We at Spark Sustainability value not only our planet, but also Your privacy. The purpose of this Privacy Notice is to describe exactly how we use your data, and how you can change that if you wish to. Spark collects personal data regarding the Carbon Donut application (“application”). More specifically, we collect data regarding registrations, service usage, and advertising as well as possible contact requests. We also use analytics in our app in order to get more specific information of its usage and hence to improve our service — this app was built for you, we want to make it as lovable as possible! This Privacy Notice complements our general Privacy Notice, regarding data collection via our website, which you may find here: https://sparksustainability.com/privacy/.
In this Privacy Notice, we explain what data we collect on you and how we use this data. The purpose of this Privacy Notice is also to provide the information required by applicable data protection laws. This Privacy Notice was last updated on March 31, 2021.
Spark Sustainability Ab (“Spark”, “we”, “us”, “our”)
Address: Lapinlahdenkatu 16, 00180 Helsinki
E-mail: info@sparksustainability.com
Amanda Rejström, CEO
Address: Lapinlahdenkatu 16, 00180 Helsinki
E-mail: amanda@sparksustainability.com
If you have any questions concerning the processing of your personal data, please shoot Amanda an e-mail!
We only process personal data if such data is necessary in order to carry out the following purposes:
Personal data are mainly collected either directly from you or during the course of your service use. We collect and process data that:
Some development data (for example crash data) and any feedback you might give us are collected from your operating system and application store providers. Generally, they ask if you would like to allow them to send us this data, but the policy depends on your service provider.
We collect and process the following data:
Only registration information, Carbon Donut test input and device information are necessary if you would like to use our application. You are not obliged to provide us with any other personal data. However, if you decide not to provide data while using the application, you cannot properly use the respective features, such as completing tasks. Also, if you do not provide us with your contact information when contacting us, we cannot reply to you.
We store and process data at Heroku, which is a third party service provider and part of Salesforce. To find out more about how they protect the data, click here.
We also use Google Analytics, which is an analytics tool provided by Google. Read more about how Google protects the collected information here. Google states that they anonymize IP addresses as soon as technically feasible at the earliest possible stage of the collection network. Hence, Spark only receives anonymized data from Analytics. We use this data for general application usage analysis purposes.
We use Flodesk to manage e-mails we send out, so we store and process the e-mails of Carbon Donut users there in case we need to contact them. You can find Flodesk’s privacy policy here.
We also use Facebook SDK, which is an advertisement tool provided by Facebook. You can find out more about how they protect your information here.
As a main rule, we do not disclose personal data to other third parties. Despite this, we may be required to disclose data on you to third parties, such as authorities, in individual situations like when the disclosure is mandatory under applicable laws.
Data collected via Facebook SDKs is stored on Facebook’s servers, which are located all over the world. All other data is stored and otherwise processed within the European Union or European Economic Area.
We only keep personal data for as long as is necessary for the purposes for which the personal data are processed.
As a general rule, data based on a contract are stored while the contract is in force (meaning while you have a registered account in the application). If you would like to delete your account and all your personal data, please contact the person mentioned in section 2 of this Privacy Policy.
Also, as a general rule, contact persons’ personal data are stored for the time needed to manage the contact or the duration of the client relationship. However, you may always request for data erasure or rectification before these general times.
We do not process any data manually and we do not have a manual register.
Spark takes appropriate technical and organisational measures to protect personal data against unauthorised access and accidental or unlawful destruction, alteration, disclosure, transfer or all other unlawful forms of processing.
We process all personal data confidentially. The right of access to personal data is limited so that access rights are provided only to persons who require access in order to be able to perform their duties. All the passwords are appropriately encrypted so even these persons with access rights cannot see them.
If you have any questions concerning the processing of your personal data or you would like to make a request concerning your rights, do not hesitate to contact the person mentioned in section 2 of this Privacy Policy. As a data subject, you have the following rights:
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, when that is the case, access to the personal data. You also have the right to obtain the rectification of inaccurate personal data concerning you without undue delay.
In general, you also have the right to obtain the erasure of personal data concerning you. However, we may not be able to erase your data in individual cases such as when the data is necessary for a purpose defined in this Privacy Notice or storing it is required by law.
Even when the data processing is based on legitimate interest, you have the right to object to processing. You can also ask us to restrict processing of you personal data.
When the data processing is based on consent or a contract, you have the right to receive the personal data that you have provided us in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller.
If you think that we don’t process your personal data appropriately, you can contact the person mentioned in section 2. If you think that our processing of personal data relating to you infringes applying data protection regulations, you can also complain to a data protection authority. In Finland, this authority is The Office of the Data Protection Ombudsman and you can find the contact details here: https://tietosuoja.fi/en.
We may update this Privacy Notice due to the development of our application. In such cases, an updated Privacy Notice is available in the application (direct link: https://sparksustainability.com/the-donut-privacy-policy/).
