Privacy policy
Privacy policy and information document for the consumer register (sales and marketing)
1. Controller
Proviter Oy
Business ID: 1958781-7
Pulttikuja 4b
21110 Naantali, Finland
2. Contact person in matters related to the register
Sari Juntunen, Marketing Manager
sari.juntunen@proviter.fi
3. Name of the register
Proviter Oy’s consumer register (sales and marketing)
4. Purpose of the processing of personal data and the legal basis for the processing
Proviter Oy collects and processes your personal data when you place an order with us in our online store (www.mosquitomagnet.fi) or by phone or email, send us a message via a contact form on any of our websites (www.proviter.fi, www.thermacell.fi, www.mosquitomagnet.fi, www.victorloukut.fi) and/or participate in draws or competitions organized by Proviter Oy.
The purpose of the processing of the personal data collected in Proviter Oy’s consumer register is the fulfillment of contractual and legal obligations, the processing and delivery of orders, the processing of complaints, feedback and other messages sent to us and responding thereto as well as the organization of competitions and draws and the delivery of prizes to the winners. In addition, the purpose of processing of personal data is marketing and the targeting of marketing relating to Proviter Oy’s products and operations.
The processing of personal data is based on the consent of the data subject as referred to in Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) (EU) 2016/679 (e.g. competitions and draws as well as marketing), the performance of a contract or the taking of steps at the request of the data subject prior to entering into a contract as referred to in Article 6(1)(b) of the GDPR (e.g. online store orders) and/or compliance with a legal obligation to which the controller is subject as referred to in Article 6(1)(c) of the GDPR (e.g. consumer protection and product liability relating to the products).
We also use cookies on our websites (www.proviter.fi, www.thermacell.fi, www.mosquitomagnet.fi, www.victorloukut.fi) provided that you give separate consent to their use in a pop-up window. Cookies essential for the use of the websites can, however, be used without your consent. We use cookies to enhance user experience on the websites, enable the use of services, analyze and monitor the use of the websites and to target marketing. In the pop-up window, you can also reject the use of cookies (except for essential cookies).
The provision of personal data for the register is not a statutory requirement, but it may be a contractual requirement or a requirement necessary for entering into a contract.
Data in the register can be used for electronic direct marketing if the data subject has consented to this. The data collected is not used for decision-making or profiling based on automatic data processing that would produce legal effects concerning the data subject or similarly significantly affect them. However, data collected on our websites and web services by cookies can be used for profiling in order to establish the interests of visitors to better target marketing.
5. Personal data collected in the register
When you place an order with us in our online store or by phone or email, we can collect the following personal data:
- name*
- for customers to be invoiced: personal identity code*
- email address*
- postal address*
- telephone number*
- delivery address*
- identification and contact details for the recipient of the delivery*
- purchase details relating to the products*
- payment details, payment method details and invoicing details*
*Mandatory personal data that must be provided for the fulfillment of contractual obligations or is a prerequisite for entering into a contract.
In addition, we can collect and process complaints, feedback and other messages that you have sent us relating to our products or operations.
When you participate in a competition or draw organized on our websites or on our sites on the social media platforms (Facebook, Instagram, YouTube), we may collect the following personal data based on your possible comment or message:
- Your profile and/or username
- The communication or other contents that you have shared with us
In addition, the following personal data can be collected on the winner of our competitions or draws in order to communicate the win and deliver the prize:
- Name and contact details (postal address, telephone number, email address)
If you have consented to the use of cookies on our websites, in addition to the data mentioned above, we may collect the following data with respect to our websites and web services:
- information on the terminal device (e.g. IP address, operating system, browser version, location data and information on the device, such as browser window resolution)
- information on page-specific settings
- data collected by the Google Analytics system (Google Analytics 4)
For issues relating to our range of products and company, you may also visit our social media sites (Facebook, YouTube ja Instagram) maintained by third parties. On these sites, cookies of the parties responsible for the maintenance of the platforms may be used, and our registers may accumulate statistics collected by cookies and possibly other data collected at any given time as specified in the privacy policies of the social media service providers. We encourage you to familiarize yourself with the cookies management policies of the social media service providers on the sites in question.
6. Regular sources of personal data
The data is collected from the data subjects themselves.
On our websites or web services and on our social media sites maintained by third parties, data is also collected by cookies based on the visitor’s actions if the data subject has consented to the use of cookies.
7. Categories of recipients of personal data and disclosure of personal data outside the EU or the EEA
Data collected in the register can be disclosed to Proviter Oy’s partners located in Finland that provide Proviter Oy with services relating to logistics and customer service, financial administration services, marketing services, IT services and services relating to the maintenance of our online store. We provide further information on the recipients of personal data upon request.
When using external service providers, we ensure through contracts that the obligations under any valid data protection legislation are fulfilled in the processing of personal data and that personal data is only used for the purpose specified by us.
On our websites and web services, we also use third-party cookies for visitor information analysis, the targeting of marketing and banner advertising if you give your consent to this. Such service providers include Google, Facebook, Instagram and YouTube. Occasionally, we may also use cookies of other service providers located in Finland on a project basis and for a short period. The service providers used by us at any given time are listed in the cookies settings. Third-party cookies are subject to the data protection practices and terms of use of the third parties in question. We recommend that you familiarize yourself with their data protection practices and terms of use.
Data collected in the register is not regularly disclosed outside the EU or the European Economic Area (EEA). In some cases, the external service providers that we use may also locate and/or process personal data collected by us in non-EEA countries i.e. in so-called third countries. In this case, we ensure the legal grounds for international transfers of personal data with the EU-U.S. Data Privacy Framework or the EU’s standard contractual clauses or by otherwise ensuring that the conditions set in the EU GDPR for data transfer and processing in third countries are met.
Upon request, we provide further information on the transfers of personal data and the safeguard mechanisms used.
8. Personal data retention period
We will erase outdated, unnecessary and inaccurate personal data as soon as we have been informed thereof. In other respects, we will retain your data no longer than is necessary to retain the data in order to meet the purposes described in this privacy policy and to comply with any mandatory legislation.
Orders in the online store or by phone or email
- We will retain your personal data as well as any complaints and other messages that you have sent us relating to your order for the period required by our product liability, i.e. for ten (10) years counted from the delivery of the ordered product, or in the event of a possible dispute, until Proviter Oy’s legal liability has been established and the case has been closed.
- If you cancel your order and return the product, we will retain your personal data for as long as is required by the obligations based on the accounting legislation, i.e. mainly for six (6) years counted from the end of the year during which the legal actions relating to the order and its cancellation or non-collection have taken place. This is also how we proceed if you fail to collect your order from the post office and the product is returned to us, and you do not wish us to redeliver the product.
Personal data collected via the contact form is retained for a maximum period of one (1) year, unless the personal data is retained due to the nature of the message sent to us for a longer period on the basis of the points above.
Personal data collected in the context of participation in a competition or draw is retained for a maximum period of six (6) months after the winner has been announced. We will retain the winner’s data for the period required by product liability, i.e. for ten (10) years.
With respect to personal data collected by cookies on our websites or web services or on social media sites maintained by third parties, we will erase personal data within two (2) years of the collection of the data, or as stated in the privacy policies of the networks if the retention period stated is shorter than two (2) years.
9. Security measures and procedures to protect personal data
The register is kept electronically and appropriately protected by technical means of protection and data protection methods.
Access rights to the register and access to the personal data have only been given to designated authorized persons who are responsible for the maintenance of the system and/or the processing of personal data. All persons processing personal data have been provided with guidance in the processing of personal data. They are under a confidentiality obligation, and they have signed a non-disclosure agreement, in which they have agreed to adhere to appropriate data security and the principles of the GDPR.
The data in the register is protected from external use, and the usage of the register is monitored. Written agreements made with external service providers commit them to comply with Proviter Oy’s personal data protection practices and the legislation in force.
10. Data subject’s rights
The data subjects have
- the right to know what data concerning them has been stored in the register or that the register contains no data concerning them;
- the right to request that the data stored concerning them be rectified, erased or completed if the data stored is inaccurate, unnecessary, incomplete or outdated for the purpose of the data processing and collection specified in this privacy policy;
- the right to request that the processing of their personal data be restricted; and
- the right to receive the personal data they have provided to the controller, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller, where the processing is based on consent or a contract and the processing is carried out by automated means.
Data subjects who wish to exercise their rights mentioned above must make a specific request to the contact person in matters related to the register by submitting a personally signed document.
11. Withdrawing consent
The data subjects have the right to withdraw their consent to the processing of personal data. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. A request for the withdrawal of consent must be sent by email to the email address of the contact person in matters related to the register (see point 2 of the privacy policy).
12. Objecting to direct marketing
The data subject has the right to object to the processing of personal data for electronic direct marketing. Such objection can be sent by email to the address sari.juntunen@proviter.fi.
13. Lodging a complaint concerning the processing of personal data
The data subject has the right to lodge a complaint with the supervisory authority (the Data Protection Ombudsman) if the data subject considers that the processing of personal data concerning them infringes the legislation in force.
14. Changes to the privacy policy
This privacy policy was last updated on June 12, 2024. Proviter Oy reserves the right to make changes to this privacy policy, for example, when legislation is amended.
We recommend that you view the privacy policy on a regular basis. The latest version is always available on our websites.