Data Protection Statement

In this data protection statement, we go through why we process your personal data and what your rights are in the processing of your personal data when you visit www.sagavoices.com or interact with us in relation to the Saga Voices online publication (“Saga Voices”). We respect your privacy and undertake to protect your personal data in accordance with the EU General Data Protection Regulation (“GDPR”, 2016/679) and the Data Protection Act (1050/2018).

This data protection statement has been most recently updated on 9 June 2022.

1 Controller and contact information

Name: Saga Furs Oyj (hereinafter “we”, “us” or “Saga Furs”)

Business ID: 0115411-6

Address: Martinkyläntie 48, 01720 Vantaa, Finland

Phone number: +358 9 84981

Websites: https://sagavoices.com and https://sagafurs.com

If you have any questions regarding the processing of personal data, you can contact us at: dataprivacy@sagafurs.com

2 Personal data collected and processed as well as purpose and legal basis for processing personal data

Implementation of and managing notification e-mails and other customer communication:

In order to send you notification e-mails regarding new issues of Saga Voices, we need to process personal data for the implementation of and managing such communication. Notification e-mails are only sent if you have actively subscribed to them. We also process personal data in order to communicate with you and to notify of any relevant changes related to Saga Voices. The personal data includes:

  • your name (if it has been disclosed when subscribing to the notification e-mails);
  • your e-mail address; and
  • other data which you decide to disclose to Saga Furs in connection with the Saga Voices online publication.

The legal basis for the processing is our legitimate interest (GDPR Article 6.1 (f)) to adequately provide you with Saga Voices and for customer communication as well as business development purposes. As the processing of personal data is based on our legitimate interest, the interests and rights of you as the data subject is taken into account in relation to our legitimate interest to process the personal data.

Please note that once you have subscribed to the notification e-mails, you are able to update your subscription preferences or unsubscribe to the notification e-mails upon receipt of each notification e-mail or through www.sagavoices.com.  

Maintenance and development of our website and improvement of user experiences:

We collect analytical data to analyse our operations and website visitor behaviour so that we can develop and improve the quality of the content of the website www.sagavoices.com. Further, analytical data is also processed for the purpose of improving user experience and to perform standard administrative and organizational functions.

The legal basis for the processing is our legitimate interest (GDPR Article 6.1 (f)) to develop our website, to ensure its proper functionality and to improve user experience. Analytical data is collected about the technical devices used to access the website (including anonymised IP address) as well as about the use of the website, such as the sections which have been visited and the times of the visits. Analytical data are anonymised and not used to identify individuals.

In order to ensure adequate data security, we use Google’s reCAPTCHA-service for the purpose of assessing if our visitors are people and to keep malicious software from engaging abusive activities on our website. The service requires sending data which is needed by the reCAPTCHA-service to Google, and is therefore subject to Google’s privacy policy. For more information about Google’s privacy practices, please visit Google’s Privacy Policy and Terms of Service.

Cookies:

When you visit our website for the first time, you have the option to give your consent to or decline the deployment of cookies. Before your valid consent, we may only set cookies that are strictly necessary for the operation of the website. You can manage your cookie preferences or withdraw your consent to the storage of cookies on your device at any time. You can also delete cookies already stored on your device from your browser settings. Cookies help us monitor the number of people visiting our website and help us better understand the way in which people interact with our website. For more information on our cookie practices, please see our Cookie Policy.

We use Google Analytics in order to compile analytics data and reports on website visitor usage and to help us improve our website. For more information on Google Analytics, please visit Google Analytics.

3 Regular sources of data

With regard to the implementation of and managing the notification e-mails concerning the Saga Voices online publication, the personal data is collected from you, when you subscribe to the notification e-mails.

When visiting our website, personal data is collected e.g., via cookies as you interact on the website.

4 Data disclosures and transfers outside the EU/EEA

Personal data is processed within Saga Furs, for the purposes mentioned above and only by specific personnel who have the right to do so due to their position in the company or in order to perform their duties. We also use third party service providers to process personal data. Such service providers are processors of personal data who process personal data on behalf of Saga Furs and in accordance with the instructions of Saga Furs. We ensure that personal data processed by the third party service providers are processed in accordance with appropriate confidentiality and data processing agreements and applicable data protection legislation.

We use third party service providers, who process personal data on behalf of us outside the EU/EEA in the United States of America. Such third party service providers are The Rocket Science Group LLC (MailChimp) and Google, Inc. Where said disclosure of personal data takes place, Saga Furs uses standard contractual clauses or other equivalent arrangements approved by the European Commission and complies with all other appropriate safeguards for disclosure or transfer of personal data outside the EU/EEA.

5 Retention and deletion of personal data

Personal data collected through the contact forms on our website will be retained for as long as it is necessary to fulfil the purpose of processing, i.e., until the subscription is cancelled or the online publication ceases to exist. When we no longer need to process your personal data for its original purpose, the data will be either anonymized or deleted. However, data retention may be extended if necessary, to fulfil legal obligations and requirements. With regard to the lifespan of cookies used on www.sagavoices.com, please see our [Cookie Policy].

In accordance with applicable data protection legislation, we continuously evaluate our need to process personal data, and we undertake all reasonable measures to ensure that the personal data processed is accurate and up to date.

6 Principles of how the personal data is secured

We will only process adequate and relevant personal data, limited to what is necessary in relation to the purposes for which it is processed. Your personal data will be processed lawfully and fairly, collected for specified, explicit and legitimate purposes, and will not be further processed in a manner that is incompatible with said purposes mentioned in this data protection statement.

We use appropriate technical and organizational measures designed to protect the personal data that are collected and processed.  We ensure that all your data is safe, protected from unauthorised processing and not destroyed, deleted, altered or unlawfully transferred. The software that powers our website is continuously updated to address any security vulnerabilities that are revealed over time. The traffic between the visitor’s browser and our server is encrypted. The measures used provide an adequate level of security for the processing of the personal data of the data subjects. All personnel at Saga Furs as well as third-party service providers are required to treat your personal data strictly confidentially. The data is stored in databases, which are protected by usernames and passwords and technically protected by firewalls.

7 Data subjects’ rights

As a data subject, you have the right to receive information on whether your personal data are being processed and if data are processed, you have a right to access your data. You also have the right to ask for the data to be rectified or deleted or for the processing to be restricted within the limitations set out in and in accordance with applicable data protection legislation.

Where the processing is based on your consent, i.e., when we deploy not strictly necessary cookies, you have the right to withdraw your consent at any time. Please notice that a withdrawal of your consent will not affect the lawfulness of the consent based processing taking place before your withdrawal of consent.

As a starting point, there is no cost attached to exercising the rights you have as a data subject. However, we reserve the right to charge a reasonable fee if the request is repetitive in nature or manifestly unfounded or unreasonable.

If you wish to exercise your rights as a data subject, please contact dataprivacy@sagafurs.com by a personally signed or otherwise comparably verified document.

We will do our best to implement your request. However, sometimes we must refuse your request, in which case we shall inform you of the basis of such refusal.

If we will process personal data for a purpose other than that for which the personal data were collected, we shall provide you with such information for that purpose and any other relevant additional information prior to the processing.

Enquiries relating to this data protection statement can be sent to the e-mail address at the beginning of this document. In case you consider that our processing of personal data does not meet the requirements of the GDPR or other applicable legislation, you may contact the Finnish Data Protection Authority (www.tietosuoja.fi) to confirm the appropriateness of the processing of your personal data.