Privacy policy

Privacy Policy of Interface Oy

DATA CONTROLLER
Interface Oy processes customer data for the purpose of order handling, customer relationship management, and direct marketing. Additionally, we process the data of website visitors for analytics purposes.

CONTACT DETAILS
Data Controller:
Interface Oy
Business ID: 1058486-3
Hevossaarentie 300
18100 Heinola, Finland
interface@interface.fi
Tel. +358 20 757 1830

Responsible person for the register:
Tuukka Leppänen
Interface Oy
tuukka.leppanen@interface.fi

DATA WE COLLECT
The personal data we collect may include:

  • First and last name

  • Email address

  • Postal address

  • Phone number

  • Additional information provided by the customer

  • Order and delivery history

  • Selected payment method

  • Possible other communication and/or complaints

  • Direct marketing consents and prohibitions

  • For corporate customers: company name, business ID, and possible contact person

  • Your IP address

  • Operating system and device type

  • Products searched on our website

  • Browsing history within the site

COOKIES AND ANALYTICS TOOLS
We use cookies to enhance the usability and functionality of our website. Additionally, cookies are used to collect analytics data and to integrate social media accounts into our website. A cookie is a small text file stored on the user's device. If you do not wish for cookies to be stored on your device, you can disable them in your browser settings. Please note that disabling cookies may affect the optimal functionality of our website. We use Google Analytics for analytics purposes. More information about Google Analytics' privacy policy is available in their own privacy statement.

SOURCE OF PERSONAL DATA
As a rule, we collect personal data directly from the data subject when placing an order or subscribing to our newsletter. Technical analytics data is recorded automatically during the website visit.

PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA
Personal data may be used for the following lawful purposes:

Order processing
We process personal data to handle, confirm, and deliver orders. Data may also be processed in relation to product complaints or warranty issues.

Customer communication and relationship management
Customer information may be used for customer service, communication, and maintaining the customer relationship.

Direct marketing
If you have subscribed to our newsletter or otherwise indicated your wish to receive direct marketing, we may use your personal data to send marketing materials such as product updates, current offers, and event information.

Legal bases for processing
We process personal data to fulfill our contractual obligations to the data subject or to carry out measures prior to entering into a contract. We also process data based on consent, where consent has been provided, and on legitimate interest for the maintenance and development of our business, for example through website analytics. The data subject has the right to withdraw their consent at any time by contacting us via email.

TRANSFER OF DATA OUTSIDE THE EU OR EEA
As a rule, data is not transferred or stored outside the EU or EEA. If such transfer or storage occurs, it will comply with the conditions set out in the EU’s General Data Protection Regulation. Possible data transfers to the United States are conducted under the EU-U.S. Privacy Shield framework.

DATA RETENTION PERIOD
We retain customer data only as long as required by law or as necessary for the purposes described above.

YOUR RIGHTS

Right of access
You have the right to access your personal data processed by Interface. You may contact us to find out what personal data we process and for what purposes.

Right to rectification
You have the right to have inaccurate, outdated, incomplete, or unnecessary personal data corrected or supplemented. Contact us to update, for example, your contact details or other personal information.

Right to erasure
You may request the deletion of your personal data. We will carry out the requested action unless we have a legitimate reason to retain the data, such as a legal obligation to preserve data under accounting laws or the need to retain order information for warranty purposes.

Right to object and restrict processing
You have the right to object to the processing of your data or profiling, especially in relation to direct marketing. You may also request the restriction of your data processing if your data is inaccurate or under special circumstances.

Right to data portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.

Exercising your rights
To exercise any of the above rights, please send us the following information by mail or email: name, address, phone number, and a copy of a valid ID. We may request additional information to verify your identity. We may deny requests that are unreasonably repetitive, excessive, or clearly unfounded.

DIRECT MARKETING
If you have given your consent to receive direct marketing, for example by subscribing to our newsletter, we may send you updates about our products, offers, and events. You always have the right to object to the use of your personal data for direct marketing, market research, or profiling by contacting us using the contact details provided above or by using the unsubscribe option provided in our marketing communications.

DATA SECURITY
We have implemented administrative, organizational, technical, and physical safeguards to protect the personal data we collect and process. These security measures are designed to ensure an appropriate level of confidentiality, integrity, and availability. Only authorized personnel with work-related justification have access to personal data. Data is protected against unauthorized access using user-specific IDs, passwords, and access rights.

FILING A COMPLAINT
You have the right to lodge a complaint with a supervisory authority if you believe that Interface's processing of your personal data is not in compliance with applicable data protection laws.