Privacy Policy

1. Controller

Costa Commerce Oy (“Costa Commerce” “we” “us”)
Mikonkatu 13 A, 00100 Helsinki
Company ID: 3309303-9

2. What is this notice for?

This notice is here to inform you about how we collect, process and store personal data we collect and follow traffic on our website. The certain type of personal data we collect concerns our clients, potential clients, partners, individuals who want to hear our news as well as recruitment candidates. We collect this data so that we can, for example, be able to respond to requests for new business, send newsletters to our subscribers, and process job applications sent to us via our website. The analytics we use on our website is for learning more about how the website is used and how we can improve it.

3. What data do we collect and how do we process it?

The following outlines the various types of personal data we process, the sources for each type of personal data, as well as the purpose and legal basis for processing said personal data.

If you are an employee of Costa Commerce, a recruit in our recruitment process, our client, business partner,  or a representative of either, or you have subscribed to communication from us or signed up for and/or attended our events:
Data type Source Purpose Legal basis
Name You or your organisation Provision of services, management of client relationship Business contract or relationship
Contact details You or your organisation Provision of services, management of client relationship Business contract or relationship
Data relevant to the recruitment process, needed documentation and possible links to social media profile You or your organisation Provision of services, management of relationship Business contract or relationship
Employer or other organisation You or your organisation Provision of services, management of client relationship Business contract or relationship
Information about communication and collaboration details Communication between you and us Provision of services, management of client relationship Business contract or relationship
Event signups you Event organisation, management of client relationship Contract (event sign-up)
Newsletter you or your organisation Provision of services, management of Business contract or relationship

If you receive communication from us:

Data type Source Purpose Legal basis
Name You or a contact at Costa Commerce Marketing Your consent or our legitimate interest (marketing)
Contact details You or a contact at Costa Commerce Marketing Your consent or our legitimate interest (marketing)
Employer or other organisation You or a contact at Costa Commerce Marketing Your consent or our legitimate interest (marketing)
Information about communication Communication between you and us Marketing Your consent or our legitimate interest (marketing)

If you are a website visitor:

Data type Source Purpose Legal Basis
IP Address Your browsing activities Provision of a smooth user experience on our website Legitimate interest

How long do we keep your data?

If you or your company is a client of Costa Commerce we may process your data as long as the client relationship is in force and for a maximum of 5 years thereafter.

If you receive marketing communication from us, we may process your data until you inform us that you do not want to be in our marketing list anymore.

If you visit our website, we may process your data for a maximum of 2 years after your visit.

Concerning recruitment applications, your data is foremost processed by a responsible colleague in the country office to which you have directed your application, either to Helsinki, Berlin or Málaga.

Who processes your data? Is data processed by third parties outside the European Economic Area?

Your data is not shared with any other parties outside of Costa Commerce’s group companies, unless expressly required by applicable laws or public authorities. We may also share your data to our trusted partners if processing your request or provision of our services requires us to do so.

Costa Commerce has a legitimate interest to process the above listed personal data for the purposes described above. This interest is based on your connection with us and concerns e.g. your position in a company related to us or your direct request to us.

Costa Commerce uses the following companies for processing of data:

Service Provider Purpose Location Read More
Hubspot Used for client relationship management EU-U.S. and Swiss-U.S. Privacy Shield Frameworks and standard contractual data protection clauses, which have been approved by the European Commission Visit link
Google G-Suite Email accounts and document management EU-U.S. Privacy Shield Frameworks and standard contractual data protection clauses, which have been approved by the European Commission Visit link
Google Analytics Website usage analytics EU-U.S. Privacy Shield Frameworks and standard contractual data protection clauses, which have been approved by the European Commission Visit link

4. Cookies and analytics

We use cookies on our website to improve its user experience. Cookies are small text files that a browser saves on your device and they are used, for example, when a service wants to save your information when moving from one website to another. If you do not want to use cookies, you can change your cookie settings at any time in your browser. Please note that disabling cookies might impact how our website functions.

When you access our website, we ask for your consent to allow us to store the following cookies on your device:

5. What rights do you have?

You have the right to request access to, erasing and correcting your personal data as held and processed by Costa Commerce, as well as to send us any other requests based on the applicable data protection laws (e.g. request restriction of processing of the data). Further, you always have the right to prohibit us from sending newsletters or other marketing messages to you. Please send any requests concerning your data to the email addresses set out above in Section 2.

Data protection laws are supervised in Finland by the Finnish Data Protection Ombudsman. If you have questions belonging to the jurisdiction of the Data Protection Ombudsman, or if you wish to lodge a complaint regarding the processing of personal data, you may contact the Data Protection Ombudsman’s office as instructed at www.tietosuoja.fi.

In Germany if you wish to lodge a complaint you can do it with the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (Federal Commissioner for Data Protection and Freedom of Information)

6. How do we secure your data?

We consider all personal data we collect to be confidential. Your data can only be accessed by theCosta Commerce employees or our group company employees when it is necessary for them to perform their work related to your data.

The network and equipment of Costa Commerce and its partners have been secured by using appropriate measures to protect the personal data against unauthorised access and accidental or unlawful destruction, alteration, disclosure, transfer or other unlawful forms of processing.

7. Changes to this Privacy Notice

We may update this Privacy Notice as we improve our website and operations. The updated notice will be made available on our website.

Contact

If you have any questions about our Privacy Policy, please contact us by email at hello@costacommerce.com.