Privacy Statement

This is a statement on the processing of your personal data pursuant to the EU’s General Data Protection Regulation (679/2016).

Controller

Upsid Creative Studio Oy
Business ID: 3586956-6
Tampere, Finland
email address: hey@upsidstudio.com

Communication regarding privacy matters

Eemeli Heikkilä
Email address: hey@upsidstudio.com

We request that data subjects contact the person listed hereinabove for all questions related to the processing of personal data and situations related to the exercising of your rights.

Basis and purpose of processing personal data

The legal basis for the processing of personal data is:

• The consent to the processing of personal data provided by the data subject
• The contractual relationship between the data subject and controller
• Fulfilment of the controller’s statutory obligations

The purposes of processing personal data include:

• Send administrative information
• Send product and service updates
• Respond to inquiries and offer services
• Improve user experience
• Enforce terms and conditions and policies
• Run and operate the Website and Services
• Provide our services and carry out our contractual obligations

Personal data being processed

The controller only collects personal data concerning the data subjects that is essential and relevant for the purposes explained in this privacy statement.

The following data concerning the data subjects is processed:

• Full name
• Contact information, such as email address and phone number
• Home and/or Business Address

By accessing and using the Website and Services, for example by contacting us through the Website or by email, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy.

Depending on the requested Services or as necessary to complete any transaction or provide any Service you have requested, we may share your information with our affiliates, contracted companies, and service providers we rely upon to assist in the operation of the Website and Services available to you and whose privacy policies are consistent with ours or who agree to abide by our policies with respect to Personal Data. We will not share any personally identifiable information with third parties and will not share any information with unaffiliated third parties.

Retention period for personal data

The controller will process the personal data for three (3) years from the last contact with the Controller. At the end of this period, the controller will delete or anonymise the data within 365 days in accordance with the deletion processes it follows.

The controller may have an obligation to process some personal data belonging to the filing system for longer than stated above in order to comply with the legislation or authority requirements.

Rights of the data subject

Right to request access to personal data

The data subject has the right to receive confirmation regarding whether personal data concerning them is being processed and, if it is, the right to receive a copy of their personal data.

Right to rectification

The data subject has the right to request that inaccurate and erroneous personal data concerning them be rectified. The data subject also has the right to supplement incomplete personal data by submitting the required additional information.

Right to erasure

The data subject has the right to request erasure of personal data concerning them if

1. the personal data is no longer required for the purposes for which they were collected;
2. the data subject withdraws their consent which the processing of personal data was based on, and no other legal basis exists for the processing; or
3. the personal data has been unlawfully processed.

Right to restriction of processing

The data subject has the right to restrict the processing of personal data concerning them if

1. the data subject contests the accuracy of their personal data;
2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead; or
3. the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims.

Right to withdraw consent

The data subject has the right to withdraw the consent they have provided for the processing, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to data portability

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller.

Right to lodge a complaint with a supervisory authority

The office of the Data Protection Ombudsman, operating under the Ministry of Justice, is the national supervisory authority for personal data matters. You have the right to bring your case to the supervisory authority if you consider that the processing of personal data concerning you is in violation of applicable law.

Cookies

Our Website and Services use “cookies” to help personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

We may use cookies to collect, store, and track information for security and personalization, and for statistical purposes. For further information on the cookies we collect and their purpose, see our cookie policy. Please note that you have the ability to accept or decline cookies. Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies if you prefer.

Data analytics

Our Website and Services may use third-party analytics tools that use cookies, web beacons, or other similar information-gathering technologies to collect standard internet activity and usage information. The information gathered is used to compile statistical reports on User activity such as how often Users visit our Website and Services, what pages they visit and for how long, etc. We use the information obtained from these analytics tools to monitor the performance and improve our Website and Services. We do not use third-party analytics tools to track or to collect any personally identifiable information of our Users and we will not associate any information gathered from the statistical reports with any individual User.

We do not normally use Analytics Data to identify you as an individual. However, you may sometimes be recognized from it, either alone or when combined or linked with Contact Data. In such situations, Analytics Data can also be considered personal data under applicable laws and we will treat such data as personal data.