Updated 20.1.2025

PRIVACY NOTICE

Main points

Purpose for the processing of personal data

The purposes for the processing of personal data include:

1. Contract-related purposes

1.1. Management of customer relationships

1.2. Realization of the rights and obligations of the customer and the controller

2. Legitimate interest

2.1. Advertising to previous customers

2.2. Advertising and/or direct marketing of the controller and/or its partners based on personal data collected in trade shows and other similar events without disclosing any personal data to an external party.

3. User consent

3.1. Processing of personal data with regard to online services (such as tracking website users).

3.2. Advertising and/or direct marketing of the controller and/or its partners on the basis of personal data via the controller’s media channels and services without disclosing any personal data to an external party.

3.3. Subscriptions to the company email marketing, such as the newsletter, marketing campaigns or event promotions.

For clarity, it should be stated that if data processing is done with the consent of the registered person, they may at any time withdraw that consent. Specim will then cease data processing and delete all information saved within a reasonable time period. The registered person also has the right to object to direct marketing. In such cases, Specim will cease direct marketing towards this individual.

Content of the register

The register may contain the following information:

1. Name
2. Email address
3. Mobile phone number and/or other telephone number
4. Name of the organization and position in the organization
5. Address of the organization
6. Access log
7. Removal of information

Principles of how the register is secured

Personal details are kept confidential. The information network and hardware, where the register is located used by the controller and its IT partners, if any, are protected by a firewall and other necessary technical measures. The register’s security measures comply with the data security policy of Specim, Spectral Imaging Ltd.

Those using the register are the staff members of Specim, Spectral Imaging Ltd, who are committed to observing the rules laid down in the GDPR and elsewhere in applicable Finnish and/or European Union legislation.

The same processing procedures described above apply to both manual and electronic data sets.

Third-party information sharing

Specim may share personal information with a third party when required to fulfill an order. We do not share personal information for third-party marketing purposes.

Rights of data subjects

Registered persons have certain rights pursuant to the European Union Data Protection Regulation.

These rights include:

1. Right to rectification
2. Right to be forgotten
3. Right to restriction of processing
4. Right to data portability
5. Right to object

However, said rights are subject to restrictions under the GDPR or other applicable laws and regulations.

Requests to exercise rights under the GDPR will be considered on a case-by-case basis. If the data subject is unsatisfied with the response to their inquiry, they have the right to make a complaint to the Data Protection Ombudsman of Finland.

Find out more about your rights: https://tietosuoja.fi/en/know-your-rights.

Regular sources of information

The register will be compiled from sources publicly available on the Internet and other public sources, where appropriate. If the information is obtained from sources other than the internet, as a rule, the address sources will be specified. In such cases, Specim will inform the data subjects as required by the GDPR.

Regular destinations of disclosed data and the transfer of data outside of the EU or the EEA

Regardless of which country you live in, you authorize us to transfer, store, and use your information outside the EU or the EEA, e.g., the United States, and any other country where we operate. The controller will not disclose or transfer the personal data of customers to external parties, except when thus required by the Finnish authorities for the purpose of performing their statutory duties.

When Specim uses data processors that process data outside the EEA, it employs appropriate measures to ensure data safety. Such measures include, but are not limited to, contractual requirements and certification such as the EU-US Data Privacy Framework.

Removal of information

Information can be removed from the register based on a personal request or due to the termination of a customer relationship. All data is removed within a reasonable time period after such events.

Requests for register-related matters should be submitted in writing to the postal address or by email. Please send your request with proof of identity so Specim can confirm you are who you claim you are.

Marketing automation and cookies

Specim websites run a marketing automation system that is used to improve the general user experience of Specim’s web services, e.g., highlighting services that are of the highest importance to the visitor, creating target segments for direct marketing campaigns, where profiling helps Specim suggest services that meet customer needs.

Specim sets up a cookie to learn how visitors consume content in all its digital services. Information saved includes:

  • Users who have requested further information on products.
  • Users who have ordered Specim’s education and training material and newsletters.
  • Users who have downloaded brochures or other materials.

The visitor’s identity stays anonymous to Specim until:

1. The visitor fills in their contact information on a web form.

The visitor’s personal information may be linked to the cookie when they reveal their identity by filling in a web form, e.g., a request for information or a newsletter subscription. The information given is stored in Specim’s marketing or customer register.

2. The visitor arrives at the website from an email marketing message sent by Specim.

The visitor’s personal information may be linked to the cookie when they arrive at the website via an email marketing message sent by Specim. The sources for email marketing messages are Specim’s marketing or customer register. A visitor whose cookie is linked to their personal data can receive email marketing that is personalized based on their website visitor history.

If the user prefers Specim not to track their online activity,  they may withdraw their consent at any time by clicking the small round icon at the bottom left corner of each page, or clicking or tapping the Withdraw your consent option on this page. This might, however, degrade the browsing experience and/or make some features unavailable.

This information might be processed in the United States by Salesforce. Salesforce has certified its compliance with the EU-US Data Privacy Framework Principles.

Website visitor tracking

Statistical information based on Google Analytics services is collected for the purposes of developing the website. Google Analytics cookies store information, on an anonymous basis, on issues such as how visitors came to a page (via a search engine or a direct link, etc.), the pages visited, and how long users spent on each page. This information enables us to develop our website further and monitor the success of our new development activities. Website use statistics are collected on issues such as the number of visitors, the visitor’s country, the duration of the visit, the browser used, and the content visited. This information is anonymized.

This information might be processed in the United States by Google. Google has implemented appropriate data protection measures, such as complying with the EU-US Data Privacy Framework.

Email marketing

Links to the website contained in newsletters and training materials emailed by Specim are equipped with either personalized or campaign-specific tracking codes, which are used to assess the effectiveness and targeting of campaigns. All newsletters and email marketing communications include a link for opting out of email marketing.

Display advertising

On the Specim websites, Specim has adopted Google Ads display advertising and remarketing. When you visit our website, it may leave a cookie in your browser, enabling the display of targeted Specim advertising when you visit other websites cooperating with Google. You can control how this advertising is displayed and completely opt out of Google Analytics display advertising by using My Ad Center at https://myadcenter.google.com/home.

Third-party providers such as Google display Specim’s ads on the Google search engine and on the websites of Google partners engaged in display advertising with the help of Google. Marketing based on user lists, which makes use of the systems of third-party service providers (e.g., Google), may be targeted at users of the Specim websites. Marketing based on user lists draws on lists created from the cookies used on this website. Marketing based on user lists complies with practices such as the following: the advertising policy (Google Ads policies) of Google Inc., the latest version of which is available at https://support.google.com/adspolicy/answer/143465.

Specim and third-party service providers such as Google use first-party cookies (such as Google Analytics cookies) together with third-party cookies (such as DoubleClick cookies) for the transfer and optimization of information and to display advertising, on the basis that you have visited our website. This information might be processed in the United States by Google. Google has implemented appropriate data protection measures, such as complying with the EU-US Data Privacy Framework.

Specim uses Conversion Tracking, Analytics and Audience Matching functionalities of the following networks as well: X, Facebook and LinkedIn.

Contact information

Specim, Spectral Imaging Ltd

Business ID: 1007923-4

Postal address: Elektroniikkatie 13, 90590 Oulu, Finland

Telephone: +358 (0)10 4244 400

Email address: info(at)specim.com