We at Spark Sustainability value not only our planet, but also Your privacy. The purpose of this Privacy Notice is to describe exactly how we use your data, and how you can change that if you wish to. Spark collects personal data regarding the Carbon Donut application (“application”). More specifically, we collect data regarding registrations, service usage, and advertising as well as possible contact requests. We also use analytics in our app in order to get more specific information of its usage and hence to improve our service — this app was built for you, we want to make it as lovable as possible! This Privacy Notice complements our general Privacy Notice, regarding data collection via our website, which you may find here: https://sparksustainability.com/privacy/.
In this Privacy Notice, we explain what data we collect on you and how we use this data. The purpose of this Privacy Notice is also to provide the information required by applicable data protection laws. This Privacy Notice was last updated on March 15, 2022.
Spark Sustainability Ab (“Spark”, “we”, “us”, “our”)
Address: C/O Eriksson, Kadetintie 3 C 35, 00330 Helsinki
E-mail: info@sparksustainability.com
Anna Eriksson, CEO
E-mail: anna@sparksustainability.com
If you have any questions concerning the processing of your personal data, please shoot Anna an e-mail!
We only process personal data if such data is necessary in order to carry out the following purposes:
Personal data are mainly collected either directly from you or during the course of your service use. We collect and process data that:
Some development data (for example crash data) and any feedback you might give us are collected from your operating system and application store providers. Generally, they ask if you would like to allow them to send us this data, but the policy depends on your service provider.
We collect and process the following data:
Only registration information and device information are necessary if you would like to use our application. You are not obliged to provide us with any other personal data. However, if you decide not to provide data while using the application, you cannot properly use the respective features, such as completing tasks or calculating your lifestyle carbon emissions. Also, if you do not provide us with your contact information when contacting us, we cannot reply to you.
We store and process data at Amazon Web Services (AWS). To find out more about how they protect the data, click here.
We also use Google Analytics, which is an analytics tool provided by Google. Read more about how Google protects the collected information here. Google states that they anonymize IP addresses as soon as technically feasible at the earliest possible stage of the collection network. Hence, Spark only receives anonymized data from Analytics. We use this data for general application usage analysis purposes.
We use SendGrid, a tool provided by Twilio, to manage e-mails we send out. We store and process the e-mails of Carbon Donut users in SendGrid in case we need to contact them. You can find Twilio’s privacy policy here.
We also use the Facebook SDK, which is an advertisement tool provided by Facebook. You can find out more about how they protect your information here.
We use Google Analytics for Firebase, which is an advertisement tool provided by Google. You can find out more about how they protect your information here.
We also use Firebase Dynamic links, which is another advertisement tool provided by Google. You can find out more about how they protect your information here.
As a main rule, we do not disclose personal data to other third parties. Despite this, we may be required to disclose data on you to third parties, such as authorities, in individual situations like when the disclosure is mandatory under applicable laws.
Data collected via Facebook SDKs is stored on Facebook’s servers, which are located all over the world. Data collected via Firebase SDKs is stored on Google’s servers, which are also located all over the world. All other data is stored and otherwise processed within the European Union or European Economic Area.
We only keep personal data for as long as is necessary for the purposes for which the personal data are processed.
As a general rule, data based on a contract are stored while the contract is in force (meaning while you have a registered account in the application). If you would like to delete your account and all your personal data, you can initiate the process via the Privacy & security settings in the app. Your account and all associated personal data will be deleted within 30 days.
Also, as a general rule, contact persons’ personal data are stored for the time needed to manage the contact or the duration of the client relationship. However, you may always request for data erasure or rectification before these general times.
The data collected with the Firebase for Google Analytics SDK that is related to cookies, user identifiers or advertising identifiers is deleted after 2 months.
We do not process any data manually and we do not have a manual register.
Spark takes appropriate technical and organisational measures to protect personal data against unauthorised access and accidental or unlawful destruction, alteration, disclosure, transfer or all other unlawful forms of processing.
We process all personal data confidentially. The right of access to personal data is limited so that access rights are provided only to persons who require access in order to be able to perform their duties. All the passwords are appropriately encrypted so even these persons with access rights cannot see them.
If you have any questions concerning the processing of your personal data or you would like to make a request concerning your rights, do not hesitate to contact the person mentioned in section 2 of this Privacy Policy. As a data subject, you have the following rights:
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, when that is the case, access to the personal data. You also have the right to obtain the rectification of inaccurate personal data concerning you without undue delay.
In general, you also have the right to obtain the erasure of personal data concerning you. However, we may not be able to erase your data in individual cases such as when the data is necessary for a purpose defined in this Privacy Notice or storing it is required by law.
Even when the data processing is based on legitimate interest, you have the right to object to processing. You can also ask us to restrict processing of your personal data.
When the data processing is based on consent or a contract, you have the right to receive the personal data that you have provided us in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller.
If you think that we don’t process your personal data appropriately, you can contact the person mentioned in section 2. If you think that our processing of personal data relating to you infringes applying data protection regulations, you can also complain to a data protection authority. In Finland, this authority is The Office of the Data Protection Ombudsman and you can find the contact details here: https://tietosuoja.fi/en.
We may update this Privacy Notice due to the development of our application. In such cases, an updated Privacy Notice is available in the application (direct link: https://sparksustainability.com/the-donut-privacy-policy/).
