Website Visitor and End User Privacy Policy and Customer Privacy Policy

At Handmade Software Company Oy, the developer of aino.ar technology, we're committed to protecting and respecting your privacy. This Policy explains when and why we collect personal information about the people who visit and use our website(s) or otherwise reach out to us (“Website Visitors and End Users”), how we use it, the conditions under which we may disclose it to others, and how we keep it secure. The personal data related to End Users forms the Website Visitor and End User Registry and the applicable parts of this Privacy Policy shall be referred to as Website and End User Privacy Policy. For clarity, the websites that this Website Visitor and End User Privacy Policy applies to are https://hmsc.fi/, https://www.aino.ar/ including any subpages of either website.

Moreover, this Policy explains when and why we collect personal information about people that order services from, and about people that work for companies/entities that order services from us (“Customers”), how we use it, the under which we may disclose it to others, and how we keep it secure. The personal data related to Customers forms the Customer Registry and the applicable parts of this Privacy Policy shall be referred to as Customer Privacy Policy.

We may change this Policy from time to time, so please check this page occasionally to ensure that you’re happy with any changes. You should also note that by using our website(s), you agree to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email, by writing or by calling us using the following contact information:

Handmade Software Company Oy
c/o Helsinki Think Company Viikki
Latokartanonkaari 3
FI-00790 Helsinki
Tel: +358 40 6288 920
email: info@aino.ar

How do we collect information about Website Visitors, End Users and Customers?

Website Visitors and End Users: We obtain personal data about you as a Website Visitor, for example, if you choose to create an aino.ar account, or if you choose to contact us e.g. by completing a contact form on our website. We may obtain personal data about you as an End User, for example, if you choose to contact us by phone or email.

Like many other websites, our aino.ar website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to collect data on how you use the service, where you are visiting from and what device you are using. This information helps us to improve our websites and deliver a better more personalised service.

It is possible to switch off cookies by setting your browser preferences. However, turning cookies off may result in a loss of functionality when using our website.

The main cookies used on our site:

Google Analytics

These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site.

The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the website from, the pages they visited, and what device they are using.

Customers: Typically we obtain information that can be considered personal data about our Customers from the Customers themselves as part of negotiations or fulfilment of a contract with the Customers in question.

What type of information we collect from you?

Website Visitors and End Users: The personal information collected from you might include your name, company, and email.

Customers: The personal information collected from our Customers might include names, addresses, emails, phone numbers, Tax/VAT ID’s, invoicing details, and other information that is needed for the performance of contract.

How is your information used?

Website Visitors and End Users; We may use your information to:

Provide you with the services, namely the aino.ar service, available on our websites in an optimized way;

Contact you regarding queries raised in any form;

Send you communications which you have requested, and that may be of interest to you.

Process an order you have submitted;

Customers; We may use your information to:

Carry out our obligations arising from any contracts entered into, or that are under negotiations, between us;

Seek your views or comments on the services we provide;

Notify you of changes to our services;

Send you communications that may be of interest to you.

How long do we keep your personal data?

We review our retention periods for personal information on a regular basis. We are legally required to keep some types of information to fulfil our statutory obligations.

Website Visitors and End Users: We will hold the personal data of our Website Visitors and End Users on our systems for up to two years.

Customers: We will hold our Customer’s personal data on our systems for as long as is necessary for the contract between us. The personal data related to our Customers will be removed from our systems after 3 years after the termination of a contract or the end of negotiations between us.

Who has access to your information?

The personal data is technically protected and stored in a secure manner so that it cannot be accessed by third parties or employees whose job does not involve the processing of personal data. Access is restricted to limited users with user specific usernames and passwords.

We will not sell or rent your information to third parties.

We will not share your information with third parties for marketing purposes.

However, we will take steps with the aim of ensuring that we continue to protect your privacy rights.

Third country transfers

We do not transfer personal data to third countries on a regular basis.

We do, however, use third-party tools on our website, whose service providers may also be located outside the EU/EEA. In such cases, the appropriate level of data protection of personal data is always ensured when personal data is transferred outside the EU and European Economic by applying the safeguards required by applicable data protection laws (e.g. standard contractual clause stipulated by the European Commission).

The data subject's rights

Data subjects have the following rights based on the data protection laws.

Right of access to personal data: The data subject has the right to access their personal data recorded in the personal data registries, and to verify that their personal data is no longer stored in the data files.

Right to information rectification: The data subject has the right to submit a request to correct any and all errors regarding their personal data stored in the data registries.

Right to request deletion of personal data: The data subject has the right to request deletion of their personal data from data registries if there are no legal grounds for processing such personal data.

Right to limit processing of personal data: The data subject may request that the processing of their personal data shall be restricted on the criteria stipulated in the currently applicable data protection laws.

Right to object to the processing of personal data: The data subject has the right to prohibit the processing of their personal data for if the processing the personal data is based on legitimate interest.

Right to transfer personal data from one system to another: Provided that the data subject has submitted information which is processed based on the agreement and/or data subject’s consent, the data subject shall have the right to receive such information in machine readable form and the right to transfer such information to another controller other than Handmade Software Company Oy.

Right to withdraw consent: If the processing of personal data is based on the data subject’s consent, the data subject shall have the right to withdraw their consent at any time. The processing of the data subject’s personal data that has been processed prior to the withdrawal of the data subject’s consent does not become unlawful if the data subject later revokes their consent.

Right to appeal to the appellate authority: The data subject shall have the right to lodge a complaint with the competent supervisory authority if he or she considers that Handmade Software Company Oy has not complied with the appropriate data protection laws. The national appeal body is the Office of the Data Protection Ombudsman (in Finnish Tietosuojavaltuutetun toimisto) (www.tietosuoja.fi)

Links to other websites

Our website may contain links to other sites run by other organisations. This privacy policy applies only to our websites, so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

Also, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.

Review of this policy

We keep this Policy under regular review. This Policy was last updated in July 2024.