1. Legal Grounds for Processing Personal Data
This privacy policy explains what personal data Soilfood collects and how it is processed. This policy does not cover the websites of other companies or organizations, even if they are linked from our services, systems, or website.
1.1 Contract
We process customer-provided information to fulfill agreements for services or products ordered by the customer.
1.2 Consent
With the user’s consent, we may process personal or behavioral data for targeted sales and marketing.
1.3 Legitimate Interest
Soilfood Oy processes personal data based on legitimate interest for the following purposes:
- verifying customer transactions (e.g., payment monitoring)
- providing services
- developing our business and customer service (e.g., handling feedback)
- communication and marketing (e.g., using cookies to recommend content)
Personal data held by us is processed internally within Soilfood Oy. These processing purposes are essential for business operations and are therefore based on legitimate interest.
We use the Snitcher service to measure the commercial use of our website. This service identifies company names and addresses based on visitors’ IP addresses. To distinguish between visitors, Snitcher places a cookie named ‘SNID’, which is valid for two years.
1.4 Legal Obligation
Soilfood Oy is obligated to process and retain certain personal data to comply with accounting or other mandatory legislation. In such cases, processing is based on fulfilling legal obligations.
2. Data Content of the Register and Regular Sources
2.1 Information Provided by the Customer and/or Subcontractor
Soilfood Oy collects information provided by the customer and/or subcontractors or other personally identifiable information for order and service fulfillment, billing, customer relationship management, and marketing. Without this information, we cannot deliver the ordered services or products. Collected data includes:
- Contact details (e.g., name, address, phone number, email)
- Customer relationship data (e.g., billing, payment, and collection information, product and order details, customer feedback, cancellations)
- Direct marketing consents and opt-outs
- Business ID
- Contact details of business customers and partners
Other relevant interaction and usage data related to the customer relationship (e.g., service usage in various channels, satisfaction data provided by the customer, or additional order-related notes).
2.2 Observed Data from Service Usage
To improve our services and business and to target marketing, we automatically collect data from visitors to our website using cookies. This includes visitor behavior data to better understand how users interact with our site and which content and technical solutions best serve them. This analysis helps us improve the site and target marketing and sales efforts (e.g., via Facebook).
2.3 Data Obtained from Other Sources
Soilfood Oy may use third-party sources to update or enrich data to ensure customer information is up-to-date and accurate:
- The Finnish Population Information System
- Postal address databases
- Other equivalent public or private sources
If personal data is processed for purposes other than those stated above, we will ensure the processing is compatible with the original purpose.
3. Data Retention Period
Soilfood Oy retains customer data only as long as necessary for the purposes defined above and in compliance with applicable laws. Registers are regularly reviewed for relevance.
Typically, data in marketing registers is kept until the individual opts out of marketing or the information becomes outdated. Customers may influence data retention using the methods described below. Information about marketing opt-outs is retained to ensure compliance.
Accounting or other legal obligations may require us to retain certain personal data even after the end of the customer relationship or other legal basis for processing.
4. Data Disclosure
Soilfood Oy does not disclose customer personal data to third parties except in the following cases:
- With the customer’s consent
- If required by competent authorities or others in accordance with applicable legislation
- If necessary to enforce a contract, collect debts, investigate potential violations, or establish, exercise, or defend legal claims
- When using third-party marketing or sales tools that require uploading data into a system (e.g., email or SMS tools)
We use subcontractors for data processing and ensure via contractual arrangements that data is processed in accordance with applicable legislation and this privacy policy. Subcontractors act on our behalf and are not allowed to use the data for their own purposes.
5. Data Transfers Outside the EU or EEA
We do not transfer personal data outside the EU or EEA.
6. Data Protection Principles
We use necessary technical and organizational security measures to protect personal data. Only employees of the data controller and specifically authorized persons with a job-related need have access to the register. All individuals handling personal data are bound by confidentiality.
Data is stored in secure databases requiring user credentials and passwords. These databases are protected by firewalls. Our organization is instructed on secure data handling, and as a rule, all registers are stored behind firewalls in our intranet.
7. Rights of the Data Subject
Data subjects have rights under data protection laws regarding the collection, processing, and content of their personal data, including:
- Right to access, correct, and delete data
- Right to transfer data to another system
- Right to object to direct marketing and related profiling
- Right to object to processing or request restriction
- Right to block cookies
- Right to clear cookies
- Right to withdraw consent
- Right to file a complaint with a supervisory authority if they believe their data has been processed in violation of this policy or applicable law
You may request information on what data we hold about you by contacting Soilfood Oy. You may also request that we delete your data by email. Even if you are removed from our marketing register, we may still send you messages related to an ongoing customer relationship.
We respond to inquiries and feedback regarding personal data within 20 business days.
8. Changes to the Privacy Policy
Soilfood Oy reserves the right to modify this privacy policy and will notify users through its services. Changes may result from legislation or business development.
9. Contact Information
Soilfood Oy
Kalevantie 7 C
33100 TAMPERE
+358 400 230 730
soilfood@soilfood.fi