Website cookie policy

We track the use of our website using cookies, which are small text files stored on the user’s computer. The Boreal.fi website uses cookies for session management and visitor tracking. Cookies are also used to analyse how the user uses the online service. The information stored by cookies about the user includes identifying information about the browser, the use of the website and the IP address of the user’s computer. We use Google Analytics cookies on our website. Google Analytics complies with the EU-US Privacy Shield Framework as its privacy policy.

Users can choose to prevent the use of cookies by making changes to their internet browser settings. They may also clear any previously saved cookies if they wish. Clearing cookies does not stop the use of cookies, but the user is treated as a new, unidentified user. Blocking the use of cookies may affect the functionality of the website.

We will notify you of any changes to our cookie policy on this page.

Privacy notice

A privacy notice in accordance with Section 10 of the Personal Data Act (523/1999).

Data controller

Name: Boreal Plant Breeding Ltd. Contact details: Myllytie 10, 31600 Jokioinen tel: 0400 200710 email: boreal(at)boreal.fi Representative of the data controller: Terhi Tuomi email: terhi.tuomi(at)boreal.fi

Name of the register

Marketing Register of Boreal Plant Breeding

Purpose of processing personal data

The purpose of processing personal data is to manage, develop and analyse customer relations, to carry out customer communications, to market products and services and to organise events, surveys, campaigns and competitions. The register data is used for direct marketing, provided that the customer has given their consent.

Data content of the register

The data content of the register may vary from user to user. The following user data may be recorded in the register: first name and last name, title or profession, age, gender, mother tongue, contact details, company or organisation and any consent given by the user to the disclosure or use of the data for direct marketing purposes. In addition, the following data may be entered in the register: nationality, date of birth, country of residence, participation in events, subscriptions to newsletters and other profiling and other information provided by the user. These include customer feedback, customer participation in campaigns or raffle wins.

Regular sources of information

User data can be collected through various questionnaires, competitions and marketing campaigns. For electronic direct marketing (email and/or mobile), the customer’s consent is requested separately in accordance with the Personal Data Act.

In addition, personal data may be collected from the Population Information System, Suomen Posti Oyj’s registers, and similar registers. Data can also be collected from publicly available external sources, such as the Internet.

Regular disclosures and transfers of data outside the EU or the European Economic Area

The servers and other technical tools used to process the data may be owned and operated by a third-party service provider used by the data controller. For one-off mailings, name and address information can be provided as a file to a printing house or a telephone number to an operator. Customer data may be disclosed to the authorities within the limits permitted and required by applicable legislation.

Information on the retention periods and destruction of data

Data is retained until further notice.

Principles for the protection of the register

Electronic material: access to the system containing customer data and the right to modify customer data is limited to the separately appointed employees of the data controller and to employees of companies acting on behalf of and for the account of the data controller. Each user is appointed access rights to the system, and they log in with their own username and password. Employees who process customer data are bound by confidentiality. The customer register and the information system hardware that processes it are located in closed data centres. To safeguard the data in the case of any disruptions, the data is regularly backed up by copying. A firewall protects the system against outside access. Information is disclosed or shared with third parties only in response to a legal obligation to disclose, such as a customer’s own request or a legal request from a public authority. Paper material is kept in locked premises, accessible only to relevant individuals.

Right of access, rectification and objection

Service users have the right to check what information about them is stored in the register or that no information about them is stored in the register. At the same time, the data controller must inform the data subject of the regular sources of information in the register and of the purposes for which the information in the register will be used and disclosed on a regular basis. Data subjects also have the right to object to the processing and disclosure of data concerning them.

Requests for access and rectification of personal data and requests to object to processing must be presented to the Boreal Plant Breeding office at the above address during office hours. To avoid misuse of personal data, the request must be accompanied by proof of identity.

In addition, service users can opt-out of direct marketing by contacting Boreal either by email: boreal(at)boreal.fi or by telephone: 0400 200710 or by cancelling their newsletter subscription on the subscription page: https://email.boreal.fi/.

Updating the privacy policy

We reserve the right to change this privacy policy by posting a notice on this website. We recommend that users of our website regularly consult the policy’s contents.