Privacy Policy

1. DATA CONTROLLER

Name of the data controller: EMA by FreshCO

Business ID: 2896836-3

Address: Poosa Tee 7/1, Tallinn, Estonia, 11912

2. OVERVIEW

This privacy notice informs you about how we handle your personal data when you visit our website or utilize our services.

3. LEGAL GROUNDS AND PURPOSES OF DATA PROCESSING

When you access our website, we primarily rely on our legitimate interests to ensure the website's functionality and security, as well as to facilitate its ongoing development. Furthermore, we process personal data to enhance and customize the website's content for users interested in our services. We also analyze visitor traffic, compile usage statistics, and assess the effectiveness of our marketing efforts. Whenever feasible, we utilize anonymized data for these objectives.

Additionally, we manage your personal data if you are the contact person for one of our current or prospective clients. This processing is also based on our legitimate interest in managing and fostering customer relationships. The objectives of processing personal data include providing our services, improving those services, executing marketing and sales initiatives, maintaining customer contact information, and facilitating communication with clients.

4. PERSONAL DATA WE COLLECT

While you navigate our website, we collect various data, such as your Internet Protocol (IP) address and details about your browser and device. We may also employ cookies and similar tracking technologies (such as web beacons and pixels) to gather or save information. Detailed information on our use of these technologies and your options to decline certain cookies can be found in our Cookie Notice.

If you are a contact person for a customer or a potential client, we may collect the following information:

- Name

- Contact details (e.g., phone number and email address)

- Employment details (e.g., organization and job title)

- Categorization data (e.g., marketing preferences and feedback, areas of interest)

5. DATA RETENTION PERIOD

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected. For our customers, we will keep the collected data as long as the customer relationship is active. However, we may retain some information related to you for a longer period if required by law, such as invoicing records in accordance with the Accounting Act.

6. DISCLOSURE OR TRANSFER OF DATA

Certain processing tasks may be delegated to external service providers in compliance with and within the boundaries of data protection legislation. The primary entities to whom we may outsource these tasks include accounting firms.

7. RIGHTS OF THE DATA SUBJECT

- Right of Access: You have the right to confirm whether we are processing personal data related to you. We will provide a copy of the personal data being processed, generally at no cost.

- Right to Rectification: You have the right to request corrections to any inaccurate personal data concerning you and to complete any incomplete personal data.

- Right to Erasure: Under certain circumstances specified in Article 17 of the GDPR, you have the right to request the deletion of your personal data, such as when it is no longer necessary for the purposes for which it was collected.

- Right to Restrict Processing: Under certain circumstances outlined in Article 18 of the GDPR, you can ask us to limit the processing of your personal data. This right applies, for example, when you dispute the accuracy of your data, in which case processing will be limited while we verify the data’s accuracy.

- Right to Object: In specific situations, you can object to the processing of your personal data, requesting that we stop processing it altogether. If the data is processed for the performance of a task carried out in the interest of our legitimate interests or those of a third party, you may object based on your particular situation. In these instances, we must halt processing unless we can demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms.

If your personal data is processed for direct marketing based on legitimate interest, you can object at any time without providing specific reasons, after which your data will no longer be processed for direct marketing purposes (including profiling related to direct marketing).

- Right to Data Portability: You have the right to obtain your personal data that you have provided to us in a structured, commonly used, and machine-readable format and, if desired, transfer that data to another data controller.

- Right to Withdraw Consent: If we process your personal data based on your consent, you have the right to withdraw that consent by notifying us. The withdrawal of consent will not affect the legality of any processing that occurred before the withdrawal.

- Right to Lodge a Complaint: You have the right to file a complaint with the relevant supervisory authority if you believe we have not complied with applicable data protection regulations. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, available at www.tietosuoja.fi.

9. CONTACT DETAILS AND EXERCISING DATA SUBJECT RIGHTS

For any inquiries regarding the processing of personal data or to exercise your rights, please reach out to us using the contact information provided at the beginning of this privacy notice.