Privacy Policy

OUR PRIVACY POLICY

PRIVACY WEBSITE, NEWSLETTER AND SOCIAL MEDIA

The protection of your personal data is particularly important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In the following we will inform you about the most important aspects of data processing on our website, newsletter and social media.

1 Collection and processing of personal data

1.1 Access data/server log files

The provider (or his web space provider) collects data about every access to the offer (so-called server log files). This data processing is carried out to protect legitimate interests. Access data includes:

Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, the provider reserves the right to subsequently check the log data if there is a justified suspicion of illegal use based on specific indications.

1.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA) (”Google”). Google Analytics uses so-called ”cookies”, which are text files that are stored on your computer and enable an analysis of your use of the website.

The information collected by the cookie about your use of this website (including your IP address) is transmitted to a Google server, possibly located in the USA, and stored there. The person responsible has extended Google Analytics with the code ”gat._anonymizeIp;” in order to ensure anonymous recording of IP addresses (so-called IP masking). This means that the IP addresses of users are shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server, possibly in the USA, and shortened there. In these cases, Google secures the data transfer through concluded EU standard contractual clauses.

Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website and internet use. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google’s behalf. According to Google, the IP address transmitted by a user’s browser as part of Google Analytics is not merged with other Google data. However, the person responsible does not have precise insight into how Google processes your data.

The data processing by Google Analytics is justified by the consent given to set the corresponding cookies in accordance with Article 6 Paragraph 1 Letter a) GDPR. The user can revoke his consent to the setting of cookies from Google Analytics by clicking here at any time with effect for the future. More information on terms of use and data protection can be found under Google Analytics terms of service or Google Analytics overview or in Google’s data privacy policy.

1.3 YouTube

We also embed videos on the YouTube platform of YouTube, LLC, a company belonging to Google LLC, on our website. The videos and the connection to YouTube are only activated when the user clicks on the corresponding symbol.

The data collected about users when using the service is processed by Google and may be transferred to countries outside the European Union (EU) and the European Economic Area (EEA). This includes the IP address, the application used, information about the end device used (including device ID and application ID), information on websites accessed, the location, the mobile phone provider and other information in the form of cookies are available on the user’s PC. We have no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties.

The use of YouTube is justified by your consent given by clicking on the corresponding symbol in accordance with Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time with effect for the future, e.g. by clicking here.

1.4 Contact Form

You have the option of contacting us via the contact form on the website. We process the personal data you transmit to us on the basis of your consent in accordance with Art. 6 Para. 1 lit. You can revoke your consent at any time by sending us a message via the contact form or by email with effect for the future. If your request serves to conclude a contract with us, we will process your request on the basis of Article 6 Paragraph 1 Letter b) GDPR.

For the contact form we use the Ninja Forms plug-in, an offer from Saturday Drive, INC. The data provided when using the contact form and collected about the user will be processed by Ninja Forms and may be transferred to countries outside the European Union (EU) and the European Economic Area (EEA). More information on Ninja Forms’ compliance with GDPR requirements can be found here, as well as in Ninja Forms’ Privacy Policy.

1.5 Sentry

We use the ”Sentry” analysis service provided by Functional Software, Inc. dba Sentry, 45 Fremont St, San Francisco, California 94105, US. Sentry uses cookies and similar technologies to log and monitor errors that can be detected in the source code and to improve the technical functionality and performance of our website. In order to react to error messages and possible speed brakes, we transmit anonymous error log data about your use of our website to our Sentry installation, which is evaluated there. This is meta data, such as information about the operating system you are using and your browser, the programming language you are using, possible causes of errors and your server. Your stored data will be deleted by us after 90 days at the latest.

The legal basis for data processing is Article 6 Paragraph 1 Clause 1 Letter f GDPR, i.e. our legitimate interest in enabling you to make the best possible use of our website and the services offered on it.

For more information about Sentry’s Terms of Service and Privacy Policy, see Terms of Service 2.0.0 and Privacy Policy 3.0.0.

1.6 Cloudflare Turnstile / ReCAPTCHA

We use Cloudflare Turnstile, an application from Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA (hereinafter “Cloudflare”) on our website. Cloudflare Turnstile allows us to distinguish real users of the website from automated programs (bots) without the users having to do a CAPTCHA task. In this way we ensure the IT security of the website and protect our website from attacks and spam.

In order to distinguish human users from bots, Cloudflare Turnstile collects and evaluates the IP address, header, user agent, browser information, and session data such as session duration and website interactions of the users on some devices. The analysis begins automatically as soon as a user accesses our website. Personal user data is also transmitted to the USA, which does not have the same level of data protection as that provided by the GDPR. Therefore, the data transfer to the USA is legally secured by EU standard contractual clauses, which you can find here.

As far as users are using the latest versions of macOS or iOS, Cloudflare Turnstile can identify human users via private access tokens without processing user data.

Data processing is carried out to safeguard our legitimate interests and is justified in accordance with Article 6 (1) (f) GDPR. We have a legitimate interest in protecting our website from malicious attacks and ensuring the functionality of the website.

Detailed information about the processing of personal data by Cloudflare can be found in Cloudflare’s data protection policy.

This website uses reCAPTCHA, a solution from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; ”Google”), which is used to distinguish between real users and automated programs (bots). By using this solution, the website prevents abusive use of the website by bots. For this purpose, reCAPTCHA analyzes the behavior of the users based on various characteristics (e.g. IP address, length of stay, mouse movements made by the user as well as the evaluation of own and other cookies). This analysis starts automatically as soon as the user accesses the website.

This serves to safeguard the legitimate interests of the site operator and the user in a trouble-free and secure website and is therefore justified in accordance with Article 6 (1) (f) GDPR.

It is possible that Google processes personal data of users on servers in the USA when providing the offer. The level of data protection in the USA is considered to be lower than that in the EU, which is why the transfer is secured by EU standard contractual clauses. Detailed information about data protection at Google can be found here, more information about reCAPTCHA can be found here.

1.7 Newsletter

You can also subscribe to our newsletter on our website. For this we need your name, country, language (Finland only) and email address. We use our newsletter to inform you at regular intervals about our offers and services.

When registering for the newsletter, you give us your consent to this processing of your personal data, which you must then confirm in the first e-mail so that it is effective (double opt-in). The legal basis for the processing of your data is this declaration of consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by contacting us or by using the opt-out option provided in every newsletter.

The following data is tracked in the newsletter: read/not read (incl. date), how often the newsletter was viewed, which links were clicked, the subscriber unsubscribed. No IP addresses are saved.

1.8 Social Media

In order to prevent unwanted data transmission to social media providers, we only include the social media portals on the website as links (possibly behind the graphics with the corresponding logos of the social media portals). After clicking on the link, you will be redirected to the website of the respective social media provider and only then will user information be transmitted to the respective social media provider.

Insofar as profiles of ours in social media refer to this data protection notice, we process the data of the users of the profiles in accordance with the following provisions. This applies to the following platforms: Facebook, Instagram, YouTube and LinkedIn.

We process users’ personal data from these profiles exclusively in connection with managing the profile, among other things to inform users about our activities and to advertise various events, services and products. In addition, we regularly receive analysis data on the use of the profile and the interaction of the user with the profile from the provider of the respective social medium. The legal basis for the processing of personal data by us for this purpose is the legitimate interest (Art. 6 Para. 1 lit. f) GDPR), which consists in promoting our own brand and communicating with existing and potential new customers and business partners. Users can find more detailed information on the personal data processed by the provider of the social medium in the data protection notices of the provider linked on the respective page.

On the Facebook platform, we have also concluded a joint responsibility agreement with Meta. Users can find more information about this here. Insofar as joint responsibilities exist with the providers of the other social media, users can find more detailed information on this in the respective terms of use and data protection notices of the providers.

2 Sharing of Data

2.1 Integration of Third-Party Services and Content

It may happen that content from third parties, such as videos from YouTube, RSS feeds or graphics from other websites are integrated within the online offer. This always presupposes that the providers of this content (hereinafter referred to as “third-party providers”) perceive the IP address of the users. Because without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore required for the display of this content. This processing is carried out to protect legitimate interests. We endeavor to only use content whose respective providers only use the IP address to deliver this content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. As far as this is known to us, we inform the users about it.

2.2 Transfer of Data to Third Parties

As shown in the relevant places in this data protection notice, we transmit some personal data to third parties as part of the services integrated on the website. More information can be found in the respective sections for these services.

If we are legally obliged to do so, we may have to transmit your data to authorities or courts. In this case, this data transfer is justified in accordance with Article 6 (1) (c) GDPR.

In addition, we may transfer your personal data to companies affiliated with us, which work closely with us and support us in fulfilling contractual obligations and in marketing. In addition, we may transmit your data to our business partners, in particular to ENJO partners.

We also use service providers from the IT service categories; Website hosting, website design and writing services as part of order processing. The service providers work exclusively in accordance with our instructions, which we ensure through strict contractual regulations, through technical and organizational measures and through additional controls.

3 Data retention/duration

We store your personal data for as long as required or permitted by law or as necessary to provide the service you have requested or as provided for in relevant consent or until consent on which we are basing the processing has been revoked.

4 Cookies

We use cookies on various websites to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive after the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called long-term cookies). These cookies are used to save the individual selections made by the visitor (e.g. the parameters when performing a search) in order to then restore them in the state they were in when the respective website is called up again. The cookies generated expire after the browser is closed or after the last browser window is closed. In addition, cookies are used for non-personalised statistics. The generated cookies have a maximum expiration time of three months.

The data processed by cookies are required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

You can set your browser so that you are informed when cookies are set, decide whether to accept them on a case-by-case basis, or generally exclude the acceptance of cookies. If cookies are not accepted, the functionality of our website may be restricted.

5 Your Rights

In principle, you have the right to information, correction, deletion, restriction, data transferability, revocation and objection. You can object to the collection and storage of data at any time with effect for the future.

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority.

If you would like to make use of your right of revocation or objection, an e-mail to office@enjo.fi is sufficient.

Disclaimer

Despite careful content control, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.

Questions about data protection

If you have any questions about this notice, please contact us at: office@enjo.fi

You can reach us using the following contact details

Care 4 Nordic Oy
Seinäjoki / Suomi Finland
Puhelinnumero +358 044 248 0336| office@enjo.fi
Y-tunnus: 3406029-8