Integrity policy

v.2 updated May 2025

CONDENSED INFORMATION

General

We take your personal integrity seriously. Our goal is for you to feel safe with how we use your personal data. As data controller, we ensure compliance with applicable legislation concerning protection of your data.

Scope

This Integrity Policy governs all processing made by Eckerö Line of personal data within the framework of our activities with respect to you as a private customer.

Gathered personal data

The majority of the information we gather concerning you is information you submit when you enter into an agreement with us and when you make use of our services. This includes, for instance, contact details, date of birth, demographic data, order and payment details and information concerning how you make use of our services.

In order to improve our web services, we make use of cookies, which may contain personal data. You can read more about how we use cookies in our comprehensive cookie policy.

Our use and sharing of your data

Here at Eckerö Line, we use your personal data to be able to provide you with the products and services we offer in the best possible way. Your personal data is used for the following purposes:

Administration and implementation of the agreement
Marketing, including targeted advertising, of our own and our partners' services
Method and business development
Administration in connection with company acquisition, restructuring etc.

We do not use your personal data for any other purpose, and we only store your data for as long as it is necessary, for example to comply with applicable legal requirements or to exercise or defend legal claims.

Under certain circumstances, we may provide your personal data to other affiliated companies, IT suppliers or companies with which we collaborate in order to supply our products and services. We will not sell your personal data to anybody.

Your rights

You have the right to receive information concerning which of your personal data we use, and what we do with it, as well as more generally for the purpose of checking your personal data set out herein. As such, in certain circumstances, you have the right to receive your data or have it corrected, deleted, blocked or moved. You also have the right to object to certain types of usage of your data, and to withdraw your consent to its use. We care about your privacy and are here to help with any concerns you may have about how we handle your personal data. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. If you wish to know more about your rights you can read more in our comprehensive Integrity Policy.

Contact details

If you have any questions concerning this Integrity Policy or our use of your personal data, or if you wish to exercise your rights, you can contact us via the following channels:

Postal address:
Tyynenmerenkatu 9 A
00220 Helsinki, Finland

Visiting address:
Tyynenmerenkatu 14
00220 Helsinki, Finland

Email: [email protected]
Telephone: +358 9 2288 544
Website: https://www.eckeroline.com

1. GENERAL

We care about your personal integrity and safety. Via this integrity policy, we will demonstrate how we ensure that your personal data is handled properly.

This Integrity Policy applies to you as our private customer.

Comprehensive integrity policy

2. DATA CONTROLLER

Eckerö Line is the data controller for the processing of your personal data.

Comprehensive integrity policy

3. OUR USE OF YOUR PERSONAL DATA

Here at Eckerö Line we use your personal data for the purpose of administrating and fulfilling agreements, carrying out marketing - including targeted advertising - and implementing method and business development.

Comprehensive integrity policy

We use your personal data in order to be able to provide our services, offer you customer service and receive payment from you

Comprehensive integrity policy

We market our and our partners' services and put together tailor-made advertisements for you

Comprehensive integrity policy

Purpose: Marketing, including targeted advertising, of our own and our partners' services
Personal data: Contact details such as name, phone number and email address. Internet browsing habits and browsing history such as what pages you browse and for how long. Demographic data such as age, gender and postcode.
What we do: What we do: We use your personal data within the framework of our marketing and market segmentation activities. By market segmentation we mean that we categorise our customer base on the basis of demographic selection criteria such as age, gender and postcode for the purpose of directing targeted marketing and information which is not targeted at specific customers concerning offers, services, new products and events. Your personal data is also used for marketing, which encompasses our partners' services and products. This takes place via email, text and multimedia message, and via other automated systems. If you wish to participate in customer-tailored offers and information concerning new products and events of particular relevance to you, e.g. offers concerning particularly favourable customer packages, we will require your consent. We will then analyse for instance what months of the year you use our various services and how often you choose to make use of our services. We will also analyse your internet browsing habits on our website and your purchase and transaction history, as well as your name, age, gender and postcode for the purpose of providing you with relevant information.	Lawful basis: Balancing of interests, if we consider that our interests in sending general and segmented marketing to you outweigh your interests in protecting your personal data or consent.	Retention period:Your data is retained for the duration of the contractual relationship. This assumes, of course, that you had no opposition to targeted marketing during that period. For those of you who are not yet customers of ours, please refer to our cookie policy. For those of you who are not yet customers of ours: We have the right to retain your information for the purpose of sending you marketing for 3 months from receipt of your contact details. This assumes, of course, that you had no opposition to targeted marketing.
If you wish to participate in customer-tailored offers and information concerning new products and events of particular relevance to you, e.g. offers concerning particularly favourable customer packages, we will require your consent. We will then analyse for instance what months of the year you use our various services and how often you choose to make use of our services. We will also analyse your internet browsing habits on our website and your purchase and transaction history, as well as your name, age, gender and postcode for the purpose of providing you with relevant information.	Lawful basis: Consent.
Your rights: At all times you have the right to request that we no longer make use of your personal data for targeted advertising. Further, at all times you have the right to withdraw your consent when we require your consent to make use of your personal data. If you withdraw your consent you will no longer be able to receive information and offers of particular relevance to you. See Section 9 for further information concerning your rights.

We send newsletters and marketing messages tailored to your preferences and interests

Comprehensive integrity policy

We analyse statistics and evaluations in order to develop and improve our services and products.

Comprehensive integrity policy

Purpose: Method and business development
Personal data: Contact details such as name, phone number and email address. Purchase history such as information concerning how you make use of our services (e.g. in which months of the year you tend to use our services). Order and payment data such as order history and payment details. Demographic data such as age, gender and postcode. Internet browsing habits and browsing history such as what pages you browse on our (and others') websites and for how long.
What we do: We use your personal data within the framework of our marketing and customer analyses, which primarily consist of statistics, data from completed market segmentation and customer satisfaction evaluations. We then use the results of our analysis as the basis for improving, replacing or developing new services, processes or working methods with the aim of meeting your and other customers' expectations and wishes. For instance, we may use your personal data to improve our customer service, offer new package solutions or tailor our website to your and other customers' wishes. Nonetheless, we will at all times be transparent in always seeking to the greatest possible extent to anonymise or pseudonymise your personal data in order to achieve this goal.	Lawul basis:  Balancing of interests, if we consider that our interests in analysing the use of our products and services for the purpose of improving, replacing or developing new services outweigh your interests in protecting your personal data.	Retention period: We retain your personal data for this purpose for the duration of the contractual relationship and for up to 36 months after its conclusion.
Your rights: You have the right to object to our use of your personal data which is based on a balancing of interests. If you object to such use we will only continue to use your personal data where there are important grounds for doing so which outweigh your interests. See further concerning your rights in Section 9.

We use your personal data in the context of company acquisition and restructuring

Comprehensive integrity policy

4. FROM WHERE DOES YOUR PERSONAL DATA ORIGINATE

The personal data concerning you which we use originates from various sources besides yourself, such as payment solution partners'.

You must provide us with particular personal data in order to be able to enter into an agreement with us.

Comprehensive integrity policy

5. AUTOMATED DECISION MAKING

5.1 We do not use automated processes to make decisions that have a significant effect on you.

6. HOW LONG DO WE STORE YOUR PERSONAL DATA?

We store your personal data for as long as we require it, after which we remove it from our system.

Under certain circumstances, we may need to store your data for a significant period of time.

Comprehensive integrity policy

7. TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

We will supply your personal data to, among others, affiliated companies, IT suppliers and commercial partners.

We will not sell your personal data to anyone else.

Comprehensive integrity policy

8. WHERE DO WE USE YOUR PERSONAL DATA?

Eckerö Line strives at all times to only ever process your personal data within the EU/EEA. Under certain circumstances, we may transmit your personal data to countries outside of the EU/EEA. All such transmission shall take place in accordance with the law.

Comprehensive integrity policy

9. YOUR RIGHTS

At any time you may contact us to exercise your rights.

You have the right to request from Eckerö Line access to and correction or deletion of your personal data. You may also request that we limit our processing of your data.

You have the right to object to processing of your personal data based on a balancing of interests or when we use your data for the purposes of targeted marketing.

In the case of use of your data which is based on your consent, you may at any time withdraw your consent, in which case we will cease to make use of your data.

You have the right to receive or transmit elements of your personal data in a structured, commonly used and machine-readable format.

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman.

Comprehensive integrity policy

9.1 Our responsibility for your rights

9.1.1 In its capacity of personal data controller Eckerö Line is responsible for ensuring that your personal data is used in accordance with legislation and that your rights are observed. You may contact us at any time if you wish to exercise your rights. You can find our contact details at the end of this Integrity Policy.

9.1.2 Eckerö Line has an obligation to respond to your request to exercise your rights within a month of you submitting your request. If your request is complicated, or if a large number of such requests have been received, we are entitled to extend the processing time by two months. If we believe that we are unable to meet your request we are obliged, by at the latest a month from receipt of your request, to notify you of the reasons for this and inform you that you have the right to lodge a complaint with the regulatory authority.

9.1.3 You will not be charged for any information, communication or measures that we implement. However, if your request is manifestly unfounded or excessive, we may charge an administrative fee for providing the information or taking the action requested, or refuse to act on your request altogether.

9.2 Your rights to access, rectify, delete and restrict processing of data

9.2.1 You have the right to request from Eckerö Line

a) Access to your personal data. This means that you have the right to request access to personal data that we store concerning you. You also have the right to be provided, at no cost to yourself, with a copy of the personal data that we are processing. We have the right to charge an administration fee for any additional copies. If you make a request in electronic form, e.g. via email, we will provide you with the information in a commonly-used electronic format.

b) Rectification of your personal data. At your request or on our own initiative, we will correct, anonymise, delete or supplement data that we know to be inaccurate, incomplete or misleading. You also have the right to supplement any incomplete personal data if something relevant is missing.

c) Erasure of your personal data. You have the right to request that we delete your personal data if there is no compelling reason for us to continue processing this data. Personal data should, therefore, be deleted if:

(i) it is no longer needed for the purpose for which we collected it

(ii) we use your data on the basis of consent provided by you and you withdraw your consent

(iii) you object to us processing your data after a legitimate interest assessment and we have no compelling interest that overrides your interests and rights

(iv) we have used the personal data in an unauthorised manner

(v) we have a legal obligation to delete personal data, or

(vi) you are a minor and we have gathered the personal data in connection with the provision of services from the information society.

However, there may be legal requirements or other compelling reasons that prevent us from immediately deleting your personal data. We will then stop processing your personal data for purposes other than compliance with the law or where there are no compelling legitimate grounds for doing so.

d) Right to restrict processing. This means that we temporarily restrict the processing of your data. You have the right to request restriction when:

(i) you believe that your data is incorrect and you have requested for it to be corrected pursuant to Item 9.2.1b), during the period we check the accuracy of the data in question

(ii) the processing is unlawful and you do not want the data to be deleted

(iii) we, as personal data administrators no longer need the personal data for our purposes, but you need it to determine, enforce or defend a legal claim, or

(iv) you object to its use pursuant to Item 9.3.1, while awaiting a review of whether our key interests outweigh yours.

9.2.2 Here at Eckerö Line we will make all reasonable efforts to inform anyone who has been provided with your personal data pursuant to Section 7 above that we have corrected, deleted or limited access to your personal data after you have requested that we do so. If you request information on recipients of your personal data, we will inform you about the recipients.

9.3 Your right to object to processing

9.3.1 You have the right to object to such use of your personal data which we make on the strength of balancing of interests or in the public interest (see Section 3 above). If you object to such processing, we will only continue to process your data if we have compelling reasons for doing so that override your interests.

9.3.2 If you do not wish Eckerö Line to make use of your personal data for the purposes of targeted marketing you at all times have the right to object to such use by notifying us of this. Once we have received your objection, we will cease to use your personal data for the purpose of such marketing.

9.4 Your right to withdraw consent

9.4.1 With respect to use which has as its legal basis your consent (see Section 3 above) you may at any time withdraw your consent by contacting us. You can find our contact details at the end of this Integrity Policy. If you withdraw your consent, you may not be able to use our services as intended.

9.5 Your right to data portability

9.5.1 You have the right to data portability. This means the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that this data is transmitted to another personal data controller. The right to data portability only applies when the processing is carried out by automated means and our lawful basis for processing your data is your consent or for the fulfilment of an agreement between you and us. This requires that you for instance have the right to receive and transmit all personal data you have submitted in order to create your user account with us, such as your contact details and demographic data.

9.6 Your right to complain to a supervisory authority

9.6.1 You have the right to lodge a complaint with the Finnish Data Protection Authority (Office of the Data Protection Ombudsman) concerning our processing of your personal data.

10. WE PROTECT YOUR PERSONAL DATA

We want you to feel confident at all times about providing us with your personal data. For this reason, Eckerö Line has adopted appropriate security measures in order to safeguard your personal data against unauthorized access, alteration and deletion. Should a security breach occur that may materially impact you or your personal data, e.g. risk of fraud or identity theft, we will contact you to explain what action you can take to mitigate potential adverse effects of the breach.

11. COOKIES

Here at Eckerö Line we use cookies on our website and in our services in order to improve your experience of using our products and services. We use cookies among other things to simplify and tailor our web services. In our cookie policy, we explain in more detail how we use cookies and what choices you can make with respect to our cookies. You can find the policy here.

12. AMENDMENTS TO THIS INTEGRITY POLICY

Eckerö Line has the right at any time to make amendments to this Integrity Policy. When we make changes that are not purely formatting or typographical error corrections, we will inform you clearly of these changes and what they mean for you before they become effective. If we need your consent to fulfil our obligations to you and you do not agree to the amended terms, you may terminate the agreement with us before the terms enter into force.

13. CONTACT INFORMATION

Do not hesitate to contact us at Eckerö Line if you have any questions regarding this Integrity Policy, our use of your personal data or if you wish to exercise your rights.

13.1. Eckerö Line AB Oy, Business Registration Number 0967682-4.

Postaladdress:
Tyynenmerenkatu 9 A
00220 Helsinki, Finland

Visiting address:
Tyynenmerenkatu 14
00220 Helsinki, Finland

Email: [email protected]
Telefonnumber: +358 9 2288 544
Website: https://www.eckeroline.com

Purpose: Administration and fulfilment of agreement
Personal data: Contact details such as name, national insurance number, telephone number and email address. Order and payment data such as order history and payment details. Login details such as email address and password. Sensitive personal data such as health data.
What we do: What we do: What we do: We use your personal data in order to be able to provide, administer and tailor our services and products and provide you with customer service as a user of our services.	Lawful basis:  Fulfilment of the agreement. Sensitive personal data is processed with the justification of your express consent.	Retention period: The data is retained for the duration of the contractual relationship and 36 months thereafter. In the event that a dispute arises, e.g. concerning payment, we have the right to continue to process your data for as long as necessary for the purpose of establishing, defending or enforcing the legal claim.
Your rights: See Section 9 for further information concerning your rights.

Purpose: Sending newsletters and marketing messages, including tailored information about our own and our partners’ services, offers and events.
Personal data: Contact details such as name, email address, telephone number (for SMS) Device information (if applicable, for push notifications)
What we do: We use your personal data in order to be able to send you newsletters and other marketing messages that you have subscribed to. We use a marketing automation data processor for the purposes of marketing communications. These communications may include information about our services, travel tips, offers and events that we believe may be of interest to you. Subscriptions can be made through various subscription channels, including email, SMS and push notifications).	Lawul basis: Consent	Retention period: The data is stored for as long as necessary to send the marketing communications. If you choose to unsubscribe from our marketing communications, your email address or telephone number is kept by the sending system of the data processor in order to ensure that we do not contact you by mistake in the future.
Your rights: You may withdraw your consent to receive newsletters and marketing messages at any time by following the instructions provided in the newsletters and messages. You can also contact us directly using the details provided in this Integrity Policy. Withdrawing your consent will not affect the lawfulness of any processing carried out before your withdrawal.

Purpose: Administration in connection with company acquisition, restructuring etc.
Personal data: Contact details such as name, phone number and email address. Order and payment details such as purchase and transaction history.
What we do: What we do: In the event that our company is to be restructured, e.g. split into multiple separate companies, or if a third party wishes to acquire our company or our customer database, we will provide the acquiring company with your and other customers' personal data. In this case the acquiring company will continue to use your personal data for the same purpose as set out in this Integrity Policy unless you are informed otherwise in connection with the transition.	Lawful basis: Balancing of interests, if we consider that our interests in facilitating an acquisition or restructuring process outweigh your interests in protecting your personal data. This presupposes however that the acquiring company engages in similar business activities to ours.	Retention period: If our company ceases to exist, e.g. due to a merger, liquidation or bankruptcy, or if our customer database is transferred to an acquiring company, we will delete your personal data, except where legislation requires data to be stored. If we are acquired by an acquiring company or split into multiple entities in connection with a restructuring, we will continue to store and use your personal data pursuant to the conditions set out in this Integrity Policy unless you are informed otherwise in connection with the transition.
Your rights: For information concerning your rights, see Section 9.