Privacy policy in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
Company name: Sunrob Packaging Oy
Business ID: 3110891-1
Address: Yläniitynkatu 6 A, 53550 Lappeenranta
Email: sunrob@sunrob.com
Tel.: 044 257 9477
Website: imatrox.com / sunrob.com
2. Contact person for data protection matters
Name:
Email:
Tel.:
3. Register name
Sunrob Packaging Oy's customer register
4. Purpose of Processing Personal Data
We process personal data for the following purposes:
- Processing and fulfilling orders
- Managing customer relationships
- Responding to inquiries and support requests
- Handling payments and invoicing
- Managing warranty claims and product returns
- Complying with legal obligations
- Customer communication
- Improving our website, products, and services
- Marketing and customer communications where permitted by law
5. Legal Basis for Processing
The processing of personal data is based on one or more of the following:
- Performance of a contract (orders and deliveries)
- Compliance with legal obligations (e.g. accounting)
- Legitimate interests pursued by the data controller (customer relationship maintenance and development)
- Consent provided by the data subject (e.g. newsletters)
6. Categories of Personal Data Processed
We may process the following categories of personal data:
Customer information
- Name
- Company name
- Company ID (for business customers)
- Phone number
- Shipping address
- Billing address
Order information
- Ordered products
- Order history
- Delivery details
- Payment information
- Customer service communications
Technical information
- IP address
- Cookie information
- Browser and device information
- Website usage data
7. Sources of Personal Data
Personal data is collected from:
- Customers when placing orders
- Contact forms on our website
- Email, telephone, and other communications
- Website usage
- Cookies and analytics tools
8. Recipients of Personal Data
Personal data may be shared with trusted service providers when necessary for business operations, including:
- Payment service providers
- Shipping and logistics companies
- Accounting and bookkeeping service providers
- Website hosting providers
- IT and software service providers
- Public authorities when required by law
We do not sell personal data to third parties.
9. International Data Transfers
Personal data may be transferred outside the European Economic Area (EEA) when using international service providers. Where such transfers occur, appropriate safeguards are implemented in accordance with the GDPR.
10. Data Retention
The information is stored as follows:
- Customer account information: for the duration of the customer relationship
- Order and invoicing data: up to 10 years where required by accounting and tax legislation
- Marketing consent records: until consent is withdrawn
- Technical logs and analytics data: up to 24 months
11. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Firewalls and security software
- Access control and authentication systems
- SSL/TLS encrypted connections
- Limiting access to authorized personnel only
12. Rights of Data Subjects
Under the GDPR, data subjects have the right to:
- Access their personal data
- Rectify inaccurate or incomplete data
- Request erasure of personal data
- Object to processing
- Restrict processing
- Request data portability
- Withdraw consent at any time where processing is based on consent
Requests regarding personal data should be submitted using the contact details provided above.
13. Cookies
Our website uses cookies and similar technologies for the following purposes:
- Ensuring website functionality
- Managing shopping cart operations
- Analyzing website traffic and performance
- Measuring and improving marketing effectiveness
Users may manage cookie preferences through cookie settings or browser settings.