Privacy Notice

Privacy Notice (Smartvatten as Data Controller) 

(Tietosuojaseloste | Smartvatten) 

Smartvatten acts as the data controller for personal data processed for marketing purposes, for new customer acquisition on our website, and for registers containing customer information. The processing of your personal data in these registers follows the information described below. 

If you need more information, you can contact Smartvatten’s Data Protection Officer at privacy@smartvatten.com. 

1. Name of the Register 

Customer Register 

2. Data Controller 

Name: Smartvatten Oy 
Address: Keilaranta 10, 02150 Espoo 
Other contact details: 
Smartvatten Customer Service, +358 20 741 4020 

3. Contact Information for Matters Related to the Register 

Address: Keilaranta 10, 02150 Espoo 
Email: privacy@smartvatten.com 

4. Purpose of Processing Personal Data 

Personal data is collected and processed so that Smartvatten can serve customers who purchase devices and/or services from Smartvatten. The data may also be used to provide Smartvatten’s digital services, customer support, service-related communications, and new customer acquisition. 

5. Legal Basis for Processing 

The legal basis for processing is the performance of a contract when the customer enters into an agreement with Smartvatten. 

Before a contract is established, the legal basis for processing customer information is the data subject’s consent. Consent for processing personal data is requested when filling in contact forms. 

6. Data Categories Included in the Register 

For users of the services, the following personal data may be processed: 

• first and last name 

• email address 

• phone number 

• role 

• information related to the company, its properties, property managers, and maintenance companies 

• information regarding acceptance of user terms 

• contract and acceptance of contractual terms 

• emails, chat conversation and other correspondence that has been submitted as a part of the customer support process.  

• other information provided by the customer that is relevant to the customer relationship 

7. Regular Sources of Data 

The collected personal data consists of information provided directly by the customer. 
Information about the use of digital services is collected by our partner companies for analytics.

8. Regular Disclosures of Data and Transfers Outside the EU/EEA 

We may transfer or disclose personal data to our partners if necessary for the purposes set out in this Privacy Notice. 

We may also use thirdparty service providers, for example payment services, debt collection services, or analytics services, to perform certain processing activities on our behalf. 

Personal data may also be transferred or disclosed to our group companies or a successor in business in connection with corporate restructuring, business sale, merger, demerger, bankruptcy, or liquidation. 

Otherwise, we do not sell or disclose your data to external parties. We do not transfer personal data outside the EU/EEA except in cases allowed by data protection legislation. 

Where required by applicable law, personal data may also be transferred or disclosed to authorities. 

9. Principles of Register Security 

All data is stored electronically. Access to Smartvatten’s databases is restricted to personnel responsible for maintaining them and is controlled through user rights. User interfaces show only the information required for each user role. Views and access rights in user interfaces are role specific or user specific. 

We use appropriate technical and organisational security measures to protect personal data from unauthorised access, accidental or unlawful destruction, alteration, disclosure, transfer, or any other unlawful processing. 

Smartvatten is committed to secure information management. Smartvatten holds an ISO 27001 certification. More information about information security at Smartvatten can be found here.

10. Retention Period of Personal Data 

We retain your personal data in accordance with applicable laws and only for as long as necessary to fulfil the purposes defined in this Privacy Notice. When the legal basis for processing ends, we delete the personal data. 
Data is also deleted upon request. 

When the legal basis is contractual, data may be deleted after the contract ends. Retention periods for data used for billing follow the requirements of the Accounting Act. 

11. Changes to This Privacy Notice 

Smartvatten may update this Privacy Notice from time to time without prior notice. However, if significant changes are made, we will notify all registered users via the email addresses they have provided in the service. 

What are your rights? 

You can exercise your rights as a data subject by contacting us at privacy(at)smartvatten.com. You can also contact us to receive additional information about your rights.  

Right to withdraw consent 

When the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time by notifying us at privacy(at)smartvatten.com. Withdrawing your consent may limit your ability to use our website and services. 
For cookies, consent can be withdrawn at www.allaboutcookies.org. 

Right of access 

Smartvatten provides you with the right to access the personal data we process about you. You may contact us to request information about the personal data concerning you and the legal basis for the processing. 

Right to rectification 

You also have the right to request the correction or completion of inaccurate, incomplete, outdated, or unnecessary personal data by contacting us. 

Right to erasure (“right to be forgotten”) 

You may request that we delete your personal data from our systems. We will carry out the necessary actions unless we have a legitimate reason to retain the data, for example, to fulfill contractual obligations. Please note that the data may not be immediately removed from all backup or similar systems. You will receive additional information about the progress of your request after submitting it. 

Right to object 

You may request restrictions on the processing of your personal data. You may also object to the further processing of your personal data, even if the processing was previously based on your consent. Objecting to processing may limit your ability to use our website and services. 
Please note that certain data—such as those required for customer identification or essential for service provision—must be processed in order to conclude or perform a contract. 

Right to restrict processing 

You may request that we restrict the processing of certain personal data. A request to restrict processing may limit your ability to use our website and services. 

Right to data portability 

You have the right to receive your personal data from us in a structured, commonly used, and machine-readable format so that you can transmit the data to another controller. You can exercise this right by sending an email to privacy(at)smartvatten.com. 
Users of our services should primarily submit the request from the email address registered in Smartvatten’s digital services; the response will be sent to that same email address. 

Right to lodge a complaint with a supervisory authority 

In addition to the rights listed above and any other rights guaranteed by law, you also have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State where you have your habitual residence, place of work, or where the alleged breach of the GDPR has occurred. 
In Finland, the relevant supervisory authority is the Office of the Data Protection Ombudsman.