1. Data Controller
Nautics Sailmate service is developed and maintained by Nautics Oy (2292745-6) (Nautics”), who is the data controller.
2. Data Protection Officer
Email vesa.satama at nautics.fi
3. The purpose of the policy, content, categories of data subjects and collection
In this policy it is described how Nautics processes personal data in its register.
Nautics maintains a register of the users of Nautics Sailmate service (“Service”) and of the persons who have subscribed to the Sailmate newsletter. The register is necessary in order to administrate usage rights to the Service, to maintain and develop the Service, to inform about the use of the Service and its contents, and to send newsletters. The data in this register is collected only to the extent appropriate. The register may include for example the following information:
Contact information such as name, email address and phone number: Nautics may send newsletters, emails or other messages to administrate the usage rights to the Service, to develop the Service and to inform about the use of the Service and its contents. The messages will be sent to users and to persons who have subscribed to Sailmate newsletter by using the contact information they have given.
Boating data: data on users’ boats and the use of Sailmate service. This data is required to develop the Service and its contents and to inform of the use of the Service and its contents.
Location data: Certain features of the mobile application require enabling and processing location data;
Information collected by cookies.
The data is principally collected from the persons themselves, and disclosing personal data to Nautics is voluntary. If a person does not wish to provide the required personal data it may be possible that Nautics cannot provide the Service. Other regular sources of information may be personal data collected by cookies when the User uses the Service.
4. Purposes and legal basis for processing personal data
The purposes for processing personal data are as follows:
(a) Provision of Nautics’ products and services, performance of contractual obligations and use of Nautics’ contractual rights;
(b) Management of customer relationship and administration and management of possible claims and defect situations;
(c) Creation of statistics on the use of Nautics’ products and services and the development of Nautics’ products, services and business. After this personal data is made anonymous, it does not constitute personal data;
(d) Direct marketing of Nautics’ products and services related to them and delivering newsletters and announcements;
(e) Taking care of data security;
(f) Preventing fraud.
Nautics processes personal data for these purposes in accordance with the requirements of the law on the basis of its legitimate interest, agreement concluded or consent of the person, or to comply with a legal obligation.
When the processing is based on the person’s consent, the person has the right to withdraw their consent to the processing. However, the withdrawal of the consent does not affect the lawfulness of the processing carried out prior to its withdrawal.
When Nautics processes personal data based on its legitimate interest, the legitimate interest may be, for example, a customer or subscriber relationship or other processing that the person may assume. Nautics has evaluated that the person’s interests requiring the protection of personal data or fundamental rights and freedoms of the person will not supersede such legitimate interests.
5. Regular transfers of data and disclosures
Nautics may transfer personal data to the following parties and the following purposes:
(a) to ICT or other subcontractors that process personal data under an agreement with Nautics and for the purpose of providing services to Nautics.
(b) to authorities based on law.
In addition, Nautics may disclose information through the Service to the User’s chosen payment service provider. These entities process personal data as controllers for the implementation of the payment service in accordance with legislation applicable to them:
Stripe, Inc.: https://stripe.com/en-fi/privacy
Google Ireland Limited: https://play.google.com/about/play-terms/index.html
Apple, Inc.: https://www.apple.com/legal/privacy/en-ww/
Without the person’s explicit consent, Nautics will not publish or share to other parties any such information about the boats or use of the Sailmate service that may possibly be linked to the person in question.
Nautics may publish or disclose to other parties summaries or aggregate reports on the use of the Service in such an anonymized manner that it is not possible to connect the data to the persons.
Personal data may be transferred and disclosed to countries outside the European Economic Area (EEA) and European Union (EU). When data is processed outside EU and EEA areas, applicable legislation (such as the EU General Data Protection Regulation) and the requirements set therein will be adhered to.
6. Period for which personal data will be stored
Personal data will be retained as long as appropriate.
7. Rights of the data subject
The data subject may have rights regarding his or her personal data as defined in the EU
General Data Protection Regulation, such as:
(a) The right to obtain from the controller a confirmation as to whether or not his or her personal data is being processed and access to his or her personal data;
(b) Right of rectification of personal data;
(c) Right to request erasure of personal data;
(d) Right to request restriction of processing;
(e) Right to object to processing;
(f) Right to data portability;
(g) Right to lodge a complaint with a supervisory authority.
Requests for the exercise of the rights must be addressed to email address email@example.com. After receiving the request, Nautics processes it without undue delay. One can unsubscribe from the newsletter by using the link in the newsletter.
8. Methods of protecting personal data
Nautics takes its obligations on processing personal data seriously and aims to ensure that the
personal data is kept safe.
9. Validity and changes