OddlyGood

Privacystatement

This privacy statement describes how Oddlygood Global Ltd (“Oddlygood” or “we”) processes your personal data when you visit its websites. This privacy statement applies only to information obtained through cookies and other similar technologies that are deemed to be personal data and to information you submit through Oddlygood’s websites to the extent such information contains personal data. Oddlygood may update this privacy statement from time to time, for example, due to possible amendments in legislation. Oddlygood notifies you of any material changes herein as it deems necessary.

1. Controller

Oddlygood Global Ltd (Business ID: 0112421-6)

Meijeritie 6

00370 Helsinki, Finland

2. Contact person

Privacy Officer of Valio: privacy.office@valio.fi, +358 10 381 2185, address: Valio Ltd/Privacy Officer, Meijeritie 6, 00370 Helsinki, Finland.

You may contact Valio’s Privacy Officer in all matters regarding processing of your personal data and fulfilling your rights.

3. PURPOSE AND GROUNDS FOR PROCESSING OF PERSONAL DATA

Oddlygood processes your personal data for the following purposes:

  • for the analysis, development and statistics of Oddlygood.com website;
  • to produce targeted advertising, communication and content and to optimize marketing measures; and
  • to provide customer service through website contact form.

In addition, Oddlygood may combine your cookie data to your other personal data included in Oddlygood’s registers.

The legal ground for processing your personal data obtained through cookies and similar technologies is your consent. When you visit our website for the first time, you may choose from cookie settings which optional cookies you accept. You can revoke your consent to the use of cookies as described in our Cookie Policy.

You accept the usage of strictly necessary cookies when you browse our websites. Legal ground for processing of personal data related to strictly necessary cookies is the performance of a contract or legitimate interests of Oddlygood.

The legal ground for processing your personal data submitted through Oddlygood’s website’s contact form is the legitimate interests of Oddlygood. The legitimate interest is based on the relevant relationship between you and Oddlygood, which is the result of you submitting information through contact form. The processing of personal data is necessary in order to provide customer service or otherwise process any information submitted through the contact form.

4. PERSONAL DATA TO BE PROCESSED

Oddlygood processes the following personal data:

  • personalised anonymous occasional identifier;
  • your IP address;
  • browser type;
  • your visit at the website as well as the information related thereto (e.g. language chosen by you, the time of your visit, pages you browsed on the website, web address from which you landed to the website, the domain from which access the website, visits at websites with Oddlygood’s advertisements); and
  • name, email address, phone number and any other personal data that may be disclosed by you when you use the website contact form.

IP addresses are masked for the purposes of analytics.

5. Data Sources

Oddlygood collects personal data through cookies and similar technologies, including third party cookies. Oddlygood collects personal data through, among others, analytics tools (such as Google Analytics). In case you contact Oddlygood via website contact form, Oddlygood may collect personal data as disclosed by you by filling in the website contact form.

6. RECIPIENTS OF PERSONAL DATA

Oddlygood is using the following applications whose providers receive the data collected:

  • Google Analytics: Web analytics
  • Google Tag Manager: Tag management
  • Hotjar: User analytics
  • Typekit: Font library

In addition, Oddlygood may disclose your personal data to Oddlygood’s group companies (e.g. Valio Ltd) as well as advertising and media agencies who provide their services to Oddlygood.

Oddlygood transfers personal data to its service providers only to the extent they are involved in the implementation of the uses described in this privacy statement. Service providers may not use personal data for any purpose other than those described herein and the purposes described in the terms and conditions applicable in the contractual relation between Oddlygood and the service provider. Oddlygood may change the service providers specified in this privacy statement or add new ones in which case Oddlygood updates this statement as necessary.

7. TRANSFER OF PERSONAL DATA OUTSIDE THE EU OR EEA

The service providers described above may process personal data outside the EU/EEA. In such case, the transfers are carried out in accordance with the applicable legislation and with the requirements laid down therein.

8. RETENTION PERIOD OF PERSONAL DATA

Personal data obtained through cookies are stored as follows:

  • Session cookies in general for the duration of each session (no longer than 30 minutes) or until you close the browser.
  • Persistent cookies in general for as long as you delete the cookie or no longer than two years.

9. PROTECTION OF PERSONAL DATA

Oddlygood looks after the data security of your personal data with appropriate administrative and technical protection measures. Only such persons to whom processing of personal data is necessary in order to perform their work tasks may process the personal data. The systems containing personal data can be accessed only with separately granted personal usernames and passwords.

The systems and databases containing personal data processed by Oddlygood are located in servers in locked facilities. Only named persons authorized to have access in order to perform their work assignments can access these facilities. Oddlygood has secured the servers and the data network with appropriate firewall and other technical protection. The server platforms are protected by access control systems.

10. YOUR RIGHTS

According to the applicable data protection legislation, you have at any time the right to:

  • access your personal data (right to review)
  • obtain rectification or completion of personal data that are inaccurate;
  • obtain erasure of personal data;
  • object to the processing of personal data; and
  • obtain restriction of processing of personal data (e.g. for the time during which you await a response for the request to rectify personal data).

You must present the request regarding the exercise of your rights to the contact person mentioned in Section 2 above. Oddlygood may ask you to verify your identity or specify the request before the implementation thereof. Oddlygood may also refuse to fulfill your request, on the basis of a ground prescribed in the data protection legislation. In such case, Oddlygood notifies you of such grounds.

11. RIGHT TO LODGE A COMPLAINT WITH SUPERVISORY AUTHORITY

You have a right to lodge a complaint with the competent supervisory authority in case you consider that Oddlygood has not processed your personal data in accordance with the applicable data protection legislation. You can lodge the complaint with a supervisory authority of the EU member state where you habitually reside or work, or where the alleged breach of data protection legislation has taken place.

Date updated: September 13th 2022