We typically collect your personal data when you purchase our products or services, register for them, participate in promotions or marketing campaigns, or otherwise interact with us. Below are examples of the types of data we may collect about you:

Technical Data: Most of the time, you can visit our websites and use our products and services without identifying yourself. However, certain technical data is collected as a standard part of using our services. Such data includes, for example, your IP address, times of visits, referring websites, pages you visit, links you click, ads you view, and other content you engage with. It also includes device-related information and other technical data provided by your browser or collected as part of the usage of certain products and services. When you interact with us through communication networks, the network operator may provide us with certain information as part of the communication, such as your connection number. Please also see the section below titled “Use of Cookies and Web Beacons.”

Data You Provide to Us: When you register as a user of our services, make a purchase, participate in a promotion, or otherwise interact with us, we may ask for specific data, such as your name, email address, mailing address, username, and password, as well as other credentials needed to identify users and verify their actions. This data allows us to provide you with the requested products and services and to communicate with you. We may also collect educational and demographic data, such as age, gender, postal code, and language preferences.

We may also collect other information you provide to us, such as your consents, interests, and feedback, as well as data about your devices or any other information you choose to provide. Note that when you provide us with personal data, certain non-identifiable data may become identifiable. Some of our services may allow you to submit information about other individuals, for example, when ordering a product you wish us to deliver directly to a third party.

EMFIT CARE App (Android, iOS): The app does not collect (from caregivers) any personal data. It uses credentials created in the Emfit web application, but these credentials do not contain caregivers’ personal data. When using the app, Emfit does not store any data about you or your actions in the app.

Special Categories of Personal Data: We collect biometric and health data generated by bed sensors, which may include heart rate, heart rate variability, respiration, sleep classification, time spent in bed, or other similar data depending on the product or service you purchase. Users are asked to provide consent for the collection of such data for the relevant product or service. In some cases, this consent may be granted by adjusting the app or service settings. Withholding consent may affect the availability of the relevant service.

Transactions with Us: We collect or request data related to the purchase of our products and services or other interactions with us. Such data may include details of inquiries or requests you make, details of offered products and services (including delivery information), purchase data (including completed payments, credit card information, billing address, credit checks, and other relevant financial data), details of agreements between you and Emfit, records of communications with our customer service or similar points of contact, and other transaction-related details. In accordance with applicable laws, we may record conversations you have with our customer service or other similar contact points.

Location Data: Some of our services may require the use of your location data. However, the use of your location data for these services always requires your prior consent.

Data from Third Parties: In addition to the personal data you provide, we may receive certain personal data from third parties in accordance with applicable laws, such as from companies renting mailing lists or other publicly available sources. This may include personal data, such as credit updates and address changes.

Emfit processes your personal data for the purposes described in this Privacy Policy and/or in any additional service-specific privacy terms. Please note that one or more purposes may apply simultaneously.

Providing Products and Services:
We may process and use your personal data to provide you with the requested product or service, fulfill your other requests, such as customer service, process your orders, and generally fulfill and execute the agreement between you and Emfit. Additionally, we may process and use your personal data to ensure the functionality and security of our products and services, identify users, and detect and prevent fraud and other misuse.

Developing Products and Services:
We may process and use your personal data to develop our products and/or services. However, in the development of our products and services, we generally use aggregated and statistical data rather than data that could identify you. In addition, we may process and use your data to personalize our offerings and provide you with a customized service. For instance, we aim to provide recommendations and present personalized content and advertising. We may combine personal data collected during your use of a specific Emfit product and/or service with other information we have about you, unless that information was collected for a different purpose.

Communication with You and Marketing:
We may process and use your personal data to communicate with you, for example, by providing information about the products and/or services you use and contacting you for customer satisfaction surveys. Additionally, we may process and use your data for marketing purposes. This may include the use of your personal data for targeted marketing or research purposes in accordance with applicable laws. In this context, we may use your data to conduct market research and inform you about our products, services, and offers through our own or third-party electronic or other services.

Some of our products and services may also be used to promote the products and services of other companies. However, Emfit does not disclose your personal data for such companies’ marketing activities without your prior consent.

Profiling or Personalization:
We may process and use your personal data for profiling or personalization, for instance, to conduct targeted direct marketing and develop our products and services. Additionally, we may create aggregated and statistical datasets based on your personal data. Profiling or personalization involves the automated processing of your personal data to assess, analyze, or predict individual interests or preferences. This allows us, for example, to send you marketing messages about the products and services that best suit you.

We may disclose your personal data to third parties only as described in this Policy or as required by binding legislation.

Opting Out of Email and Text Message Marketing:
You may opt out of marketing emails by following the instructions in those emails (usually in the form of an unsubscribe link) or by contacting the brand or group company in accordance with the instructions provided in the email or on the website. If you opt out of such messages, we may still send you non-marketing emails, such as service notifications, or, if you are a business customer, we may send you business-related information. You may also opt out of all text message-based direct marketing by contacting the respective group company or brand according to the information provided on its website or in the text message.

Service Providers and Other Authorized Third Parties:
We may disclose your personal data to authorized third parties who process personal data on behalf of Emfit for the purposes described in this Policy (e.g., providers of technical, logistical, e-commerce, marketing, and other services). These parties may use your personal data only for the purpose for which it was collected. Additionally, Emfit requires these parties to act in accordance with applicable laws and this Policy and to safeguard your personal data with appropriate security measures.

We may also disclose your personal data, including data generated by your bed sensor and other health-related information, to a service partner if you use services where an external company must access such information to provide the service, or if you have specifically consented to the processing of your data by an external company in connection with Emfit’s products and services.

Transfer of Personal Data Abroad:
Our products and services are offered using resources and servers located in Finland only, and we do not transfer your personal data outside of Finland.

Other Disclosures:
We may disclose and process your personal data within the limits set by applicable laws to protect Emfit’s legitimate interests, such as in civil or criminal legal proceedings.

Business Transactions and Restructuring:
Selling, purchasing, merging, or otherwise reorganizing our business operations may require the disclosure of personal data to potential or actual buyers and their advisors or the receipt of personal data from sellers and their advisors.

Emfit does not intend to collect data or engage in business transactions with individuals who are minors in their home country. However, it is not always possible to accurately verify a user’s age, which may result in our databases containing personal data of minors. We reserve the right to deny access to the service for any individual who is, or whom we suspect to be, a minor.

Emfit’s policy is to request that minors do not make purchases or engage in any other legal actions related to our products and services without the consent of a parent or other legal guardian, unless permitted by applicable law. If you are a minor, you must be able to prove that you have the consent of your legal guardian.

We will take reasonable measures to ensure that the personal data we process is accurate and up-to-date and to remove outdated or otherwise incorrect or unnecessary personal data from our databases.

Certain Emfit products and services may allow you to manage your profile and the information contained within it. We recommend that you regularly review your personal data through your profile to ensure its accuracy and currency. For electronic services where you can manage your profile, providing accurate personal data and keeping it updated is your responsibility.

We will retain your personal data only as long as it is necessary to fulfill the purposes in question or as required by applicable laws.

Emfit has implemented appropriate technical and administrative safeguards to prevent and minimize risks associated with the disclosure and processing of personal data.

Such safeguards include, where applicable, the use of firewalls, secure server facilities, and encryption, the implementation of proper access control systems and processes, careful selection of data processors, adequate training of Emfit employees involved in processing, and other necessary measures to protect personal data from unauthorized use or disclosure. We may also perform backups and use other similar methods to prevent accidental damage or destruction of your personal data. For parts of Emfit’s website that support online transactions, we use industry-standard safeguards, such as the “Secure Sockets Layer” (“SSL”) method, to ensure the confidentiality and security of online transactions.

When you visit an Emfit website, information may be stored on your computer in the form of a text file known as a cookie. Cookies allow us to recognize your computer. The purpose of using cookies is to benefit you, for instance, by not requiring you to enter your password multiple times during a session or by keeping items in your shopping cart if your transaction extends beyond a single visit. Cookies are also used to analyze website traffic and for profiling purposes.

Emfit may use so-called web beacons (or pixel tags) in connection with some of its websites. However, we do not use them to personally identify individual users. Web beacons are generally graphical images placed on a website and used to count visitors or access certain cookies. These data are used to improve our services. Web beacons typically collect only information that your browser provides as part of standard internet communications. If you disable cookies, the web beacon will no longer track your specific activity. However, it may still continue to collect information about visits made from your IP address, but such data will not be personally identifiable.

If you wish to disable cookies or receive a notification before they are stored on your device, you can adjust your browser settings. For more information about managing cookies, please visit https://www.networkadvertising.org/understanding-online-advertising/what-are-my-options.

However, we may not be able to provide certain services, and you may not be able to view specific parts of our website if you disable cookies.

Some of our business partners whose content links to our website or whose content is linked on our website may also use cookies or web beacons. However, we have no access to or control over these cookies.

You acknowledge and consent to the storage of cookies, other local storage methods, beacons, and other information on your devices. Additionally, you acknowledge and consent to us and the aforementioned third parties having access to these cookies, local storage methods, beacons, and data.

You have the right to request information about the personal data collected about you and the right to access this data. Additionally, you have the right to ask us to complete, correct, anonymize, or delete any incomplete, incorrect, unnecessary, or outdated personal data about you. However, we cannot delete personal data that is necessary for complying with binding legal obligations or that must be retained under applicable laws. You have the right to request and receive the personal data we have collected about you in a general and machine-readable format. If you believe the personal data we have collected is incorrect, or if you do not want your personal data to be deleted where its processing is considered unlawful, or if your personal data is no longer necessary, you may request a restriction on the processing of your personal data. This also applies in situations where you have objected to the processing of your personal data, and it has not yet been determined whether there are legitimate grounds for the processing.

You may also, at any time, object to the use of your personal data for direct marketing purposes, the sending of promotional materials, profiling, or conducting market research. When your personal data is processed based on your consent, you also have the right to withdraw your consent to such processing at any time.

If you wish to exercise the aforementioned rights, you may, within the limits set by applicable laws, contact us using the contact details provided in the marketing materials or further below in this Privacy Policy. However, this may mean that we can no longer provide you with the respective services, particularly if you have requested the deletion or cessation of the processing of your personal data. We recommend using the profile management tools available to you, as these tools often provide you with direct access to your personal data and allow you to manage it effectively.

Please note that Emfit may need to identify you and request additional information to fulfill your requests mentioned above. Additionally, please note that applicable laws may include restrictions and other provisions related to your rights described above.

If you believe that Emfit’s processing of your personal data does not comply with applicable data protection laws or that Emfit has not sufficiently ensured the exercise of your rights, you have the right to file a complaint with the supervisory authority responsible for data protection matters.

In accordance with applicable data protection laws, the responsible data controller is:

Emfit Oy
CEO Heikki Räisänen
Konttisentie 8
40800 Vaajakoski
Finland

Emfit may update and modify this Privacy Policy at any time. If the changes include new purposes for processing personal data, Emfit will notify you in advance and request your consent if necessary.