Evästekäytäntö ja rekisteriseloste


Website Cookie Policy

We monitor the use of our website using cookies, which are small text files stored on the user’s computer. The boreal.fi web service uses cookies for session management and visitor tracking. Cookies are also used to analyze how users interact with the web service. The information collected through cookies includes browser identification data, website usage data, and the user’s IP address. We use Google Analytics cookies on our website. Google Analytics complies with the EU–US Privacy Shield Framework as its data protection policy.

Users may disable the use of cookies by adjusting the settings of their internet browser. Previously stored cookies can also be deleted if desired. Deleting cookies does not stop their use; instead, the user will be treated as a new, unidentified user. Disabling cookies may affect the functionality of the website. 

We will notify users of any changes to the cookie policy on this page.

Privacy Statement

This privacy statement is in accordance with Section 10 of the Personal Data Act (523/1999).

Data Controller

Name: Boreal Plant Breeding Ltd. 
Address: Myllytie 10, 31600 Jokioinen, Finland 
Phone: +358 400 200710 
Email: boreal@boreal.fi
Representative of the Data Controller: Terhi Tuomi 
Email: firstname.lastname@boreal.fi 

Name of the Register

Boreal Plant Breeding Marketing Register

Purpose of Processing Personal Data

Personal data is processed for the purposes of managing, developing and analyzing customer relationships, implementing customer communications, marketing products and services, and organizing events, studies, campaigns and competitions. Data in the register is used for direct marketing if the customer has given their consent. 

Content of the Register

The data content of the register may vary on a user-specific basis. The register may include the following types of user data: first and last name, title or profession, age, gender, native language, contact details, company or organization, and any prohibition given by the user regarding the disclosure or use of their data for direct marketing purposes. In addition, the register may contain information such as nationality, date of birth, country of residence, participation in events, newsletter subscriptions, and other profiling data and information voluntarily provided by the user. This may include, for example, customer feedback, participation in campaigns or prize winnings. 

Regular Sources of Data

User data may be collected through surveys, competitions and marketing campaigns. Consent for electronic direct marketing (email and/or mobile) is requested separately in accordance with the Personal Data Act. Personal data may also be obtained from the Population Information System, the registers of Posti Group Corporation and other similar registers. Data may also be collected from publicly available external sources such as internet sources. 

Disclosure of Data and Transfers Outside the EU or EEA

Servers and other technical tools used to process data may be owned and managed by external service providers used by the data controller. For one-time deliveries, name and address data may be disclosed as a file to a printing house or phone numbers to an operator. Customer data may also be disclosed to authorities within the limits permitted and required by applicable legislation. 

Data Retention and Deletion

Data is retained indefinitely. 

Principles of Protecting the Register

Electronic data: access to systems containing customer data and the ability to modify such data is restricted to specifically designated employees of the data controller and employees of companies acting on behalf of the data controller. Each user has defined access rights and logs into the system using their own username and password. Employees handling customer data are bound by confidentiality obligations. The customer register and the related system hardware are located in secured data centers. Data is regularly backed up to ensure availability in case of disruptions. The system is protected by a firewall against external access attempts. Data is disclosed only when required by law, such as at the customer’s own request or a statutory request from authorities. 

Paper records are stored in locked premises accessible only to authorized personnel. 

Right of Access, Rectification and Objection

Service users have the right to inspect the data stored about them in the register or verify that no data about them exists. The data controller must also inform the data subject about the regular sources of data and how the data is used and disclosed. The data subject also has the right to prohibit the processing and disclosure of their data. 

Requests for access, correction or prohibition of processing must be submitted in person at the office of Boreal Plant Breeding Ltd. at the address above during office hours. To prevent misuse of personal data, proof of identity must be provided. 

In addition, users have the possibility to opt out of direct marketing by contacting Boreal either by email at boreal(at)boreal.fi or by phone at +358 400 200710. 

Updating the Privacy Statement

We reserve the right to amend this privacy statement by providing notice on this website. We recommend that users review the contents of the privacy statement regularly.