Last updated: 01.11.2022
This privacy policy informs you about the processing of personal data via our website and our app. Personal data ("data") is any information relating to an identified or identifiable person.
We only process the data as necessary and for the purpose of providing a functional and user-friendly website, as well as for the provision of our content and services.
This data protection declaration can be accessed and printed out at any time on the website. We reserve the right to amend this data protection declaration in compliance with the statutory provisions.
“Processing" of data means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The Controller of your personal data is Cooler Future Oy, Lapinlahdenkatu 16, 00100 Helsinki (reachable at: hello@coolerfuture.com)
Controller is any natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
The data is processed by us or by third parties in the context of using the website or app.
We use various third-party providers in the areas of hosting, mailing services, software, customer/data management (CRM) and, where applicable, billing services, each of which processes data on our behalf. We have concluded corresponding order processing agreements with these third-party providers, which ensure that an adequate level of data protection is also guaranteed for our order processors). For more information on the third-party providers used, please feel free to contact us at any time (e.g. by email to hello@coolerfuture.com).
We process contact information, usage data or other information that you provide to us. Details are set out below or as otherwise described in this privacy policy or to you:
Data: Contact data (e.g. name, address, telephone number), other contract data (e.g. orders)
Purpose: Communication or storage/processing of data in order to establish, implement and/or handle a contractual relationship; this may also include our online services
Data: Contact, contract and usage data
Purpose: Analysis of data on the basis of our legitimate interests in the form of quality assurance and marketing
We only process your data if this is necessary for the stated purposes. Failure to provide the data may have legal disadvantages, such as the loss of legal positions, for example, no response to your enquiry or the impracticability of a contract.
As a matter of principle, we will only disclose your data to third parties if we have obtained your consent or if there is another legal basis for doing so. We or the third-party providers we use generally process personal data within the EU/EEA. As soon as your data is processed outside the EU/EEA, compliance with European data protection standards is ensured in each case and we will inform you of this. If your data is transferred to third countries, such as the USA, we ensure that the legal requirements for such a transfer are met and that your data is processed in the third country in accordance with the European data protection standard. For this purpose, we generally use the so-called EU standard contractual clauses that we conclude with the respective provider. In addition, in accordance with the requirements of the ECJ following the "Schrems II" decision, a case-by-case risk analysis is carried out with regard to the respective third country. For further information, you can also contact us by email at hello@coolerfuture.com.
We collect data about every visit to our website (so-called server log files). The data mentioned below is processed as follows:
Data: Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, operating system/version, referrer URL (the previously visited page), IP address and the requesting provider, country code, language, device name, if applicable.
Purpose I: Statistical evaluations for the purpose of optimizing our website, ensuring the stability and operational security of the website
Purpose II: Fulfilment of legal obligations, for reasons of data security
Our website may contain external links or hyperlinks to websites of other providers. They are to be distinguished from our own content. This third-party content does not originate from us, nor do we have any influence on the content of third-party pages. If you are redirected to other pages via links on the website, please inform yourself there about the respective handling of your data.
If you write to us, send us an email or contact us via the contact form, the information from the respective enquiry, including the contact data provided, will be stored by us for the purpose of processing the enquiry as follows:
Data: Contact details (e.g. name, address, mobile phone number) or other data provided in the enquiry, mobile phone number, bank details.
Purpose I: Communicating or storing/processing data in order to establish, perform and/or settle a contractual relationship; this may include responding to your enquiry or making a refund
Purpose II: Processing of data based on your consent to respond to the request
With our newsletter we inform you about us and our offers. Only your email address is required to register for the newsletter. If you register for the newsletter, your email address will be transmitted to us (or our mail provider) and stored there.
We use the provider Mailchimp, Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send the newsletter. Mailchimp is a service with which the sending of newsletters can be organized and analyzed. For this purpose, we forward your email address and the information whether you have signed up for the newsletter and/or for further product information to Mailchimp.
With the help of Mailchimp, we can analyze our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (known as a web beacon) connects to the Mailchimp servers in the USA. This allows us to determine whether a newsletter message was opened and which links were clicked. In addition, technical information is recorded (e.g. time of registration, IP address, browser type and operating system). This information is used for the statistical evaluation of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
OPT-OUT: You can withdraw your consent to the processing of Data for the purpose of sending the newsletter or evaluation of related data at any time. The withdrawal can take place over a link, which is contained in each newsletter, or by separate message to us. You will not incur any costs other than the transmission costs according to the basic tariffs.
If a contractual relationship has been established with us , we may send you emails with interesting information about similar goods or services. You can request at any time that you no longer receive such information emails from us. To do so, please contact us by message (hello@coolerfuture.com) or click on the link at the end of the information emails. You will not incur any costs other than the transmission costs according to the basic rates.
Data: Contact data (email address), technical data, usage data
Purpose: Communication to carry out a contractual relationship or on the basis of our legitimate marketing interests, including notification of similar goods or services.
We use so-called cookies. Cookies are small text files that are stored on the end device used and saved by the browser. Cookies serve to make our offer more user-friendly, effective and secure. There are different types of cookies that are used for different purposes. Some cookies ensure that our offers function properly or that you are recognised on your end device after successful registration ("necessary" cookies). By placing these necessary cookies, we make it easier for you to visit our offers and use the services available there. We place other cookies to analyse user preferences and thus improve our offers ("advanced cookies", see below).
We only place cookies with your consent. When you visit our services for the first time, you will see a pop-up explaining cookies. Once you click on the relevant consent button, you agree to our use of the particular cookies selected, each of which is described in the pop-up as well as in this Privacy Policy.
OPT-OUT: You can adjust your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. You can manage many online ad cookies from companies via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/. Please note that if you disable cookies, the functionality of this website may be limited.
Insofar as personal data is processed when "necessary" cookies are used, this is due to legitimate interests of quality assurance and a technically flawless presentation of the website. The processing of personal data when using so-called "extended cookies" is based on your consent.
Insofar as we use non cookie-based tools from third-party providers, our legitimate interest is to design our service in the best possible way using third-party technical solutions.
Name, Provider: Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland und Google LLC, Mountain View, CA, USA)
Data: Cookies; usage data
Purpose: Tracking and analysis
Further information: OPT-OUT: http://tools.google.com/dlpage/gaoptout?hl=en & Google privacy policy: https://www.google.com/policies/privacy/
Data processing outside the EU/EEA and safeguards: When using Google Analytics, your IP address is anonymised by truncation. Google LLC processes data in the USA and guarantees compliance with European data protection regulations by using the EU standard contractual clauses (SCCs)
Name, Provider: Webflow (Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA)
Data: Contact data (email address, name if applicable); cookies; usage data
Purpose: Contact Form, Tracking and analysis
Further information: Webflow privacy policy: https://webflow.com/legal/eu-privacy-policy
Data processing outside the EU/EEA and safeguards: Webflow processes data in the USA and guarantees compliance with European data protection regulations by using the EU standard contractual clauses (SCCs)
Name, Provider: Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA)
Data: Usage data
Purpose: Tag management system for tracking and analysis
Further information: Google privacy policy: https://www.google.com/policies/privacy/
Data processing outside the EU/EEA and safeguards: Google LLC processes data in the USA and guarantees compliance with European data protection regulations through the use of the EU standard contractual clauses (SCCs)
Name, Provider: Google Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA)
Data: Usage data
Purpose: Push notifications, provision of information, message dispatch, error analysis
Further information: https://firebase.google.com & Google privacy policy: https://www.google.com/policies/privacy/
Data processing outside the EU/EEA and safeguards: Google LLC processes data in the USA and guarantees compliance with European data protection regulations through the use of the EU standard contractual clauses (SCCs)
Name, Provider: Google DoubleClick, Google Ads conversion tracking, Google Ads Remarketing, Google Ads Similar audiences"
Data: Usage data
Purpose: Advertising
Further information: Google privacy policy: https://www.google.com/policies/privacy/
Data processing outside the EU/EEA and safeguards: Google LLC processes data in the USA and guarantees compliance with European data protection regulations through the use of the EU standard contractual clauses (SCCs)
Name, Provider: Facebook Pixel (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Data: Cookies; usage data
Purpose: Advertising
Further information: Privacy policy of the provider: https://www.facebook.com/policy.php
Data processing outside the EU/EEA and safeguards: The provider processes data in the USA and guarantees compliance with European data protection regulations through the use of the EU standard contractual clauses (SCCs)
Name, Provider: YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, mother company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Data: Usage data, device information
Further information: Privacy policy: https://policies.google.com/privacy; (Opt-Out): https://adssettings.google.com/authenticated
Data processing outside the EU/EEA and safeguards: Google LLC processes data in the USA and guarantees compliance with European data protection regulations through the use of the EU standard contractual clauses (SCCs)
Name, Provider: OptinMonster (Repty LLC, 47283 Robin CT Novi MI 48374)
Data: Email address, usage data
Purpose: Website overlay and data collection service
Further information: https://optinmonster.com/gdpr/
Data processing outside the EU/EEA and safeguards: OptinMonster processes data in the USA and guarantees compliance with European data protection regulations through the use of EU standard contractual clauses (SCCs)
Name, Provider: Intercom (Intercom Inc., Intercom R&D Unlimited Company, 55 2nd Street, 4th Floor, San Francisco, CA 94105 Intercom Software UK Limited, Floor 2, 80 Great Eastern St., London)
Data: Email address, usage data, universally unique identifier (uuid), communication data
Purpose: User data management and communication
Further information: https://www.intercom.com/legal/privacy
Data processing outside the EU/EEA and safeguards: Intercom processes data in the US and UK and guarantees compliance with European data protection regulations through the use of EU Standard Contractual Clauses (SCCs)
Name, Provider: Typeform (TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona)
Data: Email address, usage data
Purpose: Database and Survey-Tool
Further information: https://admin.typeform.com/to/dwk6gt
Name, Provider: Cookiebot.com (Cybot A/S, Havnegade 39, 1058 Kopenhagen, Dänemark)
Data: Cookies; usage data
Purpose: GDPR-compliant cookie notice
Further information: https://www.cookiebot.com/de/privacy-policy/
We use the services of AWS (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg; further information: https://aws.amazon.com/de/privacy/) and Google Cloud (Google LLC, Mountain View, CA, USA) to host your data. The providers may process your data outside the EU/EEA, compliance with European data protection regulations is ensured through the use of EU Standard Contractual Clauses (SCCs).
We are present on various social media platforms and process user data within this framework in order to communicate with users active there or to offer information about us. User data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them). For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.
In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
Data: inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses)
Purpose: Contact requests and communication, tracking (e.g. interest/behavioural profiling, use of cookies), remarketing, reach measurement (e.g. access statistics, recognition of returning visitors), affiliate tracking.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; https://www.instagram.com; privacy policy: https://instagram.com/about/legal/privacy).
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; privacy policy: https://twitter.com/de/privacy, (settings) https://twitter.com/personalization).
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, https://www.facebook.com; privacy policy: https://www.facebook.com/about/privacy; opt-out: settings for advertisements: https://www.facebook.com/settings?tab=ads; additional privacy notices: agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, privacy notices for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data).
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; privacy policy: https://policies.google.com/privacy; opt-out: https://adssettings.google.
com/authenticated).
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy).
In the event that you apply for a job with us, we will process certain data about you. This data includes your name, email, address and telephone number, gender, work history, qualifications, country of residence, language skills and any other personal information you provide in your interactions with us. We may also ask for additional information to assist us in our recruitment process and if you are offered a job, an example would be date of birth and employment documents.
We process your personal data to fulfil our contractual or pre-contractual obligations (based on Art. 6 para. 1 lit. b GDPR) or, where applicable, for the purpose of the employment relationship with you (Section 26 BDSG), in particular we use your data:
For the online recruiting process, we use the services of third-party providers. In our job/career area, we use the "Recruitee" service of Recruitee B.V., Amsterdam, Netherlands, which processes the data via the job/career area on our website on our behalf (for more information, please also visit: https://recruitee.com/privacy.
We only store your personal data for as long as it is necessary for the respective processing purpose and limit the storage period to the minimum necessary. Beyond this, we only store your data if we are entitled or obliged to do so in accordance with statutory retention periods.
You have the following rights:
- the right to information,
- the right to correction or deletion
- the right to restrict processing,
- the right to data portability,
- the right to revoke your consent with effect for the future.
- the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of law
To exercise your aforementioned rights, you can send an email to hello@coolerfuture.com.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.