Last updated: July 8, 2021
The purpose of this privacy notice is to describe how and why we collect, process and share your personal data when you use our location based services (“Services”) through the Superhood application. Personal data means any information which may be used to identify an individual.
Superhood Oy, business ID 3132142-1 (the “Company”) is the data controller in relation to the processing of your personal data under the Services.
It is important to us that you feel safe with how we handle your personal data. We take measures to ensure that your personal data is protected and that the processing of your personal data is carried out in accordance with applicable data protection regulations.
FROM WHERE DO WE COLLECT YOUR PERSONAL DATA
We may collect your personal data in the following ways:
Personal data that you give to us by way of registering to the Services, connecting with neighborhoods, publishing posts or filling in questionnaires on the Services, and corresponding with us by telephone, email or otherwise.
Personal data that we collect or generate automatically when you visit the Services it may automatically collect some personal data about you and your visit.
WHAT TYPES OF PERSONAL DATA DO WE PROCESS ABOUT YOU
We may process the following categories of personal data:
Contact details. The e-mail address or account identifier you selected while registering a user profile, and potential other optional contact details you saved under your user profile.
Payment details. Information about what functions you have paid for in the Services, what payment method was used and when. You may also provide us with information related to your payment instruments such as your credit or debit card number, card expiration date, CVV code and billing address in order to purchase functions subject to separate fees. Information related to you payment instruments via the Services will not however be stored by us since we use third party payment service provider for processing of payments.
Location data. Subject to your device settings, the location of your posts, and the location of your device while the application is used.
Device data. Such as device ID, device name, operating system and version, device type and locale.
Account details. Such as account identifier, username, name, picture and description.
Data from published posts and uploads. Data from the posts and uploads you may submit to the Services.
Communication with customer service. Contact detail and other information you may provide us when you communicate with our customer service e.g. via email@example.com.
You are not obligated to provide any data to us but if you choose not to, we may not be able to offer you the requested services.
WHY DO WE PROCESS YOUR PERSONAL DATA
To provide the requested services to you
We process your contact details, payment details and account details in order to set up your account following your request, to provide you the Services you have requested and to notify you of matters pertaining to the use of the Services. As a part of our Services, users (including businesses and organizations) may geographically target advertising. This means that a company or brand can advertise in a selected area. Services include a separate small area for local promotions. The legal basis for processing the personal data for this purpose is the performance of a contract.
To improve your user experience
We process device data in order to improve your user experience by enabling the Services to remember you and the choices you have made while using the Services (e.g. language or home location). The legal basis for processing the personal data for this purpose is our legitimate interest to make your user experience as easy and effortless as possible.
To develop and improve the services
We process your account details, device data and communication with customer service in order to further develop and improve the Services to ensure that it could meet your expectations now and in the future. The legal basis for processing the personal data for this purpose is our legitimate interest to develop and improve our Services.
To allow you to share your location in order to receive and share relevant information
We process your location data in order to allow you to receive relevant information from your neighborhood and to share information to relevant recipients. Location data may be based on exact location of the device or on location tags you have included in your posts. The legal basis for processing the personal data for this purpose is your consent.
To assist you with matters you refer to our customer service
We process your contact details and other information you provide when you communicate with our customer service. The legal basis for processing the personal data for this purpose is our legitimate interest to serve our customers and/or our legal obligations e.g. in relation to fulfilling data subjects’ requests relating to their rights.
To create anonymized statistical data
We process data about your use of the Services in order to create anonymized statistical data to see how the Services are used and how it could be improved. Anonymized statistical data on how the Services are used may include anonymized data on relevant issues and interests of certain neighborhoods. The personal data used to create statistical data will be anonymized and individual users can no longer be identified. The legal basis for processing the personal data for this purpose is our legitimate interest to assess how our Services are used and how to improve it.
To prevent misuse of our services
HOW LONG DO WE RETAIN YOUR PERSONAL DATA
We do not retain personal data longer than is necessary in order for us to offer you the Services. In general, we delete all personal data relating to you once you decide to close your account and no longer use the Services. At latest we shall erase all personal data relating to if you have not used the Services within the last 2 years. However, we might have to retain certain information, such as information of payments made by you, in order to comply with the requirements set forth in applicable local legislation.
RECIPIENTS THAT WE MAY SHARE YOUR PERSONAL DATA WITH
We may share your personal data with:
In order to fulfil the purposes of the processing of your personal data, we share personal data with service providers that we have engaged such as hosting and services to help us understand the use of our Services. The service providers may only process your personal data for these purposes and in accordance with our instructions and not for their own purposes.
We are the data controller for the processing of personal data that the service providers carry out on our behalf.
In certain cases, we share, if necessary, your personal data with other recipients for certain purposes e.g. to fulfill legal obligations, to handle and defend legal claims or to carry out mergers or acquisitions. Examples of recipients are external advisors, authorities, courts, the police and potential buyers or sellers of the company.
WHERE WE PROCESS PERSONAL DATA
We always strive to store and process personal data within the EU/EEA. However, some of our service providers are located outside the EU/EEA and in such a case personal data will be processed outside the EU/EEA. In order to ensure that the personal data is protected we make sure that appropriate safeguards are in place in relation to the service providers which handles your personal outside the EU/EEA, e.g. by way of data transfer agreements (which include standard data protection clauses adopted by the EU Commission). If you want to receive more information about the transfers of your personal data and the recipients thereof, please do not hesitate to contact us at firstname.lastname@example.org.
Under data protection regulations you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfill your rights. Please submit requests for exercising your rights by contacting us at email@example.com.
You have the right to:
Access your personal data
You have the right to access personal data we process about you. You may request a copy of your personal data by using the contact details provided above. We will provide you with it without undue delay unless we have lawful reasons not to share this data or if sharing the data would adversely affect the rights and freedoms of others.
Update your personal data
Furthermore, you have the right to request that incorrect or incomplete personal data is corrected or completed.
To the extent we rely on your consent to process personal data you have the right to at any time withdraw your consent.
Object to the processing of personal data
You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concerns your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims.
Delete your personal data
Under certain circumstances you have the right to request that your personal data is deleted. However, we cannot delete your personal data if we for example are obligated under law to keep the data.
Restrict the use of your personal data
You have the right under certain circumstances to request that the processing of your personal data is restricted. If the processing of your personal data has been restricted we may only, besides storing the data, process your personal data with your consent, in order to establish, exercise or defend legal claims or to defend rights of others.
Transfer your personal data (data portability)
Finally, you have the right to request a copy of the personal data that we store about you in a structured, commonly used and machine-readable format (data portability). The right to data portability, compared to the right to access, only comprises such personal data you yourself have provided and which we process based on certain legal grounds, e.g. your consent.
WE CAN UPDATE THIS INFORMATION
If you have any questions regarding the processing of your personal data, please do not hesitate to contact us. See below for contact details. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority within your jurisdiction.
Business ID: 3132142-1
Kampinkuja 2, 00100 Helsinki, Finland