This policy explains how Nisan Oy processes personal data on its website elifmarket.fi. We comply with the EU General Data Protection Regulation (GDPR, 2016/679), the Finnish Data Protection Act (1050/2018) and the Finnish Act on Electronic Communications Services (917/2014).
1.Controller and contact details
Nisan Oy Email: info@elifmarket.fi
Privacy requests and questions: info@elifmarket.fi. We have not appointed a data protection officer, as the law does not require one.
2.What data we process
We only process data you give us or that arises from using the site:
- Contact form: name, email address, subject and message.
- Newsletter: email address.
- Job application: contact details and attachments.
- Technical data: IP address, browser type, requested page and time in server logs.
- Visitor statistics (only with consent): pages viewed, time spent on a page and the previous page. Google Analytics also uses a cookie identifier, device and browser details and approximate location.
- Staff admin panel: the sign-in session.
3.Purposes and legal bases
Every processing has a legal basis under Article 6 GDPR:
- Answering enquiries – legitimate interest (Art. 6(1)(f)).
- Sending the newsletter – consent (Art. 6(1)(a)). You can unsubscribe at any time.
- Recruitment – steps prior to a contract (Art. 6(1)(b)).
- Running and securing the site – legitimate interest (Art. 6(1)(f)).
- Maps and remembered campaigns – consent (Art. 6(1)(a)) through the cookie settings.
- Visitor statistics and Google Analytics – consent (Art. 6(1)(a)) through the cookie settings.
6.Transfers outside the EU/EEA
Cloudflare, Inc. is a US company certified under the EU–US Data Privacy Framework, and transfers are also covered by the European Commission’s standard contractual clauses. The OpenStreetMap Foundation operates in the United Kingdom, which has an adequacy decision from the Commission. Google Ireland Limited’s parent company Google LLC is certified under the same framework, and transfers are also covered by standard contractual clauses.
7.Retention
We keep data only as long as needed:
- Enquiries: up to 12 months after the matter is handled.
- Newsletter: until you unsubscribe.
- Job applications: up to 12 months after the recruitment ends, unless you agree to longer.
- Server logs: up to 6 months.
- Visitor statistics: our own page statistics up to 13 months, Google Analytics 14 months.
8.Your rights
To use your rights, email info@elifmarket.fi. We reply within one month. You have the right to:
- access your data and get a copy (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw consent at any time, without affecting earlier processing
- lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).
9.Automated decision-making
We make no automated decisions and do not profile site visitors.
10.Security
The site is served over encrypted HTTPS only. The admin panel is open to staff with credentials only, and access to personal data is limited to those who need it for their work.
11.Changes
We update this policy when the service or the law changes. The date of the latest update is shown at the top of the page.