The legal basis for the processing of your Personal Data is, where not stated otherwise or another legal basis is otherwise applicable, the performance of the contract for providing Services to you, as permitted by Data Protection Legislation.
We can also process your Personal Data where We have a legitimate interest to do so, as permitted by Data Protection Legislation, such as for marketing purposes. Where we rely on legitimate interests as a reason and legal basis for processing personal data, it has considered whether or not those interests are overridden by the rights and freedoms of the data subjects and has concluded that they are not.
Where the processing is such that your consent is required by the applicable legislation, We will state so and obtain your consent, and this will be the legal basis for the processing of your Personal Data, as permitted by Data Protection Legislation. However, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If such withdrawal means that We are no longer able to provide the Services to you, We may cease providing the Services.
With regard to certain communication You may opt-in to receive emails and communications from us about information and news that you have either indicated your wish to receive from us, or that we believe may be of interest to you. Processing of such information is based on the specific consent given by the recipient or, in the case of contact persons at our customers or prospects, our legitimate business interest to send updates and information about our products and services, our activities, relevant market events, and to conduct business transactions with you.
Where we utilize biometric data such as an image of your face, we will only utilize such data to provide the service to you and the gathering of such data is based on your consent, which can always be withdrawn, subject to certain timelimits of the service. The biometric data is turned into a vector that is then encrypted before analyzing it with our algorithms. The vector is in no way identifiable data and cannot be converted back into an image.
We collect anonymous data from every visitor of the website to monitor traffic and improve our website performance, content, and user experience. We keep the personal data, both information you give to us as well as technically gathered data, as long as necessary to fulfill the purpose the personal data has been gathered for or as required by applicable laws.
For recruitment purposes we may collaborate with a third party service provider. Information gathered for recruitment purposes from the candidate will be collected by the third-party service provider and processed by the third-party service provider. We may change the third-party service provider if necessary. The data submitted by the Data Subject for recruitment purposes will only be available to the people taking part in the recruitment process. The data will be removed once it is no longer relevant for recruitment purposes unless the applicant gives consent to store the data for future references.
For sales and marketing purposes we collect contact information such as name, e-mail address and phone numbers to clients and prospective clients. Collected information is only stored as long as the information is relevant and then removed. We use third-party secured platforms for information storage.
We primarily store data on servers located in the European Economic Area (“EEA”) or European Union (“EU”). Personal Data may also be transferred regularly outside the EU and the EEA . When your data is transferred outside the EEA, we will make sure that the data transfer is covered by appropriate safeguards such as standard contractual clauses approved by the European Commission (“EC”) or the EC’s adequacy decision. More information can be provided on request.
We may collect information from third parties, such as our trusted partners or marketing agencies, when you provide data to them. This includes your contact information from partners when we engage in joint marketing or co-branding activities, and data from social networks based on campaigns we may run or to easily gather information you wish to provide us in job applications.
We also use certain advertising features enabled by Google Analytics, including Remarketing with Analytics, Demographics and Interests Reporting, Google Display Network (GDN) Impression Reporting, and Segments. For these parts of the service, Google uses advertising cookies to collect, share, and use your personal data for the personalization of ads. To control the information Google uses to show you ads, please review your Google Ads settings (see here).
Our web server keeps automated logs that record visits to the Sites. The IP address from which you access the website is included in these logs as is standard practice for websites. We have a legitimate interest to record and keep these logs for troubleshooting and information security purposes. Logs are kept only for the necessary time and deleted immediately after.
We only collect necessary Personal Data, and do not store it longer than necessary. We only transfer and store collected data in accordance with applicable relevant regulations. In the event that we merge with another company or, are acquired or sell the company or any of the companies belonging to the Code Nexus group, relevant client information may be transferred to the acquiring party. Confidentiality regarding all Personal Data will be guaranteed through a non-disclosure agreement with the acquiring party. Personal information may upon demand from authority or court order be transferred to authorities or an administrator of justice based on statutory prerequisite.
The Data Subject has the right to be informed about the Personal Data we have collected from the Data Subject. For marketing purposes the Data Subject has the right to choose not to receive direct marketing. Upon request by the Data Subject, the right to be forgotten may be applicable, also the Data Subject may request to have the Personal Data moved to another data controller or processor. According to applicable law, as Data Subject you are entitled to the following rights:
The Data Subject has the right to withdraw consent at any time. For example, if you have given consent to direct marketing, you can revise it at any time.
The Data Subject has the right upon request to obtain information regarding the processing of one’s Personal Data and access to it. The Data Subject also has the right to be informed of the purpose and use of the collected Personal Data.
If the Data Subject discovers inaccuracy in the collected data, the Data Subject has the right to ask for rectification of the information.
You may also ask us to delete your Personal Data from our systems. We will comply with such a request unless we have a legitimate ground to not delete the data. After the data has been deleted, we may not immediately be able to delete all residual copies from all of our systems. Such copies shall be deleted as soon as reasonably possible.
You may object to certain use of Personal Data when such processing is based on legitimate interest, including direct marketing or profiling. You may opt-out of receiving promotional emails by following the instructions in those emails. If You opt-out, we may still send you non-promotional customer information, such as emails about your account, providing Our services and products or our ongoing relationship with You.
You may request us to restrict processing of certain Personal Data. Your Personal Data will then only be stored and not processed otherwise; this may however lead to fewer possibilities to use the Services. If such restriction means that We are no longer able to provide the Services to you, We shall be entitled to stop providing the Services.
You as the Data Subject has the right at any time to deny direct marketing.
You as the Data Subject has the right at any time to deny direct marketing.
These rights may be used by sending a letter or e-mail to us on the addresses set out below. Your identity will be verified before the information is given out, which is why We may have to ask for necessary additional details. We will respond to the request within a reasonable amount of time and, where possible, within one month of the request and the verification of identity. If your request cannot be met, the refusal shall be communicated to you in writing. Code Nexus may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.
You also have the right to lodge a complaint with the relevant data protection authority in case you have concerns about how we process your data. The contact details of each EU member state’s data protection authority are available here. However, we are committed to addressing and resolving any concerns you may have about our data processing practices with you directly.
Code Nexus Oy & FaceX Nordic, (2831715-7), Helsinki, Finland
This policy was last updated on April 4th, 2021.