Vallox > Vallox info > Policies > Our privacy policy > Privacy policy

Privacy policy

1 CONTROLLER

Vallox Oy
Business ID: FI06723509
Myllykyläntie 9-11
32200 LOIMAA
Tel. +358 10 7732 200

2 CONTACTS IN MATTERS RELATED TO THE REGISTER

Customer service
Tel. +358 10 7732 200
E-mail: info@vallox.com

3 NAME OF THE REGISTER

Vallox Oy’s customer and supplier register

4 PURPOSE AND BASIS FOR THE PROCESSING OF PERSONAL DATA

The primary basis for the processing of persona data is the customer relationship between Vallox Oy and the customer/supplier, an assignment, or the consent given by the customer/supplier for the processing of their personal data.

Personal data can be processed for the following purposes by Vallox Oy or a partner or a self-employed person authorised by Vallox Oy:

  • Offering, delivery, provision, and planning of Vallox Oy’s services and products.
  • Management and maintenance of the customer relationship between Vallox Oy and the customer/supplier, the implementation of customer service and related communications, and the implementation, development, and follow-up of advertising.
  • Personal data can also be processed in connection to other measures related to the management of the customer relationship.
  • Personal data will also be processed for the purposes of orders, invoicing, contacts, service, and reporting, and in order to develop Vallox Oy’s business operations.
  • Processing tasks can be outsourced to external service providers or self-employed persons in accordance with and within the boundaries of data protection legislation.

5 INFORMATION CONTAINED IN THE REGISTER

Groups of persons, whose personal data can be processed, include persons who are or have previously been Vallox Oy’s customers/suppliers, by virtue of their profession, those considered as partners and/or included within the scope of marketing and persons who have been in contact with Vallox Oy.

The following data can be saved regarding the data subject:

  • The basic information, such as the name, personal identity code, title, and contact details (address, email address, telephone number) of the contact person of a company that is or has previously been Vallox Oy’s customer/supplier, or some other customer/supplier that has been in contact with Vallox Oy.
  • Information regarding the person’s access right to Vallox Oy’s systems.
  • Information related to the customer relationship between Vallox Oy and data subjects, such as order information, customer history, any direct marketing permissions and bans, and other accounting details.
  • Other communication between the parties, such as information regarding participation in activities organised by Vallox Oy and details of contacts and other information related to the provision of the service.
  • Any other information provided by the customer/supplier and any self-produced content (e.g., a contact request submitted through the website).

Processing tasks can be outsourced to an external service provider selected by Vallox Oy in accordance and within the boundaries of data protection legislation.

6 USER TRACKING

Vallox Oy uses Leadoo’s tracking service to follow what users are doing on the site and combine this behavioral data with other data we can gather from e.g. chat interactions. Leadoo uses etag tracking in order to hook together the same users behavior over several sessions – in practice this works similarly to cookie based tracking. Please check out Leadoo Marketing Technologies Ltd’s Privacy Policy (https://leadoo.com/privacy-policy/) for more information on what is tracked and what your rights are. Leadoo works as the Processor and we work as the Controller for the data in terms of GDPR. You can stop the tracking by emptying your browser’s cache after the visit. Learn more about how Leadoo works as a GDPR compliant processor, see https://leadoo.com/privacy-policy-processor/

7 STORAGE PERIOD OF PERSONAL DATA

Vallox Oy will store personal data in the register until the basis for the storing of personal data expires. However, valid legislation will be applied to the storage periods.

8 REGULAR SOURCES OF INFORMATION

Information is acquired, principally, from the data subject or the community that the data subject represents, and from transactions related to the customer relationship, service use, communication, and access of the data subject. Information can also be collected and updated from public and commercial registers.

9 REGULAR DISCLOSURE OF DATA AND TRANSFER OF DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION OR THE EUROPEAN ECONOMIC AREA

Personal data is only disclosed to parties that act on behalf of Vallox Oy in the production, development and maintenance of services and communications, unless the disclosure is based on a contract, a separate consent and/or express regulations.

Information is not, principally, transferred outside the European Union or European Economic Area. If a transfer is required, it will be carried out using appropriate safeguards in full compliance with EU data protection legislation.

10 DATA SECURITY PRINCIPLES

Any manual material is stored in a locked space that can only be accessed by separately authorised persons. Only those Vallox Oy’s staff members, self-employed persons who have signed a non-disclosure agreement, and subordinates of a cooperation partner who has the right to process personal data in their work and who are bound by a non-disclosure agreement can access the system or digital material that contains personal data. Information is collected in databases that are protected by means of firewalls, passwords, and other technical measures, including a controlled granting of access rights and the monitoring of their use, the use of encryption technologies, instructing of persons participating in the processing of personal data, and a careful selection of subcontractors.

11 THE RIGHTS OF THE DATA SUBJECTS RELATED TO THE PROCESSING OF PERSONAL DATA

11.1 The right to object to the processing of personal data and direct marketing

The data subject has the right to object, related to their special personal circumstances, to the processing measures that Vallox Oy directs at the data subject’s personal data to the extent that this processing of personal data is based on the customer relationship between Vallox Oy and the data subject. The data subject can submit their objection request in accordance with section 11 of this privacy notice. The data subject must specify, in connection to their request, the special circumstances based on which they object to the processing of their personal data. Vallox Oy has the right to refuse to agree to the request, subject to the grounds specified in legislation.

11.2 The right to access the data

The data subject has the right to inspect the data concerning themselves that has been saved in Vallox Oy’s register. The inspection request must be made in accordance with section 11 of this privacy notice. The inspection right can be denied, subject to the grounds specified in legislation.

11.3 Right to request that data be corrected, deleted, or its processing be restricted

A request to correct erroneous, unnecessary, defective, or outdated data must be made in accordance with section 11 of this privacy notice.
Data subjects also have the right to request that Vallox Oy restricts the processing of their personal data, e.g., when the data subject is waiting for Vallox Oy’s response to his or her request to correct or remove personal data.

11.4 The right to transfer the data from one system to another

To the extent that the data subject has submitted data to the register that is being processed based on a consent or assignment given by the data subject, the data subject has the right to receive such data, principally, in a machine-readable data format, and also has the right to transfer this data to another Controller.

11.5 The right to submit a claim to the supervisory authority

Data subjects have the right to submit a claim to the competent supervisory authority if Vallox Oy has not complied with the data protection legislation applied to the Controller’s activities.

12 CONTACTS

The party specified in section 2 must be contacted in all matters related to this privacy notice or to executing the right of the data subject.
Where required, Vallox Oy can request that the data subject specifies their request in writing and the identity of the data subject can be verified before other measures are taken.

13 CHANGES TO THIS PRIVACY NOTICE

We develop our services constantly and reserve the right to make changes to this privacy notice by publishing a notification of this in our services. Changes may also need to be made due to changes in legislation. We recommend that you read the privacy notice regularly.

This privacy policy was last updated on 17.12.2025.

Chat Clear chat
Chat