Please read the following carefully to understand our practices and views regarding your data and how we treat it. When you visit our website or make an inquiry digitally or via phone, regarding our services and products or the making of specific purchase information is stored. We understand the importance of keeping such information secure and in providing you with information about what we do with said information.
Personal data, inclusive of information such as name, address, e-mail address, or telephone number of a data subject shall always be processed in line with the General Data Protection Regulation (GDPR), and by the country-specific data protection regulations applicable to Finol Oils Unlimited Company Trading as Finol Oils.
Our enterprise aims to inform the general public of the scope, and purpose of the personal data we collect, use and process using this declaration. Furthermore, the data subject is informed, utilising this data protection declaration, of the rights to which they are entitled.
For the Data Protection Regulation, the Data Controller is Finol Oils Unlimited Company Trading as Finol Oils, 3 Stannaway Drive, Crumlin, Dublin 12, D12 X2PN, Registered in Ireland no. 58578.
1) Name and address of the data controller
For the GDPR or other data protection laws which apply to member states of the European Union, and further provisions related to data protection, the controller is Finol Oils Unlimited Company Trading as Finol Oils.
Contact information for the data controller
– 3 Stannaway Drive, Crumlin, Dublin 12, D12 X2PN
– +353 1-455 5484
Any data subject can, at any given time, contact the data controller directly with any/all questions and suggestions concerning data protection.
2) Use of personal data and automated decision making
You can visit our website without giving away any personal information. Finol Oils Unlimited Company Trading as Finol Oils uses Google Analytics and Cookies to improve our services, digital offerings, user experience and to analyse how the website gets used. Aside from the approximate location (IP address), the information gathered by Google Analytics is mostly anonymous traffic data that includes browser type information, device information and language information.
The information collected provides an overview of how people are accessing and using www.finol.ie. It is not used for purposes such as automated profiling or automated decision making.
As a responsible company, we do not use automatic decision-making or profiling.
3) IP addresses and cookies
- Strictly necessary cookies: These are cookies required for the operation of our website. They include, for example, cookies that enable users to log into secure areas of our site, use a digital shopping cart or to make use of e-billing services.
- Analytical/performance cookies: These are cookies that allow us to recognise and count the number of visitors as well as see how visitors navigate through the website when using it. These help to optimise the way our website works, for example, by ensuring that users find what they are searching for quickly and easily.
- Functionality cookies: These cookies are used to recognise you when you return to our website. This recognition, in turn, enables us to personalise our content for your experience and to remember your preferences.
- Targeting cookies: These cookies record your visit to our website, the pages you have visited and also, if any, the links that you have followed. We use this information to make our website continuously more relevant to your interests. We may also, at times, share this information with third parties for this purpose
- To estimate our audience size and usage pattern.
- Provide users of the website with more user-friendly services that would not be possible without the cookie setting.
- To store information about your preferences, and so allow us to customise our site according to your interests.
- To speed up your searches.
- To recognise you when you return to our site.
Furthermore, you can delete any previously set cookies at any time via an internet browser or other software programmes. This cleansing option is optional in all popular internet browsers. If the data subject does choose to deactivate the setting of cookies in the internet browser used, not all functions of our website may be entirely usable.
4) Information which we may collect from you
If you are visiting our websites or accessing our applications, we collect the following information provided by your browser or mobile device:
- Pages accessed.
- Time of visit.
- Time of last visit.
- Name of the owner of the IP address.
- Reverse domain of the IP address.
- Referring site, application, or service, including the relevant search queries that led you to www.finol.ie.
- Browser information.
- Operating system and device information.
- IP address (from users signing in to the service, for security purposes).
We may also manage and process the following data about you:
- Information that you provide through the act of filling forms on our site. This collection includes information provided at the time of registering to use our site, subscribing to our service or requesting further services or posting material. We may also ask for information when you enter a competition or promotion sponsored by Finol Oils Unlimited Company Trading as Finol Oils or when you report a problem with our site.
- We may keep a record of correspondence if you contact us.
- We might ask you to complete surveys which we use for research purposes. However, you do not have to respond to them.
- Details of any transactions you carry out through our website and of the fulfilment of your orders.
- Details collected during your visits to our site. These details include, but is not limited to, location data, traffic data, weblogs or other communication data, whether this is required for our billing purposes or otherwise and the resources which you access.
We make use of information that we hold about you in the following ways:
- To provide you with information, products or services that you request from us or which we feel may be of interest you, where you have consented to contact for such purposes.
- To ensure that content on our website is presented most effectively for both you and your computer.
- To carry out any obligations arising from contracts entered into between you and us.
- To allow you to participate in interactive features of our service when you choose to do so.
- To provide you with marketing information about our products or services.
- To understand and analyse the usage trends and preferences of our visitors and users, to improve the service, and to develop new products, services and functionality.
- To, on occasion, notify you regarding changes to our services.
We may use a visitor’s or user’s email address or other information – other than client data – to contact that visitor or user for the following:
- Administrative purposes such as customer service, to address intellectual property infringement, the right to privacy violations or defamation issues such as those related to the client data or personal data posted on the service.
- With updates relating to promotions and events, products and services offered by us and third parties with which we work with. You have the option to opt-out of receiving any promotional communications as described below under “Rights of the data subject” below.
5) Rights of the data subject
The right of confirmation (right to be informed)
Each data subject has the power granted by the European legislator to obtain from the controller the evidence regarding whether or not personal data concerning him or her is being processed. If a data subject wishes to avail themselves of this right, he or she can contact our Data Protection Officer or another employee of the controller at any given time.
Our site may contain links to and from websites belonging to our partner networks, advertisers and affiliates. If, on any occasion, you follow a link to these websites, note that these websites have individual privacy policies. We do not accept any responsibility, or liability, for these policies. Please check these policies before you submit any personal data to these websites.
The right of access to information
Every data subject has the right granted by the European legislator to obtain free information about his or her data stored at any time from the controller and to request, and receive, a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:
- The purposes of the processing of data.
- The categories of personal data concerned.
- The recipients, or types of recipients, to whom the personal data have been or are to be disclosed. This element relates in particular to recipients in third countries or international organisations.
- Where possible, the period believed necessary for the personal data to be stored, or, in cases where this is not possible, the criteria used to determine that period.
- The right to request from the controller the correction or erasure of any personal data, or the restriction of processing of any personal data about the data subject, or to object to such processing.
- The existence of the right to lodge a complaint with a supervisory authority.
- Where the personal data collected is not from the data subject, the relative source of any such available information.
- Access to data related to the existence of automated decision-making, including profiling and, at least in such cases, meaningful information about the logic involved. Also, information about the significance and possible consequences that such processing may have for the data subject.
The data subject also has the right to obtain information as to whether personal data gets transferred to any third country or an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to avail himself of this right of access, he or she can contact our Data Protection Officer or another employee of the controller at any time.
Right to rectification
Every data subject has the right granted by the European legislator to obtain from the controller without undue delay the correction of inaccurate personal data concerning him or her. The data subject, taking into account the purposes of the processing, shall have the right to have incomplete personal data completed, through the provision of a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she can contact our Data Protection Officer or another employee of the controller at any time.
Right to erasure (Right to be forgotten)
Each data subject shall have the power granted by the European legislator to obtain from the controller the deletion of personal data concerning him or her without undue delay. The controller shall have a duty to erase personal data in a timely manner as per the subject’s request and inform other controllers that are also processing the data of said request where any of the following grounds apply, as long as the processing is not required:
- The personal data ceases to be required for the purposes for which they were collected or otherwise processed.
- The data subject withdraws consent to which the processing is based and also where there is no other legal ground for the processing.
- The data subject objects to the processing under Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing or the subject data objects to the processing under Article 21(2) of the GDPR.
- In the event of the unlawful processing of personal data.
- The erasure of the personal data is necessary to comply with a legal obligation to which the controller is subject to within Union or Member State law.
- The personal data collected was regarding the offer of information society services referred to in Article 8(1) of the GDPR.
If any of the outlined reasons above apply, and a data subject wishes to request the erasure of personal data stored by Finol Oils Unlimited Company Trading as Finol Oils he or she can contact our Data Protection Officer or another employee of the controller at any time. The Data Protection Officer of Finol Oils Unlimited Company Trading as Finol Oils or another employee shall promptly ensure that the erasure request is complied with immediately.
In instances where the controller has made any personal data public, and an erasure request is submitted by the data subject, the controller must take all reasonable steps to inform other data controllers processing said personal data of the data subject’s request for erasure. This includes any technical measures which may need to be employed and inclusive of the erasing of any links to or a copy of replication of those personal data as far as processing is not required. The Data Protection Officer of Finol Oils Unlimited Company Trading as Finol Oils or another employee will arrange the necessary measures in individual cases.
Right to the restriction of processing
Each data subject shall have the power granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful, and the data subject opposes the erasure of the personal data and alternatively requests the restriction of their use.
- The controller no longer requires the personal data for the purposes of the processing but is necessary by the data subject for the establishment, exercise or defence of legal claims.
- The data subject has objected to the processing (under Article 21 -1 of the GDPR) pending the verification of whether the legitimate grounds of the controller override those of the data subject.
If any of the conditions outlined above are met, and the data subject wishes to request the restriction of the processing of personal data which is stored by Finol Oils Unlimited Company Trading as Finol Oils they can contact our Data Protection Officer or another employee of the controller at any time. The Data Protection Officer of Finol Oils Unlimited Company Trading as Finol Oils or another employee will then arrange the restriction of the data processing.
Right to data portability
Each data subject has the right granted by the European legislator, to receive the personal data concerning him or her, which initially was provided to a controller. Said data would be received in a structured, commonly used and machine-readable format.
They also have the right to transmit such data to another controller, and to do so without hindrance from the controller to which the personal data was provided as long as the processing is:
- Based on consent and the processing is carried out by automated means.
- As long as the processing is not necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability, the data subject shall have the right to have their data transmitted directly from one controller to another. This type of transmission applies where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert this right to data portability, the data subject may at any time contact the Data Protection Officer designated by Finol Oils Unlimited Company Trading as Finol Oils or another employee.
Right to object
Each data subject has the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to the processing of personal data concerning him or her. This right is based on point (e) or (f) of Article 6(1) of the GDPR. This right also applies to profiling based on these provisions.
Finol Oils Unlimited Company Trading as Finol Oils shall no longer process the subject’s personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If Finol Oils Unlimited Company Trading as Finol Oils processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for such marketing. This rule applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Finol Oils Unlimited Company Trading as Finol Oils to the processing for direct marketing purposes, Finol Oils Unlimited Company Trading as Finol Oils will no longer process the personal data for these purposes.
The data subject also has the right, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her by Finol Oils Unlimited Company Trading as Finol Oils for any scientific or historical research purposes. As well as for statistical purposes as outlined in Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may directly contact the Data Protection Officer of Finol Oils Unlimited Company Trading as Finol Oils or another employee. Also, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
Right not to be subject to automated decision-making, including profiling
Each data subject has the right granted by the European legislator not to be subject to a decision based solely on automated processing. This right is inclusive of profiling, which produces legal effects concerning the data subject, or similarly significantly affects said data subject as long as the decision:
- Is not necessary for entering into, or the performance of, any contract between the data subject and a data controller.
- Is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests.
- Is not based on the data subjects explicit consent.
If the decision is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or is based on the data subject’s explicit consent, Finol Oils Unlimited Company Trading as Finol Oils will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests. This is inclusive of the right to obtain human intervention on the part of the controller or if necessary to express their point of view and to contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, they can directly contact our Data Protection Officer of Finol Oils Unlimited Company Trading as Finol Oils or another employee of the controller at any time.
Right to withdraw data protection consent
Each data subject shall have the right granted by the European legislator to withdraw his or her consent to the processing of his or her personal data at any time.
If the data subject wishes to exercise the right to withdraw the consent, they may directly contact our Data Protection Officer of Finol Oils Unlimited Company Trading as Finol Oils or another employee of the controller at any time.
Is providing personal data mandatory?
Most of our services do not require any form of registration, allowing you to visit our site without you telling us who you are. However, some services may require you to provide personal data. In such situations, if you choose to withhold any personal data which is requested by us, it may not be possible for us to contact you in response to your query or provide information that you wish to request.
On the website of Finol Oils Unlimited Company Trading as Finol Oils users have the opportunity to subscribe to our enterprise’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter gets ordered from the controller.
A confirmation e-mail is sent to the e-mail address registered by a data subject in the double opt-in procedure. This confirmation e-mail is used to confirm the owner of the e-mail address as the data subject and is authorised to receive the newsletter.
During the registration process for the newsletter, we also store the IP address of the computer system as assigned by the internet service provider (ISP) and used by the data subject at the time of the registration, along with the date and time of the registration. The collection of this data is necessary to discern the (possible) mistreatment of the e-mail address of a data subject at a later stage. Therefore, it serves the aim of the legal protection of the controller.
For retraction of consent, a corresponding link (‘unsubscribe’) is included in each newsletter sent, follow this link to instigate the process of removing consent. Furthermore, it is possible to unsubscribe from the newsletter at any time directly on the website of the controller, or if preferable, you can communicate this requirement to the controller in a different way which is personally more suitable.
6) Transferring and storing your data
All information provided to us by a given data subject is then stored on our secure servers. All payment transactions are encrypted using SSL technology. Where we have given the data subject (or where they have chosen) a password that enables access to certain parts of our site, the data subject has the responsibility of keeping this password confidential. It is essential that you do not share the password with anyone for security reasons.
Unfortunately, the transmission of information via the internet is not entirely secure. We will do our best to protect your personal data. However, we cannot guarantee the security of your data transmitted to our site. Any transmission of data is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.
7) Legal basis for processing data
During a user’s registration, or later on the platform, they may provide information such as name, company name, email address, telephone, credit card number, and other relevant data. This information is used to identify the user and to provide them with support services, mailings, sales and marketing actions, billing and to meet any contractual obligations.
Such as in a situation where the processing of personal data is essential for a contract to be executed in which the data subject is a party, for example, when processing operations are required for the supply of goods or to provide any other service.
The same applies to processing operations essential for carrying out any pre-contractual measures. An example of such an instance is when a data subject is making queries and enquiries about our services and products. Or, in cases where our company is subject to a legal obligation in which the processing of personal data is required (an example would be the fulfilment of tax obligations).
Processing shall be lawful only if and to the extent that at least one of the following applies:
- The data subject has given consent to the processing of their data for one or more specific purposes.
- Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract.
- Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Processing is needed to protect the vital interests of the data subject or another natural person.
- Processing is required for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
- Processing is necessary for the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
8) The period for which the personal data is stored
The criteria used to determine the period of storage of personal information is the respective statutory retention period. After the expiration of that period, the corresponding data is deleted routinely, as long as it is no longer necessary for the fulfilment of the contract or the initiation of the said contract.
If you wish to request that we cease to use your registration information to provide you services contact us at [email protected]. We will retain and use your registration information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
9) Disclosure of your information to third parties
We may share information intercompany, and therefore disclose your personal information to any member of our group, which means subsidiaries, our ultimate holding company and its subsidiaries. Also, we may engage third-party companies service providers or business partners to process our data and to support our business. These include for example server and hosting providers, payment processors and customer service and management tools.
An up-to-date list of our sub-processors is available on request from Finol Oils.
To allow you to interact with other websites on which you may have accounts (such as Facebook and other social media sites) or join communities on such sites, we may provide links or embed third-party applications that allow you to log in, post content or join communities from our websites.
We may also provide you with general links to non- Finol Oils Unlimited Company Trading as Finol Oils websites.
Your use of these links and applications is subject to the third parties’ privacy policies, and you should become familiar with the third-party sites’ privacy policies before using the links or applications.
Finol Oils Unlimited Company Trading as Finol Oils is not responsible for the privacy practices or the content of those other websites.
Your data may be processed by third parties, including Habla Inc (Olark), Active Demand, Google Analytics, Google AdWords and specific components of social media applications (such as Facebook, LinkedIn, Twitter) integrated with our websites.
We may also disclose your personal information to third parties:
- If we buy any assets, in which case we may disclose your data to the prospective buyer or seller of such business or assets.
- If Finol Oils Unlimited Company Trading as Finol Oils or substantially all of its assets are acquired by a third party, in which case data held by it about its customers are one of the transferred assets.
In connection with a job application or inquiry, whether advertised on a Finol Oils Unlimited Company Trading as Finol Oils website or otherwise, you may provide us with information about yourself, such as a resume. We may use this information throughout Finol Oils Unlimited Company Trading as Finol Oils in order to address your inquiry or consider you for employment purposes. Unless you tell us not to do so, we may keep the information for future consideration.
11) Monitoring or recording of calls, chats and other interactions
Certain online transactions may involve you calling us or us calling you. They may also involve online chats. Please be aware that it is Finol Oils Unlimited Company Trading as Finol Oils general practice to monitor and, in some cases, record such interactions for staff training or quality assurance purposes or to retain evidence of a particular transaction or interaction.
12) Your Consent
You do not have to consent to our marketing material to buy our products or services; your consent is given freely and unambiguously by you.
- We do not use pre-ticked boxes or any other form of permission by default.
You can withdraw your consent at any time by clicking on the unsubscribe link on any of our marketing emails.
We keep a record of when your consent was given and withdrawn.
If you chose not to give consent for the use of your data, it would not be a detriment in either the use of our website or the services we provide. Consent is not a pre-condition of our service.