Date updated: 1.2.2017
This Policy applies to personal data collected in connection with the Service. The data group this Policy applies to are the users of the Service (“Users”).
The Service may contain links to other companies’ websites and other third party services, and the Service may be provided as a part and/or through third party services that have privacy policies of their own. eCraft recommends that the Users read the privacy policies of such services carefully. eCraft is not responsible for the privacy practices or contents of any such services.
By using the Service or by submitting personal data to eCraft, you express your consent and agreement to the processing of your personal data in the manner provided in this Policy. If you do not agree with this Policy, please do not use the Service, or provide eCraft with your personal data, or grant your consent otherwise.
2. Data collected
eCraft collects your personal data typically when you use or register into the Service. Below are examples of the categories of data (whether or not they may be deemed to be personal data in each case) collected.
2.1 Technical Information
2.2. Registration Information
We may collect or ask you to provide us with information, such as your name, e-mail address, company details, country of residence, postcode, as well as your user names, passwords and other such credentials that are used to authenticate users and to validate their actions, or that may be needed to provide you with the Service or to communicate with you, as well as information uploaded by you. We may also collect demographic information, for example, postal code and language preferences and information you provide, such as your consents, preferences and feedback, information relating to your devices linked to the Service and other such information you provide us with.
2.3. Transactions and use of the Service
We collect or ask for information relating to your use of the Service and your other interactions with us. Such information may include, for example, details of the queries or requests you have made, details of agreements between you and eCraft, records of contacts and communications, information and details relating to the material and content you have provided us with and other such transactional information. We may, in accordance with applicable law, record your communication with our customer care or with other such contact points.
3. The purposes for which we process your personal data
eCraft processes your personal data for the purposes described in this Policy. Please note that one or more purposes may apply simultaneously.
3.1 Provision of Services
We may use your personal data to fulfill your requests, process your order or as otherwise may be necessary to perform or enforce the Service agreement between you and eCraft, to ensure the functionality and security of the Service, to identify you and to prevent and investigate fraud and other misuses.
3.2 Development of Services
We may use your personal data to operate and develop the Service. We may also use your personal data to personalize the Service and to provide you with information on products and services relevant to you, for example, by making recommendations and displaying customized content. We may combine personal data collected in connection with the Service with other personal data we may hold about you, except where such personal data was collected for a different purpose. We may also create aggregate and statistical information based on your personal data.
3.3. Communicating and Marketing
We may use your personal data to communicate with you, for example, to provide information relating to the Service or to contact you for customer satisfaction queries or in order to respond to your comments and questions. We may use your personal data for marketing or research purposes, for example, to conduct market research and we may, in accordance with applicable law, contact you to inform you of new products, services or promotions we or our selected partners may offer. eCraft does not disclose your personal data to third parties for marketing purposes without your prior consent.
4. Sharing your personal data
We do not sell, lease, rent or otherwise disclose your personal data to third parties, unless otherwise stated below. We may, however, share anonymous or aggregate information about you with advertisers, publishers, business partners and other third parties.
We share your personal data to third parties not mentioned in this document only with your consent. The use of your personal data by such third parties is subject to their separate privacy policies.
4.2. eCraft Group Companies and Authorized Third Parties
We may share your personal data within the eCraft group of companies, including but not limited to the sales entities of eCraft, or authorized third parties who process personal data on behalf of eCraft for the purposes described in this Policy, such as e.g., technical or analytics service providers. Such parties are not permitted to use your personal data for any other purposes.
4.3. International Transfers
The Service may be provided by using resources and servers located in various countries around the world. Therefore, your personal data may be transferred across international borders and outside the country where you use the Service, including to countries outside the European Economic Area (EEA) that do not have laws providing specific protection for personal data or that have different legal rules on data protection, for example, the United States of America. In such cases we take steps to ensure that there is a legal basis for the transfer and that adequate protection of your personal data is provided, as required by applicable law. We, for example, generally use Standard Contractual Clauses (“SCCs”) of the European Commission in our agreements concerning International transfers.
4.4. Mandatory Disclosures
We may be obligated to disclose your personal data to certain authorities or other third parties by mandatory law. We may also disclose and otherwise process your personal data in accordance with applicable law to defend our legitimate interests, for example, in legal proceedings or to verify or enforce compliance with the policies governing the Service.
4.5. Mergers and Acquisitions
If we decide to sell, buy, merge or otherwise reorganize our business operations in any way, this may involve us disclosing your personal data to e.g. prospective or actual purchasers of our business and their advisers.
4.6. Collecting data of minors
We do not seek to collect information from or engage in transactions with persons under the legal age of majority in the respective country of residence. Our databases may, however, contain personal data of children due to it not always being possible to determine precisely the age of the user. We reserve the right to block the Service from any user who is under the applicable legal age of majority.
5. Data quality
We take reasonable steps to keep the personal data we possess accurate and up-to-date and to delete out-of-date or otherwise incorrect or unnecessary personal data.
The Service allows you to manage your profile, and we encourage you to access your personal data from time to time to ensure that it is correct and up-to-date. Please remember that it is your responsibility to provide us with correct details as well as to update the personal data you have provided us with in case of any changes.
We take reasonable technical and organizational information security measures, such as use firewalls, secure server facilities, encryption, access right management, and other similar measures to prevent and minimize risks associated with processing personal data and its disclosure to and use by unauthorized third parties.
Where appropriate, we may take back-up copies and use other such means to prevent accidental damage to or destruction of your personal data.
However, please note that despite our reasonable steps to protect your personal data, no website, Internet transmission, computer system or wireless connection is completely secure, which we advise you to consider e.g. when choosing, which personal data you provide us with.
8. Data retention
We retain the personal data for as long as needed to provide the Services and/or the period required by applicable laws.
9. Your rights
In case you wish to know what personal data we hold about you or you wish to replenish, rectify, anonymize or delete any incomplete, incorrect or outdated personal data, or you wish us to cease processing your personal data for example the purpose of sending eCraft’s promotional materials or direct marketing or for the performance of market research or on other compelling legal grounds, you may, as appropriate and in accordance with applicable law, exercise such rights by contacting us through the contact points referred to below. Please note that, in some cases, especially if you wish us to delete or cease the processing of your personal data, this may also mean that we may not be able to continue to provide the Service to you. We encourage you to use available profile management tools for the above purposes, as such tools often provide you with direct access to your personal data and allow you to effectively manage it.
Please note that eCraft may need to identify you and to ask for additional information in order to be able to fulfill your above request. Please also note that applicable law may contain restrictions and other provisions that relate to your above rights and for example, we are not able to delete information that is necessary for compliance with applicable mandatory laws.
10. The controller of your personal data and contact details
eCraft Oy Ab, Linnoitustie 6B, 02600 Espoo, Finland is the controller of your personal data.
In matters pertaining to eCraft’s privacy practices you may also contact us at:
eCraft Oy Ab
c/o Petri Räsänen