Privacy notice

The controller is Iiwari Tracking Solutions Oy (Business ID 2899575-9), Kidekuja 2, 88610 Vuokatti, Finland.

For all questions about this notice or about the processing of your personal data, contact info@iiwari.com.

This notice covers our website, our marketing and sales, and the customer relationships around the Iiwari Care and Iiwari positioning services. When we process personal data on behalf of a customer organisation as a processor, the terms of our data processing agreement apply.

We process personal data on our customers, prospective customers and other stakeholders in order to provide, promote and develop our positioning technology and services, and to maintain the business relationship with the people close to us. Your connection with us typically stems from your role or position in an organisation.

Personal data is also processed for planning and running our business operations and for developing our services further.

Personal data is in most cases collected directly from you or your employer, or it is generated as part of the use of our services and products. The data we collect falls into the following categories:

• Identification data: first and last name.
• Company and contact data: phone number, email address, job title, company name, company address and country.
• Communication and marketing data: messages you send us, newsletter subscriptions, event invitations and participation.
• Website usage data: technical data collected via cookies and similar technologies, described in our cookie policy.

We may also use public sources, such as business networks, to keep information about your role in an organisation up to date.

• Performance of a contract: delivering products, customer service during the contract period, invoicing and support.
• Legitimate interest: B2B sales and marketing, developing our services, and securing our systems.
• Consent: newsletter subscriptions and non-essential cookies. You can withdraw consent at any time.
• Legal obligation: accounting and other statutory record-keeping.

When a care organisation uses Iiwari Care, that organisation is the controller for the data generated in the service, such as resident and staff locations, alarms and care events. Iiwari acts as a processor and processes the data only according to the customer's documented instructions and our data processing agreement.

The system is designed on data-minimisation principles: locations are used to produce alerts and reporting, not to monitor individual employees, and access is limited to the users the customer organisation authorises.

If you are a resident, a relative or an employee and want to exercise your rights in relation to that data, please contact the care organisation. We will assist them as required.

As a rule, we do not disclose personal data to third parties without your consent. We may still be required to disclose data to authorities where mandatory under applicable law.

We use selected suppliers that process personal data on our behalf, for example providers of IT development, maintenance, hosting, support, email and CRM services. These suppliers act under a written data processing agreement.

Data is primarily processed within the EU/EEA. If personal data is transferred outside the EEA, we ensure an adequate level of protection through an EU Commission adequacy decision or the EU standard contractual clauses together with any necessary supplementary measures.

We apply good data management practice, a high duty of care and strict security measures. We and our service providers take appropriate technical and organisational measures to protect personal data against unauthorised access and accidental or unlawful destruction, alteration, disclosure or transfer.

Access rights are limited to persons who need the data to perform their duties, connections are encrypted, and access is logged.

We keep data for as long as it is needed for the purposes it was collected for. As a general rule, contact persons' data is stored for the duration of the relationship with the client organisation and for one year from the last contact.

Newsletter subscriber data is kept until you unsubscribe. Data with a statutory retention period, such as accounting material, is kept for the period required by law. Retention periods are reviewed regularly and obsolete data is deleted.

• Access the personal data we hold about you.
• Have inaccurate or outdated data rectified.
• Have your data erased where we have no continuing need for it.
• Restrict or object to processing based on legitimate interest.
• Data portability where processing is based on consent or a contract.
• Withdraw consent at any time, without affecting earlier processing.
• Opt out of electronic direct marketing at any time.

To exercise your rights, contact info@iiwari.com. We respond within one month. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

We use cookies and similar technologies to keep the site secure, to measure its performance and to make our content more relevant. Read more and manage your choices on our cookie policy page.

We develop our services continuously, so this notice may be updated. The current version is always published on this page, and the date of the latest update is shown at the top.