Xsite® MANAGE –Privacy Policy 15.05.2020

Novatron (“Novatron”, “we” and “us”) refers to Novatron Oy, a limited liability company registered in Pirkkala, Finland.

This notice regarding Novatron’s privacy practices (the “Privacy Policy“) describes how we treat the information we collect when you use Novatron’s products, software and services (the “Services“).

Novatron respects the privacy of individuals and thereby we want to give individuals using our services information concerning our data processing activities in a transparent manner. To achieve this goal, the information presented in this Novatron Privacy Policy is provided using as clear and plain language as possible. However, should you have any inquiries or questions regarding our data processing activities or the information presented in this Privacy Policy, please feel free to contact us at the “Contact Us” page on our website or by sending an email to info@novatron.fi.

This Privacy Policy has been prepared in order to meet the requirements set out in the EU General Data Protection Regulation (“GDPR”), which is directly applicable in all Member States in the European Union as of 25 May 2018. Novatron is committed to comply with the obligations related to processing of personal data under the applicable data protection legislation.

Legal basis for the processing of Personal Data

In order to provide certain features of the Services to you, Novatron may ask for your Personal Data. You are not required to provide the Personal Data Novatron has requested but if you choose not to do so, Novatron may not be able to provide you with certain features of the Services.

Legal basis for the processing of Personal Data is your freely given, specific, informed and unambiguous consent. Before submitting any Personal Data to Novatron, you are asked to give your consent to the processing of your Personal Data, as well as a link to visit this Privacy Policy for further information.

As a data subject you have the right to withdraw your consent at any time. If you wish to withdraw your consent, please send a message to address by letter to Novatron Oy, Jasperintie 312, 33960 Pirkkala, or via email to contact Novatron.

What Personal Data Novatron collects and for what purposes

Based on your consent, Novatron will collect and process:

a) personal data, which is information that can be used, directly or indirectly, alone or together with other information, to identify you (“Personal Data”);
b)technical and related information about you and your use of the Software, which may include your internet protocol address, hardware identifying information, operating system, application software, peripheral hardware, and Software usage statistics, to assist with the operation and function of the Software, the provision of updates, support, invoicing, marketing by or on behalf of Novatron and research and development (“Technical Data”);
c) location information, which is used on our products only while the application is running and in accordance with your privacy settings. You can control when location is shared with others by managing the settings on the product (“Location Data”);

hereinafter collectively referred to as “User Data”.

User Data that is shared with the Services is used by Novatron for the following purposes:

To operate business and provide the Services to users, individuals and entities;
To deliver the Services and allow you access and right of use to the Services;
To operate, audit, analyze, develop, improve, manage and protect the Services;
For statistical and research purposes in accordance with applicable law;
To personalize functionalities and settings on the Services;
To communicate with you and/or the entity who has instructed you to use the Services and respond to your and/or their requests.
To offer occasional information about upcoming events and product updates

Once Personal Data is collected, Novatron will not process it further in any way that is incompatible with the purposes set out above. Novatron does not obtain or process your Personal Data before you consent to such activities.

Each time you log on to the Services, certain data, including the login credentials, will be sent to servers hosted by or on behalf of Novatron. This data is used to access your account, the Services and other personalized features. Novatron matches the login credentials to Personal Data in order to provide you with the Services that you are entitled to use, and to provide relevant data and information.

Data retention

Novatron retains your Personal Data for a period not exceeding the period (i) required for the purposes for which it was collected and processed, or (ii) you use the Software. Thereafter Novatron then will either delete Personal Data or irreversibly anonymize the data so you can no longer be linked to such anonymized data.

Transfers of Personal Data

Data that is processed on the Services will be transmitted to Novatron’s servers when such upload or transfer is initiated by you or if you have otherwise consented to it. Such servers may be located outside the European Economic Area in third countries which do not have similar laws providing specific protection for personal data or that have different legal rules on data protection. Should Novatron transfer your Personal Data to such third countries, Personal Data will be protected as described in this Privacy Policy and always in accordance with the applicable law. Notwithstanding the foregoing, if the applicable data protection laws of the country in which the Software is being used (and in consequence your Personal Data is being processed) prevent or prohibit cross-border transfers of Personal Data, Novatron shall collect and process Personal Data in such country and shall not transfer it.

Recipients of Personal Data

Novatron will not make Personal Data available to any third parties for other purposes than to enable your use of the Services. Novatron may utilize third party processors to perform data processing on Novatron’s behalf. Novatron is liable towards you for acts and omissions of such third party as for its own. Should Novatron transfer any Personal Data collected or processed via the Services to any third party processor, Novatron will ensure at all times that the third party service provider will be bound by appropriate contractual guarantees with respect to such third party’s obligations in accordance with applicable data protection law, and ensuring all times that your Personal Data will remain protected in accordance with at least the same standards as under this Privacy Policy.

List of Novatron’s subcontractors processing personal data is delivered per request.

When processing Personal Data Novatron carries out appropriate technical and organizational measures necessary for securing Personal Data against unauthorized access, against accidental or unlawful destruction, manipulation, disclosure and transfer and against other unlawful processing.

Rights of data subjects

Under the applicable data protection legislation, you may have certain rights as a data subject. If applicable, you have the right to request from Novatron access to and rectification or erasure of Personal Data or restriction of processing concerning Personal Data or to object to processing. You may request to exercise your rights by sending Novatron a message. (Contact info)

Furthermore, you shall have the right to lodge a complaint with a data protection supervisory authority.

Changes to this Privacy Policy

Novatron may amend this Privacy Policy from time to time. Novatron will notify data subjects of any substantial changes to this Privacy Policy and processing activities, well before the effective date of the changes by sending an email or in another effective manner to give data subjects a reasonable notice period to assess the consequences of such changes. If you do not agree to such new version of this Privacy Policy, you may terminate use of Services by notifying Novatron via the Services or by contacting us. In this event, you will not be bound by the new version of this Privacy Policy.

Register administrator and the administrator’s roles in the Xsite® MANAGE

The use of Xsite Manage enables the customer and the end user to collect and save personal data into the different features of the system. In this respect, the customer and the end user must comply with the applicable legislation. The service provider (Xsite® MANAGE) may, as instructed by the customer, act as the processor of personal data of third parties submitted by the customer in accordance with existing legislation. As the controller, the customer and the end user are responsible for the correctness and lawfulness of the personal data. Furthermore, the customer and the end user are responsible for ensuring that they have the right to process data, deliver the data for processing and grant the service provider (Xsite® MANAGE) the right to process the data.

Questions and Concerns

Novatron is committed to protecting and respecting privacy of the users and to complying with applicable data protection and privacy laws. If you have any questions or concerns concerning data processing practices, or you to exercise his/her rights under the applicable data protection legislation, or you have a concern about the way in which we have handled any privacy matter please send a message to contact Novatron.

Novatron Oy
Business ID 0955651-5
Jasperintie 312
33960 Pirkkala
Finland