Privacy Policy
Welcome to our Privacy Policy!
Here at 255 Pix Studio, we collect and store personal data for different purposes. While doing so, we are committed to protecting your privacy by following good data protection practices. This Privacy Policy outlines the type of data we collect, the purposes we use it for, and other details about our privacy and data protection practices.
Please read through carefully, and don’t hesitate to contact us in case of any questions. Kindly keep in mind that this Privacy Policy may be updated from time to time. The latest version will always be available here on our website.
Let’s dive in!
Data Controller
When dealing with us, the data controller responsible for your personal data is 255 Pix Studio Oy, Hermannin rantatie 10, 00580 Helsinki.
The easiest way to reach us is by sending an email to info@255pix.com.
Personal Data and Sources of Data
As a data controller, we collect and process different categories of personal data, which can be broken into the following categories:
Client and business data
This data set includes the data we collect for managing, running and developing our business, such as to negotiate agreements, to fulfil our agreed obligations and to take care of our customer relationships, both prospective and existing. As such, this data set includes data of the representatives and contact persons of our existing and prospective clients, suppliers and other business partners, as well as data submitted to us via the contact form on our website.
When breaking it down, as part of this data set we may process the following:
- name and contact details (email, phone)
- organisation and title
- invoicing information
- correspondence between us and you
- any feedback you may choose to give
- any information you may choose to submit via our online contact form
- possible marketing permissions and prohibitions
Typically, we receive this data directly from you or from your colleagues as part of a collaboration between us and your employer. We also receive this data directly from you if you submit a contact form on our website.
Please note that we may also collect such data from publicly available sources, such as websites, social media, search engines and different events.
Employee and recruitment data
This data set includes the data we collect for HR management, recruitment purposes, and to fulfil our legal obligations as an employer. As such, this data set includes data regarding our employees and people applying for an open position with us.
As part of this data set, we may process the following:
- name and contact details (email, phone)
- home address
- date of birth
- bank account
- language skills
- emergency contact if you choose to provide one
- information about your previous employments and education
- information related to our obligations as an employer, such as obligations relating to occupational health and salary payments
- information related to handling your work duties, such as identifiers on electric keys and other equipment, events where you represent the employer, and so on
- performance reviews and feedback.
Typically, we receive this data directly from you as part of your employment or application/recruitment process. We may also receive data in this set from a referee appointed by you, from your colleagues, or from job satisfaction surveys, feedback questionnaires and similar methods.
Website visitor data
This data set includes the technical data we collect of visitors on our website via technical means, such as cookies. Please also see our cookie policy in Section 8 for further details. We do not typically use this data to identify any of the visitors to our website, however in some cases you can be recognized from it, making it personal data.
As part of this data set, we may process the following:
- IP address, country
- operating system
- browser version, type and language settings
- model of the equipment
This data is collected automatically via technological solutions. If you do not wish such data to be collected, you can turn off cookies from your browser settings. Please note that it may affect the functionality of our website.
Our Grounds for Processing
We process your personal data on the basis of and to pursue our legitimate interests. This means running and developing our business and maintaining our customer and business relationships.
We also process personal data to comply with our contractual obligations towards you.
In addition, we process personal data to comply with legal obligations, such as employer obligations.
Finally, in some cases we process personal data based on your consent.
When processing your data on the basis of our legitimate interests, our own interests are weighed against your fundamental rights and freedoms. If your rights and freedoms override our interests, we must stop processing your personal data on this ground.
When processing your data on the basis of consent, please note that you may withdraw it at any time. Please send us an email, or use a link provided in some cases for withdrawing your consent.
Do We Transfer or Share Your Data?
Your personal data is stored primarily within the EU/EEA. We may, however, transfer the personal data we process to our appointed service providers, some of which may be located or host their data outside the EU/EEA.
When choosing service providers, we contractually ensure that the following criteria is met:
- the service provider is located within the EU/EEA or a country with an equivalent level of personal data protection as determined by the European Commission, or such service provider has provided sufficient guarantees that personal data is processed with an adequate level of data protection, for example, by undertaking to apply the Standard Contractual Clauses as issued by the European Commission; and
- the data processing is subject to our written instructions, for example an appropriate data processing agreement.
Keeping Your Data Safe and Sound
We are committed to keeping your personal data safe by abiding by the applicable legislation and good data protection practices. Consequently, we have implemented appropriate technical, administrative and organizational measures in order to protect personal data e.g. from unauthorized access and make sure it is always processed on appropriate grounds.
The safety measures utilized by us include supervised and hierarchical access control, 2-phased authentication, personal user IDs and electronic key fobs, adequate firewalls, and other technical and physical safety measures.
How Long Is Your Data Retained?
Your personal data is stored only as long as necessary for the purposes laid out in this Privacy Policy, or as is legally permitted. Therefore, the maximum retention period varies based on the data and the purpose it is processed for.
For instance, client and business data relating to you is typically stored for the duration of our ongoing business relationship. In case the business relationship involves intellectual property, data may be stored as long as it’s necessary to ensure the ownership and management of rights relating to such IP.
In case you are an employee, your data will typically be stored for the duration of your employment, and for a reasonable time after that.
Please note that when the storage of data is no longer necessary for the purpose it was collected for, we may continue storing the said data only in case we are required by law to do so, or it is reasonably necessary for us to oversee our legal obligations or legitimate interests. Such situations include, for example, handling of potential claims, bookkeeping requirements and some employer obligations.
Your Rights
General. If you have a question or a request relating to your personal data or wish to utilize one of your rights listed below, please contact us preferably via email at info@255pix.com, or alternatively via post at Hermannin rantatie 10, 00580 Helsinki, Finland. We will get back to you without undue delay.
Please note that we will need to identify you in order to be able to handle requests regarding your personal data.
Here is a summary of your rights:
- Access. You have a right to access your personal data that is processed by us and request a copy of the same.
- Rectification. You have a right to request correction or completion of incorrect or incomplete personal data we may have about you.
- Erasure. You may request us to erase your personal data from our systems. In case we don’t have a legitimate ground to store your personal data, we are obliged to comply with such request.
- Objection. In case we process your data based on our legitimate interest, you may object to such processing on grounds relating to your particular situation. After such objection, we need compelling legitimate grounds to continue processing.
- Withdrawing consent. When processing is done on the grounds of consent, you may withdraw your consent at any time. Please note that we may still process your data to the extent necessary to abide by the withdrawal of your consent.
- Restriction of Processing. In certain situations, you may request us to restrict the processing of your data. Examples of applicable situations are when we don’t have a legitimate ground to process your data, or when you have contested the accuracy of your data or submitted a request regarding erasure or rectification of your data, and the handling of this request is pending.
- Data portability. You also have the right to receive your personal data, which you have provided us, in a structured, commonly used format.
To use these rights, please contact us via email at info@255pix.com or via post at Hermannin rantatie 10, 00580 Helsinki, Finland.
Further, if you think that our processing infringes your rights, you can lodge a complaint with the relevant supervisory authority agency. The supervisory authority in Finland is the Office of the Data Protection Ombudsman – you can reach them via their website at www.tietosuoja.fi. However, kindly contact us first so we can clarify the situation.
Cookie Policy
Then to cookies.
Cookies are small files placed on your computer when you visit websites. Cookies as such are not personal data, but they may be associated, directly or indirectly, with an individual person when combined with other information. That’s why we process cookies the same way that we process personal data.
The cookies we use can be divided to necessary, analytical and preference cookies, without which the functionality of our website would be significantly lessened. The purposes of our cookie collection are to enable and develop our website, as well as for analytics purposes.
Necessary cookies provide the core functionality of the website. These cannot be disabled, as the website will not function without these.
The analytical cookies are used to obtain non-personal analytics data about the use of our website, such as traffic sources, the number of page views, and duration of time spent on our website. Please note that these can be deactivated from the website or browser settings.
The preference cookies enable the website to remember information to customize how the website looks or behaves for each user. This may include storing selected currency, region, language or color theme. Please note that these can be deactivated from the website or browser settings.
Kindly find the exact list of cookies used in the website settings. Please note that if you do not wish to allow our use of cookies, you can delete or turn off cookies deposited on your computer at any time. This can be done from the settings of your browser, excluding the necessary cookies. In such a case, some of the functions of our website may not work properly.
For more information about cookies, please see for example allaboutcookies.org.