Merilampi Attorneys Ltd. collects and processes personal data that is necessary in order to open and perform a client assignment. Merilampi Attorneys Ltd complies with and acts in accordance with the applicable data protection legislation, including amongst other the General Data Protection Regulation (EU 2016/679 “GDPR”) every time it processes personal data. The purpose of this privacy policy is to describe how and for what purpose the personal data is processed by Merilampi Attorneys Ltd and what rights the data subjects have with respect their personal data.
Data Controller and Contact Details
Merilampi Attorneys Ltd. (”Merilampi”)
Keskuskatu 7
00100 Helsinki
Finland
+358 9 686 481
info@merilampi.com
Your rights
According to the GDPR, data subjects have the following rights regarding their personal data:
- Right of access to their personal data;
- Right to request the controller to rectify incomplete or incorrect personal data;
- Right to object to or restrict the processing of personal data and to object to automated decision-making, when the processing is based on the legitimate interest of the data controller or consent.
- Right to request the controller to erase personal data, when the processing is based on the legitimate interest of the data controller or consent; and
- Right to transfer personal data to another controller when the personal data is based on consent or agreement and the processing is automated.
In addition, according to article 77 of the GDPR, the data subject is entitled to lodge a complaint with the supervisory authority concerning the processing activities carried out by Merilampi. Such complaint may be lodged in particular, in the member state of his or her habitual residence or place of work or the alleged infringement took place.
If the data subject wishes to exercise his or her rights, he or she should contact Merilampi via email to info@merilampi.com. Merilampi will use all reasonably available resources to respond to any such request without undue delay.
Clients, their representatives and other persons involved in our engagements
Purpose
We process your personal data in order to carry out any engagement you or the organization you represent have entrusted to us or any engagement otherwise involving you.
Personal data
Depending on the nature of the engagement, the personal information processed varies and may include:
- Contact details, such as name, title, employer, postal address, telephone number, email address and citizenship
- Identifying information, such as passport details, identity card, photograph and date of birth/personal identity number
- Information about whether you are authorised to represent a legal entity or whether you are a beneficial owner
- If you are a client and a natural person or a representative or owner of a client that is a legal person, as well as if you are a family member or close associate to such a person; information that you are a politically exposed person, including your name and profession/position
- Billing information, e.g. contact person, account number and tax information
- Information and personal data in addition to that mentioned above, e.g. correspondence, course of events, or other circumstances or data that is relevant to the engagement, as well as audio and video recordings in connection with court and arbitral proceedings or other engagements
- If relevant for the preparation or execution of the engagement: special categories of personal data (e.g. racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health or sexual life) or individual data relating to breaches of the law (e.g. data relating to money laundering or other crimes or trade restrictions).
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to carry out the engagement from you or the organization you represent. We have also concluded that these interests outweigh any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
Personal data is retained for at least ten years from the date of completion of the engagement, or for such longer period as is required by the nature of the client relationship or the engagement.
Purpose
We process your personal data in order to carry out any engagement you or the organization you represent have entrusted to us or any engagements otherwise involving you including necessary checks of our clients and to fulfil our obligations under the rules of the Finnish Bar Association and applicable legislation (e.g. anti-money laundering, sanctions, tax, or accounting legislation).
Personal data
- Contact details, such as name, title, employer, postal address, telephone number, email address and citizenship
- Identifying information, such as passport details, identity card, photograph and date of birth/personal identity number
- Information about whether you are authorised to represent a legal entity or whether you are a beneficial owner
- If you are a client and a natural person or a representative or owner of a client that is a legal person, as well as if you are a family member or close associate to such a person; information that you are a politically exposed person, including your name and profession/position
- Billing information, e.g. contact person, account number and tax information
- Information and personal data in addition to that stated above, e.g. correspondence, course of events, or other circumstances or data that is relevant to the engagement
- If relevant for the preparation or execution of the engagement: special categories of personal data (e.g. racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health or sexual life) or individual data relating to breaches of the law (e.g. data relating to money laundering or other crimes or trade restrictions).
Legal basis
The legal basis for the processing of personal data is the existence of a legal obligation under the applicable Bar rules, anti-money laundering, sanctions, tax or accounting legislation.
Retention period
- Personal data processed to fulfil obligations under the rules of the Finnish Bar Association is retained for at least ten years from the date of completion of the engagement, or for such longer period as is required by the nature of the client relationship or the engagement.
- Personal data processed to fulfil obligations under the Anti-Money Laundering Act is generally retained for five years, but may be retained for up to ten years if it is necessary for the prevention, detection or investigation of money laundering or terrorist financing.
- Personal data processed to fulfil obligations under applicable market abuse legislation is retained for five years.
- Personal data processed to fulfil obligations under the Accounting Act is retained for six years from the end of the financial year during which the data was processed.
- In addition, personal data processed to comply with other legal requirements or for a legitimate interest may be retained for as long as is necessary to comply with the relevant legislation.
Purpose
We process your personal data in order to prepare and manage enquiries about engagements and fulfilling our obligations. This may include communicating with you as part of preparing and managing enquiries about our engagements and commitments.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Identifying information, e.g. passport details, identity card and date of birth/personal identity number
- Information about whether you are authorised to represent a legal entity or whether you are a beneficial owner
- If it is relevant for the preparation or execution of the engagement: special categories of personal data (e.g. racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health or sex life) or isolated personal data relating to criminal convictions and offences (e.g. data regarding money laundering or other criminal offences, or trading prohibitions)
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to administer and manage our engagements and fulfill our commitments. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
Personal data processed to fulfil obligations under the rules of the Finnish Bar Association is retained for at least ten years from the date of completion of the engagement, or for such longer period as is required by the nature of the client relationship or the engagement.
Purpose
We process your personal data in order to work on business and method development, including software development and testing, and for statistical purposes, such as reporting to ranking bodies and producing reference material.
Personal data
- Limited personal data contained in matter-related documentation, such as contact details, including name, title, employer, postal address, telephone number and email address, where relevant
- Personal data relevant for statistical purposes will normally only be processed at an aggregated level
- Other information and personal data in addition to the above that can be directly or indirectly attributed to you, such as correspondence, events or other circumstances or data relevant to the engagement.
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to enable us to work on business and method development and to keep statistics. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
The personal data is retained for up to ten years from the date of completion of the engagement, or such longer period as is necessitated by the nature of the client relationship or the engagement.
Processing of personal data when managing suppliers
Purpose
We process your personal data in order to carry out necessary checks on our suppliers and other external parties and to fulfil our obligations under applicable legislation (e.g. anti-money laundering, sanctions, tax, or accounting legislation) and the rules of the Finnish Bar Association (e.g. requirements related to duty of confidentiality).
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Identifying information, e.g. passport details, identity card and date of birth/personal identity number
- Billing information, e.g. responsible contact person, account number and tax information
Legal basis
The legal basis for the processing of personal data is the existence of a legal obligation under the applicable Bar rules and regulations, as well as anti-money laundering, sanctions, tax or accounting legislation.
Retention period
- Personal data processed to fulfil obligations under the Anti-Money Laundering Act is generally retained for five years but may be retained for up to ten years if it is necessary for the prevention, detection or investigation of money laundering or terrorist financing.
- Personal data processed to fulfil obligations under the Accounting Act is retained for six years from the end of the financial year during which the data was processed.
- Personal data processed to comply with other legal requirements or for a legitimate interest may be retained for as long as is necessary to comply with the relevant legislation.
Purpose
We process your personal data in order to administer contracts, invoicing and payment, to fulfill our obligations towards our suppliers or their representatives and other external parties, to exercise our rights, to manage deliveries and follow-up, and to communicate within the scope of the contractual relationship.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Identifying information, e.g. passport details, identity card and date of birth/personal identity number
- Billing information, e.g. responsible contact person, account number and tax information
- Correspondence, payment information, descriptions of chain of events, or other relevant circumstances or data
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to administer contracts, invoicing, and payment, to fulfill our obligations and to protect our rights, as well as to manage deliveries, follow-up, and communicate within the scope of the contractual relationship. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
- Personal data is retained for as long as necessary to enable us to administer the contractual or business relationship, exercise our rights, and fulfill our obligations, or for as long as necessary to fulfill a legitimate interest.
- This means that personal data that occur in connection with agreements, possible background checks, or confidentiality undertakings is retained for as long as the agreement is valid and for ten years after the end of the contractual or business relationship, with ongoing deletion assessments carried out regularly based on necessity.
- Personal data processed to fulfil obligations under the Accounting Act is retained for six years from the end of the financial year during which the data was processed.
Purpose
If applicable, we process your personal data in order to establish, exercise and defend legal claims.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Billing information, e.g. responsible contact person, account number and tax information
- Correspondence, payment information, descriptions of chain of events, or other relevant circumstances or data
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to establish, exercise and defend legal claims. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
Personal data is retained for ten years after the end of the contractual or business relationship, with ongoing deletion assessments carried out regularly based on necessity.
Processing of personal data related to marketing, events, seminars/webinars
Recipients of newsletters or other marketing communications
Purpose
We process your personal data in order to communicate about and market our business and to manage and send newsletters or other marketing communications (e.g. annual reports).
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Language preference
- Preferences regarding the type of marketing communication
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to communicate about and market our business, as well as to administer and send marketing communications, and to provide information about our business and initiatives which are relevant to the recipients or to draw attention to specific news or information about the firm in connection with a current event or engagement. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
- Your personal data is processed until you choose to unsubscribe or if we have not sent any newsletters to you during 3 years.
- You can unsubscribe from receiving newsletters or other marketing communications at any time by using the link provided in the communication or by contacting us at info@merilampi.com
- We cease all processing of your personal data for the purposes of newsletters and other marketing communications immediately after receiving your deregistration.
Purpose
We process your personal data in order to maintain our record of business contacts.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Language preference
- Information on expertise
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to maintain a business relationship with individuals in their professional capacity and to provide information about our business and initiatives that are relevant to the recipients. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
- Your personal data is processed until you choose to unregister.
- You can unregister at any time by using the link provided in communication or by contacting us at info@merilampi.com.
- We cease all processing of your personal data for the purposes of newsletters and other marketing communications immediately after receiving your deregistration.
Participants at events, meetings, seminars/webinars
Purpose
We process your personal data in order to invite to, organise and administer events, meetings and seminars/webinars.
We also process personal data in order to establish lists of participants to fulfil applicable accounting obligations.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Language preference
- Information about food preferences provided in connection with the registration
Legal basis
The legal basis for the processing of personal data is our legitimate interest.
We have concluded that the processing of your personal data is necessary to invite to, organize and administer events, meetings and seminars/webinars and to inform about our activities or to draw attention to particular news or information about the firm in connection with a current event or occasion. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
In cases where we are required to compile lists of attendees under the Accounting Act, the legal basis for the processing of personal data is the existence of a legal obligation.
Retention period
- Your personal data is processed until you choose to unsubscribe or if we have not sent any invites to you or you haven’t participated in our events during 3 years.
- You can unregister at any time by using the link provided in the communication or by contacting us at info@merilampi.com.
- We cease all processing of your personal data based on legitimate interest immediately after receiving your deregistration.
- Information about food preferences is erased without delay after an event, meeting or seminar has taken place.
- Information about participation is retained for accounting purposes for six years from the end of the financial year during which the data was processed.
Purpose
If applicable, we process your personal data in order to document, provide information about, and market our business on our website, in printed and digital media, and on social media through photographs and audio and video recordings of events and seminars/webinars.
Personal data
Photographs, audio and video recordings of events and seminars/webinars.
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to provide information about and market our business through photographs, sound recordings and image recordings. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object.
In some cases, the legal basis for the processing of personal data is consent. In such cases, you will be informed separately when we ask for your consent. Consent is voluntary and you always have the right to withdraw any consent previously given. We will then be required to cease the processing.
Retention period
- Personal data is retained for up to one year after an event or seminar/webinar has taken place. Any publications are deleted annually.
- If the processing is based on your consent, the personal data will only be retained as long as your consent is valid. You can withdraw your consent at any time by contacting us at info@merilampi.com.
Participants at student events
Purpose
We process your personal data in order to invite to, organise and administer events, meetings and seminars/webinars.
We also process personal data in order to establish lists of participants to fulfil applicable accounting obligations.
Personal data
- Contact details, e.g. name, telephone number and email address
- Term and university/academic institution
- Information about food preferences provided in connection with the registration
- Data which is made available via a link to your LinkedIn profile, if you personally choose to include it
Legal basis
The legal basis for the processing of personal data is our legitimate interest.
We have concluded that the processing of your personal data is necessary to invite to, organize and administer student events and to inform about our activities or to draw attention to particular news or information about the firm in connection with a current event or occasion. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
In cases where we are required to compile lists of attendees under the Accounting Act, the legal basis for the processing of personal data is the existence of a legal obligation.
Retention period
- For the purposes of administering future events, your personal data will be processed up to 2 years.
- Information about food preferences is erased without delay after an event has taken place.
- Information about participation is retained for accounting purposes for six years in accordance with the Accounting Act.
Processing of personal data related to our alumni club
Purpose
If you have given us your consent, we process your personal data in order to administer your membership in the firm’s alumni club and to maintain contact with you.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Language preference
- Information on membership of the firm’s alumni club
- Details of previous employment with us, e.g. role, year of employment, business group, and office affiliation
- Information on new employment/studies
Legal basis
The legal basis for the processing of personal data is consent. Consent is voluntary and you always have the right to withdraw any consent previously given.
Retention period
- Personal data is retained as long as the consent is valid
- You can unregister at any time by using the link provided in communication or by contacting us at info@merilampi.com.
- We cease all processing of your personal data after receiving your deregistration.
Processing of personal data related to recruitment
Job appliants
Purpose
We process your personal data in order to manage the recruitment process and to assess candidates on the basis of their experience, qualifications and academic achievements, to administer invitations and schedule interviews, and to carry out recruitment tests and checks.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Identifying information, e.g. passport details, identity card, and date of birth/personal identity number
- Information about you that you provide in your CV, cover letter, or other application documents or that is provided by references, if any
- Documentation from interviews
- Information regarding education, evidence of professional experience, certificates and grades, work experience including diplomas and certificates of employment
- Photographs and information about education and professional experience from your LinkedIn profile in connection with applications made using a login from a LinkedIn account
- Results of tests and checks carried out during the recruitment process
Legal basis
The legal basis for the processing of personal data is our legitimate interest.
We have concluded that the processing of your personal data is necessary to administer the recruitment process and to assess applicants based on experience, qualifications and academic achievements, and to administer invitations and schedule interviews, and to carry out recruitment tests and checks. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Further processing of your personal data may take place on the basis of your consent.
Retention period
- When applying for any of our positions, you may consent to us retaining your personal data to maintain contact with you regarding future career opportunities and points of contact.
- Your personal data will be retained for a maximum of six months. You can withdraw your consent at any time by contacting us at info@merilampi.com.
Purpose
If applicable, we may process your personal data in order to comply with legal requirements, to fulfil our obligations and to exercise our rights under labour law and to comply with the rules of the Finnish Bar Association regarding conflict of interest checks and recruitment processes.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number, and email address
- Identifying information, e.g. passport details, identity card, and date of birth/personal identity number
- Information about you that you provide in your CV, cover letter, or other application documents or that is provided by references, if any
- Information regarding education, evidence of professional experience, certificates and grades, work experience including diplomas and certificates of employment
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to meet legal requirements and comply with the rules of the Finnish Bar Association. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
- Personal data will be retained during the recruitment process and then for six months after the recruitment process has been completed.
- In addition, personal data processed to comply with legal requirements may be retained for as long as is necessary to comply with the relevant legislation.
Purpose
If applicable, we process your personal data in order to safeguard our rights in the event of a claim under the Non-discrimination Act, the Act on Equality between Women and Men or The Criminal Code of Finland.
Personal data
Relevant personal data collected within the scope of the recruitment process (see above for specification)
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to safeguard our rights in the event of a claim under the Non-discrimination Act, the Act on Equality between Women and Men or The Criminal Code of Finland. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
Personal data will be retained during the recruitment process and then for up to six months after the recruitment process has been completed.
In the event of a claim under the Non-discrimination Act, the Act on Equality between Women and Men or The Criminal Code of Finland, personal data may be retained for a longer period of time in connection with a potential inquiry.
Purpose
If you have given us your consent, we process your personal data in order to maintain contact with you about future career opportunities and points of contact.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number, and email address
- Information about you that you provide in your CV, cover letter, or other application documents or that is provided by references, if any
- Documentation from job interview
- Information regarding education, evidence of professional experience, certificates and grades, work experience including diplomas and certificates of employment
Legal basis
The legal basis for the processing of personal data is consent. Consent is voluntary and you always have the right to withdraw any consent previously given. We will then be required to cease the processing.
Retention period
- When applying for any of our positions, you may consent to us retaining your personal data to maintain contact with you regarding future career opportunities and points of contact.
- If you have given your consent, your personal data will be retained for a maximum of one year. You can withdraw your consent at any time by contacting us at info@merilampi.com.
Other persons involved in the recruitment process
Purpose
We process your personal data in order to obtain information or references from you when a person is involved in a recruitment process with us.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number, and email address
- Relationship with and information about the applicant relevant to the reference
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to obtain references and other relevant information in connection with our recruitment process. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
Personal data will be retained during the recruitment process and then for up to six months after the recruitment process has been completed.
Processing of personal data related to visits
Purpose
We process your personal data in order to administer the booking of visits and administer visits to our offices, to manage a possible emergency situation, to maintain the security and confidentiality on our premises and for our employees and our property, and to meet the requirements imposed on us as a law firm.
Personal data
- Contact details, e.g. name, title, employer, telephone number, and email address
- Date/time for your visit and details about your visit
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to administer visits to our offices and to maintain the security of our offices by managing emergencies and preventing and investigating crime and unauthorised access for the purpose of increasing the safety of the firm’s staff and visitors, as well as to protect the firm’s property and to meet the requirements imposed on us as a law firm. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
Retention period
Personal data is stored for up to one year in our visitors management system.
Processing of personal dat related to communication and correspondence
Purpose
We process your personal data in order to be able to communicate with you when you contact us through different communication channels and administer such communication.
Personal data
- Contact details, e.g. name, title, employer, postal address, telephone number and email address
- Information that can be attributed to you or to your participation or involvement in telephone or video calls and emails, depending on the nature of the correspondence
Legal basis
The legal basis for the processing of personal data is our legitimate interests.
We have concluded that the processing of your personal data is necessary to enable and administer communication with you. We have also concluded that these interests override any competing interests and fundamental rights and freedoms. You always have the right to object to this conclusion.
In connection with certain engagements or to meet other purposes, there may be other applicable legal bases, depending on national laws and regulations that may be relevant for such purpose.
Retention period
- Communications with us in the context of a client relationship or in connection with our engagements are stored for at least ten years from the date of completion of an engagement as stated in the section above.
- Processing of other personal data is subject to regular confirmation of legal basis of processing at least at five-year intervals.
Source of personal data
Personal data is usually collected directly from the data subjects or from the client’s or business partner’s representative. Personal data is also received from other parties than the data subject him/herself as part of assignment work or business relationship management. Moreover, data subjects may give their contact information in events or direct sales contacts and information can be received from other business partners.
Disclosure of personal data
As a general principle, Merilampi does not disclose personal data to third parties, unless required by applicable legislation, authorities or the performance of the client assignment. However, personal data may be disclosed to third parties in the event that Merilampi wishes to appoint external processors or sub-processors. In that case, Merilampi will enter into a data protection agreement with the service provider in order to secure a safe and appropriate processing of personal data.
In case Merilampi enters into a joint venture with or is sold to or merged with another business entity, personal data may be disclosed to the new business partner or owner.
Personal data will not be transferred outside the EU/EEA region.
Cookies
Cookies on our Website
Cookies are small text files that are stored in your computer’s memory and hard drive when you visit certain web pages. They are used to enable websites to function or to provide information to the owners of a website. Web beacons (also called “pixel tags”) are electronic images placed on a website that typically help us access certain cookies on the website, enable us to count visitors on our websites and improve our services. Web beacons also collect information about visits from your IP-address.
This Cookie policy informs you how Merilampi uses cookies, web beacons and other similar technologies (jointly referred to as “Cookies”) in its websites (“Websites”) and how you can manage and control the use of cookies on your computer or device.
Cookies that are used on our Websites help Merilampi to provide customized services and information. Merilampi uses cookies on all our Websites to gather information how and when pages in our Websites are visited, what our users’ technology preferences are and whether our Websites are functioning properly.
In general terms, we use cookies on our Websites for the following purposes:
Analytical purposes: Analytical cookies allow us to recognize, measure and track visitors to our Websites. This helps us to develop the way our Websites function, by determining whether site visitors can find information easily, or by identifying the aspects of websites that are of the most interest to them, for example.
Usage preferences: Some cookies on our Websites are activated when visitors to our sites make a choice about their usage of the Website. Our Websites then use the settings preferences of the user in relation to future visits. This allows us to tailor the experience on our Websites to the individual user.
Policy Administration: We use cookies to record when a site visitor has seen a policy, such as this one, or provided consent, such as consent to the terms and conditions on our Websites. This avoids repeated questions to a user regarding the same terms.
Session management: The software that runs our websites uses cookies for technical purposes needed by the internal workings of our servers. For instance, we use cookies to distribute requests among multiple servers, authenticate users and determine what features of the site they can access, verify the origin of requests, keep track of information about a user’ s session and determine which options or pages to display in order for the site to function.
Functional purposes: Functional purpose cookies store information that is needed by our applications to process and operate. For example, where transactions or requests within an application involve multiple workflow stages, cookies are used to store the information from each stage temporarily, in order to facilitate completion of the overall transaction or request.
To make full use of our Websites, your device will need to accept cookies. Our Websites will not function properly without them. In addition, cookies are required in order to provide you with personalised features on our Websites.
On certain of our Websites, we include content designed for display using Adobe Flash Player, such as animations, videos and tools. Local flash storage (often referred to as “Flash cookies”) can be used to help improve your experience as a user. Flash storage is retained on your device in much the same way as standard cookies, but is managed directly by your Flash software.
If you wish to disable or delete information stored locally in Flash, please see the documentation for your Flash software, located at www.adobe.com. Please note that, if you disable Flash cookies, some site functionality may not work.
Third party cookies
When you visit our Websites, you may receive cookies that are set by third parties. These may include cookies set by Google. These cookies are used for the purposes described in the “Cookies on our Website” section of this policy. We do not control the setting of these third-party cookies, so we recommend you to check the third-party websites for more information about their use of cookies and how to manage them.
Amending cookie preferences
We will only use cookies to the degree that you have authorized their use in our cookie banner when entering our website, with the exception of necessary cookies. By selecting the "Cookie Settings" icon on our Websites, you may easily adjust your cookie preferences or revoke your consent.
You can control, disable and remove any previously saved cookies from your browser’s settings. The instructions for controlling cookies from your computer or mobile device depend on the operating system and web browser you use. Please note, however, that withdrawing your consent to the use of cookies on our Websites will mean that some components of our website might not work properly.
The site www.allaboutcookies.org includes instructions for managing cookies on many commonly used browses, or you may consult the vendor documentation for your specific software.
Further information about cookies
If you would like to find out more about cookies in general and how to manage them, please visit www.allaboutcookies.org.
Data security
With respect to electronic data:
Most data are stored electronically on servers provided by third parties. Merilampi has appropriate data security measures in place in order to protect all electronic personal data. Merilampi will ensure that the registers will not be subject to access by unauthorized persons or unlawful processing or other damage.
With respect to personal data on paper:
Merilampi ensures that all papers containing personal data are protected in an appropriate manner and Merilampi has sufficient measures in place to monitor any unauthorized access.
In case Merilampi is subject to damage, destruction or other similar event that Merilampi could not possibly have prevented, Merilampi will notify the data subject immediately in accordance with the obligations of the applicable laws. Merilampi is not, however, liable for such unpredictable events.