Privacy policy

Shared principles for processing personal data

Collection of data

The following data is collected in the register:

• IP address or another identifier
• Software and hardware information
• Data collected through cookies
• Other data collected with the customer's consent
• Data collected through our online service

We store the data that you have provided to the applicable controller through its contact form or by email.

Purpose of the register

• The register is used in accordance with the Personal Data Act
• To manage and develop the customer relationship
• To provide and develop services
• To provide information and communications about services and products
• To invoice for the provision of services

Based on the information supplied through the online service, we can grant access to the sections and content that you have requested. By collecting and processing personal data, we may also send you targeted marketing or customer communications. If you do not wish to receive communications from us, you may notify the applicable controller at any time.

4. Disclosure of data to third parties

• Oy Orapac Ab and BestPak Oy do not sell, exchange or otherwise transfer information that can identify you to outside parties.
• This does not exclude trusted third parties that assist us in maintaining our website or conducting our business, provided that these parties also keep the information confidential.
• We believe that sharing data may be necessary to investigate, prevent or otherwise address illegal activity, suspected fraud, situations that could threaten a person's physical safety, violations of our terms of use, and other situations required by law. Non-private information may, however, be disclosed to other parties for marketing, advertising or other purposes.

5. Protection of the register

• The register is protected against unauthorised access.
• Access to the register is protected by personal usernames and passwords.
• Users are bound by a duty of confidentiality.
• Access is limited to employees of the applicable controller and its online-service provider whose duties require them to process data in the register. The employees are bound by confidentiality.

6. Cookies and local storage

The website uses necessary cookies and local storage for functions such as language selection, security, form handling and remembering the visitor's consent choice. These technologies are required for the website to operate and are not used for marketing.

Optional visitor analytics are enabled only after the visitor has explicitly accepted analytics cookies in the cookie panel. No analytics tool is currently enabled. If an analytics tool is introduced, the cookie panel and this policy will be updated with information about its purpose, provider and retention period. Rejecting optional cookies does not prevent the website's essential functions from working.

Visitors can change or withdraw their choice at any time using the Cookie settings button. The choice is stored for no more than 180 days, after which the website asks again.

7. Social media plug-ins

The Orapac and Bestpak websites may contain links and connections to third-party websites and social media plug-ins, such as Facebook and Instagram. Using a social media plug-in may transmit identifiable information to the relevant social media service provider. When you open a plug-in, you may allow cookies from third-party websites to be stored on your computer, enabling their operators to monitor your use of the page if you are logged in to that provider's social media service. Services or applications supplied or mediated by third parties on the Orapac and Bestpak websites are governed by the third party's privacy, use and other terms. Oy Orapac Ab and BestPak Oy have no control over such third-party websites and are therefore not responsible for material published on them or for their use.

8. Visitor's rights

Under section 26 of the Personal Data Act, visitors have the right to inspect personal data concerning them and to require incorrect data in the register to be corrected. Requests for inspection and correction must be sent in writing, signed, to the person responsible for register matters identified in this privacy policy. Visitors also have the right to prohibit the applicable controller from processing their data for direct marketing, distance selling or opinion surveys by notifying the applicable controller's contact person for register matters.

9. Changes to the privacy policy

We will update changes to our privacy policy in our online service without delay.