WEBSITE PRIVACY STATEMENT
“Personal data” shall mean all information relating to an identified or identifiable natural person;
“Processing” means the operation or activities on which personal data are collected, such as the collection, storage, organization, structuring, storage, modification or alteration, retrieval, retrieval, use, transfer, dissemination or otherwise making available, coordination or aggregation of data; restriction, removal or destruction;
“Data protection legislation” means the Finnish Data Protection Act in force (1050/2018), the Act on Electronic Communications Services (917/2014) and the EU General Data Protection Regulation (2016/679), other data protection or privacy laws and statutory guidelines.
For definitions other than those set out above, the definitions used in this Privacy Statement will have the meaning given to them in data protection law.
1. WHO WE ARE
The address of our website is: https://www.trainlikeachampion.fi.
Train Like a Champion acts as a controller for the personal information we collect and process about you. Our contact details are as follows:
Team Urhola Oy
Business ID 2529686-4
2. WHAT PERSONAL INFORMATION WE COLLECT AND WHY
HOW DO WE COLLECT PERSONAL INFORMATION?
We primarily collect your personal information directly from you for the purpose of providing services and / or products. We collect your personal information directly from you, for example, when you register as a user of the service, subscribe to our services and / or products, or update your profile. However, your personal information may also be collected using automated methods, such as when you log in to an online coaching system or otherwise browse our website.
WHAT PERSONAL INFORMATION DO WE COLLECT?
We may collect and process the following personal information about you:
- Basic and contact information
- Information about the services and / or products you have ordered
- Payment methods or billing information
- Direct marketing authorizations granted
- Received and opened electronic direct marketing messages
- Feedback and other contacts
- Login information for the service
- Physiological data
- Network credentials (including IP address and terminal credentials)
- Any other information you provide to us.
When site users leave comments on the site, we collect the information on the comments form, as well as the user’s IP address and browser version information, to help identify spam.
When visitors leave a comment on this site, we collect the information displayed in the comment fields, including the IP address and information related to the browser version. Anonymized hash information created from an email address can be sent to the Gravatar service to know if the commenter is a user of the service. The Gravatar Privacy Statement can be found at https://automattic.com/privacy/.
If you upload images to this site, you should avoid uploading images with stored location information (EXIF GPS). Site users can download and view location information from public avatar images.
If you leave a comment on the site, you can choose to save the name, email address and url in the cookie. This feature adds convenience because you don’t have to re-fill the form each time you add a comment. Cookie information will be deleted from your browser after one year.
If you have an account and log in to the site, we set a temporary cookie that determines whether or not your browser supports cookies. This cookie does not contain any personal information and is deleted when the browser window is closed.
When you log in, we set several cookies that store your login and display settings. Login cookies will be deleted within two days, cookies related to display settings will be deleted after one year. If you select “Remember me” when logging in, your login information will be kept for two weeks. If you log out, the cookies associated with the login will be deleted at the same time.
EMBEDDED CONTENT FROM OTHER SITES
Articles on this site may contain embedded content (such as videos, images, articles, etc.). Opening the embedded content imported from other sites is comparable to the fact that the visitor actually happen a third-party site.
HOW LONG WE STORE INFORMATION
If you leave a comment, the comment and its metadata will be retained for the time being. This is done so that we can automatically recognize and approve the following comments instead of keeping them in the moderation queue.
We store user profile information for registered users (if any). All users have the ability to view, edit and delete their own personal information at any time. Only the username cannot be changed. Webmasters can view and edit user profile information.
WHAT RIGHTS DO YOU HAVE IN YOUR OWN INFORMATION?
If you have a user account on this site or have left comments, you can request a summary file of your own personal information, including any personal information you have provided to us. You can also request the deletion of your personal information. The right to delete our own information does not apply to personal information that we are required to retain for administrative, legal or security reasons.
WHERE DO WE SEND YOUR INFORMATION
Visitors’ comments may be reviewed through an automated anti-spam service.
3. PURPOSES OF THE PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS FOR THE PROCESSING
WEBSITE MANAGEMENT AND FUNCTIONALITY
We may process your login information and web credentials, including the use of necessary cookies, to deliver our website to your terminal, to ensure the security of our website and IT systems, to fulfill your requests on our website and to remember the contents of your Shopping Cart.
The processing of personal data by us for this purpose is based on our legitimate interest.
DEVELOPMENT OF ONLINE SERVICES AND IMPLEMENTATION OF RELEVANT ADVERTISING AND COMMUNICATION
We may process your login information and online credentials, including the use of statistical and advertising cookies, to enable us to optimize and improve our online services, to measure and analyze our use of our online services, and to conduct relevant advertising on our online services and external websites.
The processing of personal data by us for this purpose is based on your consent.
IMPLEMENTATION OF ELECTRONIC AND TRADITIONAL DIRECT MARKETING
We may process your basic and contact information when targeting you with traditional direct marketing by phone or mail. In addition, we process your basic and contact information, as well as information about received and opened electronic direct marketing messages, when we send you electronic direct marketing, for example in the form of newsletters.
The processing of personal data we carry out for this purpose is based either on your consent (electronic direct marketing) or on our legitimate interest (traditional direct marketing).
CUSTOMER RELATIONSHIP MANAGEMENT AND DEVELOPMENT OF OUR BUSINESS
We may process your basic and contact information, login information, domain identification information, feedback and contacts you provide, and your payment or billing information as we manage the customer relationship between us and as we develop our business.
The processing of personal data by us for this purpose is based on an agreement between us and you.
RECEIPT AND DELIVERY OF E-COMMERCE OR E-TRAINING ORDERS
We may process your basic and contact information, login information, information about the services and / or products you have ordered, your physiological information, and your payment or billing information when we receive and deliver your online coaching orders. The processing of personal data by us for this purpose is based on an agreement between us and you.
RECEIPT OF CUSTOMER RETURNS AND CANCELLATIONS
We may process your basic and contact information, information about the services and / or products you have ordered, and your payment or billing information when we receive and process customer returns and cancellations. The processing of personal data by us for this purpose is based on compliance with our legal obligations.
ORGANIZATION OF EVENTS AND ACTIVITIES
We process your basic and contact information, information about any direct marketing authorization you may have issued, and any other necessary participation information related to the event or activity we are organizing. The processing of the above-mentioned personal data is necessary in order for us to organize the event in question and to communicate with you in connection with the event. The above-mentioned events and activities also include webinars or other events organized by Body & Sweat.
The processing of personal data by us for this purpose is based on our legitimate interest.
4. RECIPIENTS OF PERSONAL DATA
EXTERNAL SERVICE PROVIDERS
Your personal information will be transferred to third parties, ie service providers, who, when providing the services, process your personal data in the role of either processor or controller, so that those service providers can implement the services we request. Such service providers may be located or process your personal data both inside and outside the EU.
We may transfer or disclose your personal information to the recipients listed below:
- IT and infrastructure service providers
- Information system vendors
- Providers of digital marketing services (including newsletters, statistical analysis, and targeted online advertising)
- E-commerce payment service provider (processing of bank and credit card transactions and other payment information)
- Social media platforms and third party websites (for targeted online advertising)
- Hotels, conference centers or travel agencies (booking trips or events)
We may be required to provide personal information to authorities (such as the tax authorities or the police) in accordance with applicable law and to comply with our legal obligations. However, we do not disclose personal information to the authorities without a justification in accordance with applicable law or government regulation.
5. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
Your personal data may be transferred to third countries outside the European Economic Area as processed by the service providers we use. In these cases, we strive to ensure that those who process personal data in third countries adequately protect personal data in those third countries.
Your personal information may be transferred to countries outside the European Economic Area, the United States and Canada, as a result of the Service and other communications and activities related to our customer relationship with you. Transfers of personal data to Canada are based on the European Commission’s decision on the adequacy of data protection, according to which the transfer of personal data to Canadian commercial operators does not require a specific authorization. Transfers of personal data to the United States are equally based on the European Commission’s decision on the adequacy of data protection, according to which the transfer of personal data to US commercial operators belonging to the United States
You can find out more about the European Commission’s policy and the list of countries for which it has decided that the level of data protection is adequate: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension- data-protection/adequacy-decisions_en.
If you would like more information about transfers of your personal data to third countries, please contact [email protected] or the contact person specified in this privacy statement.
6. ACCURACY OF INFORMATION
You have the right at any time to prohibit us from using your personal information for direct marketing purposes. Such a request can be sent by e-mail to [email protected].
7. STORAGE PERIOD OF PERSONAL DATA
We retain your personal information for as long as it is necessary to fulfill the purposes for which the personal information was collected. In principle, we retain your personal information for as long as you use the service.
We store your personal information in our services in accordance with the following principles:
- Personal information is stored in our services according to your will. Your personal information related to the service will be deleted when you notify us that you want your username to be deleted
- In order to carry out the events or activities we organize, we will retain your personal information for a maximum of 13 months after the end of the event or activity.
- For direct marketing, such as newsletters, we will retain your contact information until you cancel your subscription or object to the processing of your personal information for direct marketing purposes, after which we will remove your contact information from our direct marketing register.
- We will retain the personal information contained in our accounting supporting documents for the current year and the following six years.
8. RIGHTS OF THE DATA SUBJECT
You have certain rights under data protection law with respect to the processing of your personal information. You can make a request to exercise your rights by contacting us at [email protected].
You have a right:
- Get access to your personal information
- Update your incorrect or incomplete personal information
- Revokes your consent
- Opposes the processing of your personal data
- Deletes your personal information
- Restricts the processing of your personal information
- Transmit your personal information or receive your personal information in machine-readable form.
Please note that your rights regarding the processing of your personal data are not unlimited under data protection law. The appropriateness of your rights depends on the purposes of the processing of personal data, the legitimate grounds for the processing, the protection of the privacy of others and the reasonableness of your requests.
9. INFORMATION ABOUT OUR PROFILING
Profiling is the processing of personal information in which some of your personal characteristics are assessed using personal information. We can use profiling to implement relevant advertising and communications and to develop and optimize our online services.
By utilizing web identification information, we can track your web browser behavior so that we can provide you with relevant advertising for our products and services and target that advertising to you at optimal times.
However, we do not actively carry out such profiling ourselves, but through automatic data processing. Such automated data processing includes, for example, the collection of data by cookies stored on your terminal and the redistribution of this information to third parties to enable those third parties to analyze your web browser behavior in order to implement relevant advertising and communications and to develop and optimize our online services. However, with the possible profiling that may result from automatic data processing, we are unable to identify you.
We believe that the profiling we perform does not have legal or other significant implications for you under data protection law.
10. LINKS TO THIRD PARTY SITES
Our websites may contain links to websites maintained and owned by others. The linked sites are not under our control and we are not responsible for the content of them or the links contained therein. If you visit a linked site, you should separately review the terms and conditions and privacy policies applicable to such site.
In general, we divide the cookies we use into the following categories:
- Cookies related to statistics and analysis: we use the so-called statistical cookies to collect information about users’ ways of using the service. The purpose of this is to evaluate and improve the performance of the Service. For statistical cookies, we mainly use Google Analytics cookies.
- Advertising Cookies: We use own and third-party advertising cookies to collect information about users of the service ways to use the service, so that we can provide relevant and customized advertising. The use of advertising cookies to collect information about you on the Service may be combined with information collected about you from other websites you visit.
THIRD PARTY COOKIES
We use both our own cookies and cookies set by third parties. Third-party cookies that collect your information on our website contain cookies set by the following third parties:
Third-party cookies are set by third parties (not us or our website), in which case any processing of personal data by those third parties is subject to the privacy policies of those third parties.
CHANGING COOKIE SETTINGS
You can choose to accept cookies for statistics, analysis, and advertising. Most web browsers allow you to manage the above cookies using your browser settings. You can block the reception of cookies by changing the settings of your web browser. However, this may result in our website not functioning in the best possible way. The method used to block cookies depends on the web browser you use. Instructions for these functions can be found in the “Help” or other similar menu of your web browser. To learn more about cookies (e.g. to view installed cookies or to manage or delete them), go to https://www.aboutcookies.org/.
12. OTHER TERMS AND CONDITIONS
You have the right to complain to the supervisory authority about the processing of your personal data. Contact information for the Data Protection Commissioner and more information on data protection can be found at www.tietosuoja.fi/en/home.
This Privacy Statement was last updated on March 1, 2021 and is reviewed annually.