PRIVACY POLICY

Data Controller

Company name: GF Lab Oy
Business ID: 2630190-1
Postal address: Hallituskatu 9, 33200 Tampere, Finland

Contact Information of the Data Protection Officer
Email: asiakas@dickjohnson.fi
Phone: +358 40 654 5654

Updated: September 30, 2024

Privacy Policy According to the EU General Data Protection Regulation (GDPR)

User Rights

• Right to access personal data

• Right to rectify personal data

• Right to be forgotten

• Right to data portability

• Right to object to automated profiling

• Right to prohibit the use of data for marketing purposes

• Right to be notified of a personal data breach

• Right to lodge a complaint with a supervisory authority

Principles of Personal Data Processing

• Personal data is processed only when there is a legal basis for it.

• Data is used solely for the purpose it was collected.

• Only data necessary for each purpose is collected and stored.

• We ensure the accuracy and up-to-date status of the data.

• Personal data is processed confidentially.

• Personal data may be transferred to third parties acting on behalf of our company group.

• Data may be disclosed to authorities when required by law.

Third Parties Processing Personal Data

• Facebook

• Google Analytics

• Instagram

• Google Ads

Use of Artificial Intelligence in Personal Data Processing

We utilize AI technology as part of processing and analyzing personal data. AI is used, for example, to enhance customer experience, personalize services, target marketing, and analyze data. Through analysis, we aim to better understand our customers' behavior and needs in order to provide improved and more personalized services.

The use of AI is based on lawful grounds such as a customer relationship, legitimate interest, and the customer’s consent. AI processes are carefully designed and implemented to prioritize data protection and the security of personal data.

Customers have the right to object to the processing and analysis of their personal data using AI by contacting the data controller.

Data Security Principles

• Manually processed documents are properly destroyed after use.

• Data is stored in databases protected by firewalls, passwords, and other technical safeguards.

• Databases and their backups are located in locked facilities accessible only to designated personnel.

• The data controller does not disclose personal data to external parties without a legal basis.

Consumer Disputes Board

If a dispute regarding a sales contract cannot be resolved through negotiations between the parties, the consumer may submit the matter to the Finnish Consumer Disputes Board (www.kuluttajariita.fi) for resolution. Before doing so, the consumer must contact the Consumer Advisory Service (www.kuluttajaneuvonta.fi).