Privacy Policy

Privacy policy – ThermoBeast Oy

Data controller: ThermoBeast Oy 

Address: 3621 Serpentine Dr Los Alamitos, CA 90720

ThermoBeast Oy is committed to protecting the privacy of the persons whose personal data it collects in its business activities. This privacy policy describes how ThermoBeast Oy processes personal data, the processing of which is related to

• customer relationships
• marketing
• recruitment
• maintenance of partnerships

This privacy policy also clarifies how data, from which no person can be identified, is collected on our websites and in our online shop by means of analytics. We want that the persons whose personal data we collect understand their rights related to personal data. This privacy policy describes for what purposes we collect and use personal data, what type of data we collect, from where the data has been collected, how data subjects can have their data erased from our personal data registers and how data subjects can withdraw any consent they have given to the processing of personal data.

What are the grounds for using personal data?

The right to use personal data is based on any of the following grounds: –

• Consent: Our company has received a prior consent to processing personal data. We have received this consent in written or verbal format, via email or in conjunction with a purchase made from our online shop or a newsletter subscription.
• Fulfilment of an agreement: The processing of data is necessary in order to fulfil an agreement, such as to deliver a product purchased from our online shop.
• Legitimate interests: The processing of data is necessary in order to carry out the legitimate interests of ThermoBeast

What type of data does ThermoBeast collect and for what purposes?

We only process personal data, the processing of which is reasonably necessary for the purposes defined in this privacy policy.

Data collected from customers

We collect data from our customers for delivering products purchased from our online shop and for customer relationship management. When using the online shop, data is mainly obtained from the user of the online shop, i.e. the customer, who provides data when placing an order. Customers can also provide data on the ThermoBeast Newsletter registration page and the campaign page for ThermoBeast Newsletter registrations or through applications.

The following data is collected from customers who make purchases from our online shop:

• Authentication data: first name and last name
• Contact information: address, email address and telephone number
• Payment data related to clearing payment transactions, returns and any credit information checks
• Purchase history, including ordered and returned products
• Delivery data needed for delivering products
• Feedback given and messages sent
• Participations in any competitions or customer satisfaction surveys for which contact information is requested
• We use third part services for processing payments and the services of a logistics company for deliveries, for which customers are forwarded to websites of third parties.

As a result, the terms and conditions and the privacy policy of the specific service provider apply. ThermoBeast Oy does not save any debit or credit card data in its systems. ThermoBeast Oy uses data for customer relationship management and user authentication. Data is used to process, deliver, exchange, return and archive orders. If there are any problems, customer orders can be tracked and customers can be contacted in relation to their orders.We use data in our customer service so that we can provide the best possible service regarding our products and deliveries. Personal data can also be processed in matters related to warranties.

Data can be used to target advertising to data subjects who have given their consent to marketing. Marketing activities include email, direct and digital marketing (social medial, display advertising, search engine advertising).

Personal data is processed on the grounds of the fulfilment of an agreement (online purchase agreement) or the consent of data subjects.

Data collected on our websites using analytics

The following data is collected from visitors to our websites using analytics:

• User account data, browser, operating system, device model, IP address, time of establishing the connection and the duration of the connection
• If location data is enabled, GPS coordinates and similar location data are saved. 
• Cookies and other identification data
• Information about marketing campaigns and any other data collected on the basis of consent

Data collected using cookies, social media and analytics is anonymous and cannot be used to identify individuals. We use this data to analyse users of our websites so that we can provide better services and target marketing activities. Data is collected about the number of visitors, the duration of each visit, page loads and the sale of products.

Data collected from job-seekers

For recruitment processes, we collect personal data from job-seekers. We process the personal data provided to fill the specific vacant position and, with regard to open applications, to fill future vacant positions and assess conditions for employment relationships.

Processing is based on our legitimate interest to process personal data provided by persons for recruitment processes.

Data collected from partners

We collect personal data about the contact people and other representatives of our suppliers and other partners in order to maintain partnerships and to fulfil our contractual obligations. The right to process personal data about suppliers and other partners is based on an agreement signed with each specific partner or legitimate interests to process personal data about employees or other representatives of partners.

Who can access my personal data?

Your data can only be accessed by individuals who need to process the data to carry out their work-related tasks. Personal data is processed by our suppliers that carry out tasks in the name of ThermoBeast Oy on the basis of an agreement. Suppliers can only process personal data for purposes defined in this privacy policy, and they must carry out proper technical and organisational data protection activities.

ThermoBeast Oy does not disclose or sell any data to third parties for marketing purposes, apart from companies with the same Group. Personal data can be transferred outside the United States. When doing so, proper protective measures will be implemented in accordance with relevant U.S. privacy laws and regulations, such as the California Consumer Privacy Act (CCPA) and other applicable federal and state laws. Protective measures may include data processing agreements that incorporate safeguards equivalent to those required by U.S. legal standards to ensure the security and proper handling of personal data. These agreements and details regarding the protective measures can be obtained upon request to our data protection officer.

ThermoBeast Oy is not responsible in case the customer forwards or sends their own information to third parties, for example by forwarding a transactional email or text message containing personal information. The transactional email can be for example, but not limited to, an order confirmation or abandoned checkout email.

In order to offer you PayPal’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to PayPal, in order for PayPal to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with PayPal’s own privacy notice. 

What rights do I have regarding my personal data?

Rights related to the processing of personal data

• You can refrain from providing us with personal data in situations where we collect personal data directly from you. Please note that, in this case, you cannot place orders or exchange products in the online shop or return products to the online shop. Furthermore, taking part in recruitment processes is not possible without the processing of personal data.
• You can request for a report on the personal data we have saved about you and view your personal data. You can request for a copy of your data and a report on how we process your data.
• You can refuse direct marketing. We add an unsubscribe link to all electronic marketing messages we send. You can withdraw your consent to direct marketing at any time. If you withdraw your consent, we will immediately update our database and no longer send you any direct marketing messages. However, we may contact you if it is necessary for the products or services you have ordered. 
• If the processing of data is based on consent, you can withdraw your consent to processing your personal data at any time.
• In certain situations, you can request your data to be erased or its use to be limited to part of our services. You can have the right to object to the processing of your personal data for a justified reason. We will erase data within reasonable time, provided that there are no legal grounds to maintain your data. Please note that the deletion of your customer account is final and your data cannot be restored later.
• You can request any incorrect or incomplete data to be rectified. We always aim to ensure that the personal data we have is accurate. Please check your data when you place an order in our online shop.
• If the data you have provided is processed automatically on the basis of an agreement or your consent, you have the right to obtain the data in organised, commonly used and computer readable format and the right to have your data transferred to another data controller if this is technically possible.

Please send an email to support@thermobeast.com if you want to exercise your aforementioned rights. If you suspect that your personal data has been processed in a manner that is in breach of regulations, you can file a complaint with the supervisory authority.

For how long does ThermoBeast store personal data?

We store personal data for as long as is necessary in order to carry out the purposes defined in this privacy policy. We may store data longer if it is necessary in order to fulfil statutory obligations. Accounting and any claims presented regarding consumer trade may require that data is stored longer.

You can opt out of targeted advertising by:

•    FACEBOOK – https://www.facebook.com/settings/?tab=ads
•    GOOGLE – https://www.google.com/settings/ads/anonymous
•    BING – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at support@thermobeast.com.