data and Sources of Personal Data
We collect or otherwise obtain information relating to you directly from you or through certain third parties described below. Such information may include personal data, i.e., information that alone or in combination with other information identifies or can be reasonably linked to you as an individual.
The information we may collect about you includes the following:
- Information you provide. We may ask you to provide, or you may choose to provide, information, such as your name, email address, postal address, phone number, professional information (e.g., industry, company, and job title), and geographic location. Such information may be provided to us when you request information about our products, engage with us online, or register for or attend Evac-hosted or sponsored events. Evac may also collect information about you via online forms on our website, email and newsletter subscriptions, or your other website or social media activity.
- Information collected from other sources. We may also obtain personal data from third parties that have a relationship with you (e.g., your employer, professional networking sites), from third parties (e.g., organisations hosting events related to vessel building, our advertising, marketing and analytics partners), and from publicly available sources. We may combine the information that we collect with information from these additional sources. We will use the information only for the purposes described in this Privacy Policy.
Please note that social media sites hosted by a third party other than Evac may also collect information about you. You should review those third parties’ privacy notices to understand how and when they will collect and use your data.
Disclosures of Data and Data Transfers outside the European Union and European Economic Area
For the purposes set out above, we may disclose your information to:
- other entities within the Evac group of companies;
- social media platforms, such as LinkedIn;
- our advertising, marketing and analytics partners;
- other third parties that provide services to us, such as website hosting, IT infrastructure services, and customer service; and
- competent authorities to comply with legal or regulatory obligations or requests.
Evac may transfer data outside of the European Union (“EU”) and European Economic Area (“EEA”). When data is transferred outside of the EU and EEA, we ensure that there is an appropriate basis for the transfer in accordance with applicable data protection legislation. Evac group companies have concluded a data transfer agreement incorporating the EU Commission Standard Contractual Clauses (see further information at EU Commission’s website). Further information on data transfers may be requested by using the contact details above.
Storage Periods
Evac will keep your personal data for as long as they are needed for the purpose, for which your personal data was collected and processed. The retention periods for your personal data are usually three years from the last communication we have had with you.
Principles of Securing Personal Data
We have put in place appropriate technical and organizational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those, who have a strict need for processing your personal data. Such parties will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have procedures in place to deal appropriately with any suspected personal data breach and we will notify you and any applicable authority of a breach when it is necessary for light of applicable data protection legislation.
Cookies
We use cookies to personalize our content and advertisements, provide social media features, and analyze our traffic. We also share information about your use of our site with our social media, advertising, marketing, and analytics partners who may combine it with other information that you have provided to them or that they have collected from your use of their services. These partners collect and use this information subject to their own privacy notices. For more information on our use of cookies, please see our cookie policy via the cookie banner (on the bottom left corner of the page).
Third-Party Sites and Platforms
As noted above, we may obtain information about you directly or indirectly via third-party websites, such as social networking sites. This Privacy Policy does not address, and we are not responsible for, the privacy practices of any such third parties. Any websites or platforms (e.g., social media platforms) hosted by a third party other than Evac may also collect information about you, and the processing of your personal data by such third parties is subject to their privacy notices. Therefore, we encourage you to review the privacy notices offered by any websites or platforms you utilize.
Your Rights as a Data Subject
You as a data subject have rights in respect of the personal data we hold about you. You have the following rights:
- Right to request access to your personal data. You have the right to get a confirmation as to whether Evac processes personal data relating to you. If so, you are entitled to receive a copy of the personal data being processed.
- Right to request rectification of inaccurate or incomplete data. You have the right to ask Evac to rectify personal data concerning you. You also have the right to have incomplete personal data completed.
- Right to request erasure. You have the right to ask Evac to delete your personal data in certain situations.
- Right to object to processing based on Evac’s legitimate interests. In cases where the processing of your personal data is based on our legitimate interests, you have the right to object to the processing for such purposes.
- Right to request the restriction of processing of personal data. You have the right to request that Evac restricts the processing of your personal data under certain circumstances. The restriction of processing means that the personal data that is subject to the restriction may, besides from storage, only be processed (i) with your consent; (ii) for the establishment, exercise, or defense of legal claims; (iii) for the protection of the rights of another natural or legal person; or (iv) for reasons of important public interest.
- Right to data portability. You have the right to receive the personal data you have personally provided to Evac in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, if the processing is based on consent, and is carried out by automated means.
- Right to withdraw your consent. If the processing is based on your consent, you have the right to withdraw your consent at any time.
If you wish to use your above rights as a data subject, please submit your request using the abovementioned contact details.
If you consider that your personal data is not processed in accordance with applicable data protection legislation, you may file a complaint with the Finnish Data Protection Authority or as applicable in your country of residence:
Office of the Data Protection Ombudsman
Street address: Lintulahdenkuja 4 FI-00530 Helsinki, Finland
Postal address: PO Box 800
FI-00531 Helsinki, Finland
Telephone: + 358 29 56 66700
Email: tietosuoja@om.fi
Amendments to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. We will also notify you in other ways from time to time about the processing of your personal data.
This Marketing Privacy Policy was last updated on April 29th 2024.