Privacy Policy
In accordance with Article 13 of the General Data Protection Regulation (EU) 679/2016 ("GDPR").
This Privacy Policy is valid from the date of publication (latest update: 01/04/2026). The Controller may make changes and/or additions to this Privacy Policy, including as a result of any subsequent regulatory changes and/or additions.
This Privacy Policy describes how your personal information is collected, used, and shared when you visit and interact with Skandilo in our showroom (the "Showroom"), during our events, when you browse on our website (the “website”) or when you purchase one of our products (the “products”) at our Showrooms or through the Website.
1. Data Controller
Skandilo is subject to the applicable Finnish personal data legislation. Under this legislation, Skandilo, FI1091465-8, Alvar Aallon katu 8, 40600 Jyväskylä, Finland, is controller for the information registered about customers and visitors interacting with skandilo.
Contact adress: info@skandilo.com.
2. Description of the Data Collecting and its Processing
The data collected will be entered into our central database and we will process it, in the capacity of autonomous controller, to manage the sale of the products through dedicated sales channels (incl. website, direct sales) as well as for marketing and customer relations management purposes. The data may also be collected by our associated and/or subsidiary companies and by our retailers or commercial partners and in that case, they will be designated by us as processors.
Applicable to both b2c (business to customers) and b2b (business to business) contacts, we collect the following personal data about you:
Surname
Last name
Company name (if applicable)
Company business number (if applicable)
Address
Email address
Phone number
Company web site address (if applicable)
LinkedIn address (if applicable)
Profession (if applicable)
Tax code
Purchase data type and price of Products purchased
Product purchase channel
Event participation
Other personal data you provide us through communication channels used for your interaction with us, e.g. via a website form, via email or via phone
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.
We use cookies on our website for the following purposes:
to make the website more user-friendly and personalised
to analyse website usage and collect statistics on visitors
As you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
“cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org
“log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps
3. Purpose, Means and Legal Basis for Data Processing
3.1 Data processing carried our for management of sales and customer relations management
The purpose of the data processing is to carry out the sale of products on our website or through other sales channels (direct contacts, showroom), to manage after-sales services, to allow you to register as a customer on the website and purchasing as a registered customer, to manage contact requests made via the website or by email to the Controller and to allow you to register as a customer and to use the respective services (for example to participate to one of our events).
The data is collected through our website, email contacts, phone contacts and personal contacts (e.g. when you share your information when visiting us at our showroom, or at events), and stored in our customer relations management system.
The provision of data is necessary for Skandilo to be able to proceed with the corresponding order, to manage the related after-sales services and respond to requests. It’s also necessary for you to be able to register as a customer or use the related services on the website.
The legal basis of processing the data is the need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
3.2 Data processing carried our for marketing
The purpose of the data processing is to send you marketing information about products, collections, events and news, or allow you to participate in any customer surveys or market research to improve the products. These communications will be sent by email, social media or telephone, including by automated means (SMS, social media messaging systems). You can also choose to be contacted exclusively via traditional methods, expressing your opposition to receiving communications through automated methods, by writing to info@skandilo.com.
The purpose of the data processing is also to send communications containing marketing offers related to products similar to those already purchased. We also conduct classification of customers based upon a series of parameters, for the purposes of sending targeted commercial communications relating to the requirements of a certain category or bracket of which you form part (e.g., actors in a specific region, profession). We profile customers to assess your preferences, interests, characteristics, and consumption habits based upon a series of parameters, for the purposes of sending customised promotional communication or for a personalised purchasing experience in our showroom or at our events.
The provision of data is optional. If you do not wish to provide your Data, the Controller will be unable to keep you constantly updated on the special offers for its customers, for products related to those already purchased or use the Data for market research, or statistical and customer satisfaction analyses. If you wish to object to the processing of your Data, it will neither be possible for the Controller to keep you constantly updated on offers and promotions dedicated to certain categories of customers or targeted promotions with respect to your preferences, interests, characteristics, and consumption habits. If you have given your consent to receive promotional information in any case, you may therefore only receive generic newsletters.
The legal basis of processing the data is your explicit consent to the processing of Data for this purpose. If you have given your consent, you can withdraw it at any time by clicking on the unsubscribe button contained in the emails or newsletters received or sending an email to info@skandilo.com.
For sending of communications containing marketing offers related to products similar to those already purchased, the legal basis of processing the data is the Controller's legitimate interest in developing relationships with its customers and increasing the volume of requests and sales of the Products. For the classification of customers, the legal basis of processing data is the legitimate interest of the Controller in achieving the maximum efficiency of its marketing activities. We will send promotional communications taking account of your bracket or category only with your prior consent, which may be withdrawn at any time and without prejudice. You can exercise your right to object to the receipt of these communications at any time, immediately or at a later date, by clicking the unsubscribe button contained in the emails or newsletters you receive or by writing to info@skandilo.com.
4. Data Storage Period
The Controller undertakes to erase your data from its systems provided for the execution of the sale and management of the after-sales services, 10 years after the date of the last purchase or from the last interaction with the Controller.
For your registration as a customer and access to the reserved areas of the Website and for use of the related services, the Controller undertakes to erase your Data from its systems provided for your registration 10 years after the date of cancellation of the relevant registration.
For contact requests made via the website or by email to the Controller, the Controller undertakes to erase your Data from its systems 1 year after the date of provision.
The Controller will erase the Data processed in order to send you marketing information, including customised information following classification or profiling, about products, collections, events and news, as well as for the participation in customer surveys and market research, 10 years after the collection of the Data, or until you object. In any case, the Data will be stored for 10 years for the purposes of sales management and after-sales services.
The Controller will erase the Data processed for the purposes of sending communications containing marketing offers related to Products similar to those already purchased, 24 months after the date of each purchase, unless any objection is made before that period elapses and without prejudice to their storage for 10 years for the purposes of executing the sale and for the management of after-sales services.
5. Automated Decision-Making Processes
As indicated above, the Controller carries out, based upon its legitimate interest, a classification of its customers for the purpose of sending information of a commercial nature on products, collections, exhibitions and events targeted relative to the needs of a certain category or bracket of which you form part. That process is carried out by breaking down the data subjects into non-invasive and non-discriminatory categories, such as country of residence, age bracket or purchase channels of Products. Following this analysis, which may also be carried out in automated form, the user may be classified into one or more groups with different characteristics and may receive from the Controller communications dedicated to that category which the Controller believes are in line with its requirements. In relation to this processing, the Controller has successfully conducted a balancing test in order to determine that the processing linked to the classification in question is carried out on the legal basis of the legitimate interest of the Controller in achieving maximum efficiency in its marketing activities. The Controller may also, with your consent, analyse your consumer habits over time, to assess in more depth what may be possible with a simple categorisation, such as products or initiatives responding to your tastes and preferences. In this way we will be able to offer you a unique and customised purchasing experience. It is noted that the Controller has carried out a specific impact assessment of the personal data processing necessary for the profiling activities to guarantee respect of the principles of the GDPR, including non-discrimination, effectiveness, and absence of harmful consequences for the data subject.
6. Storage and Security of Personal Data
The Data will be collected and processed in compliance with the principles of fairness, lawfulness, minimization and transparency, through manual or automated methods, always within the limits of the processing purposes described above and, in any case, in order to ensure the security and confidentiality of the Data.
The Controller may store the Data to fulfil regulatory obligations, or to establish, exercise or defend a legal claim. Upon achieving the purposes for which the Data were collected and processed, the Controller will take the appropriate measures to make the Data anonymous, so as to prevent your identification, notwithstanding its right to continue using the Data anonymously for statistical purposes.
The customer register and databases in control of Skandilo are located in the EU in a cloud environment. Data collected through our website is registered over a protected connection. Register data is stored in firewall-protected databases.
Personal data are processed only by predesignated persons. The Register is protected from outside access. Other registered data is stored securely according to their own separate requirements. Our security measures are regularly monitored to ensure the personal data we process is being handled responsibly and in accordance with the data protection legislation.
7. Sharing Your Personal Information
We share your Personal Information with third parties to help us use your Personal Information, as described above. We will never sell personal data collected to a third party. Information may however be entrusted to third party sales representatives, agents and subcontractors with the explicit purpose of fulfilling any service or contact request. The information shared will only be used for the purposes stated in this policy, or any other purpose with individual consent.
Your Data will be processed and stored in our customer register and database located in the territory of the European Union in a cloud environment. The Controller may share your Data with entities which may, however, be situated both inside and outside your country of residence and both inside and outside the EEA, as the Controller offers its products to customers in all countries in which it is present. The Controller undertakes to:
Ensure that the country to which the Data will be sent guarantees an adequate level of protection, as provided under Article 45 of the GDPR; or
Comply with the standard contractual clauses for Data protection approved by the European Commission as to the transfer of personal Data outside the EEA in accordance with Article 46.2 of the GDPR.
For further information on the entities and countries involved, please send a request to the following email address: info@skandilo.com
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
8. Your Rights
You have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Please note that there are other regulations through law, restricting the removal of certain data, referring to accounting principles and cases of infringement or fraud. Any information not required to be stored by law will be deleted upon request.
Personal data will be stored only to meet the purpose for which it was given to us unless other consent has been given for use of the same data for other purposes. In accordance with regulations and legislation, we will delete your personal data when it is no longer required for the purposes for which it was originally collected, processed and stored.
Job applications sent to Skandilo are stored for 12 months after which they are deleted.
9. Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact Information
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@skandilo.com or by mail using the details provided below:
Skandilo
Alvar Aallon katu 8
40600 Jyväskylä
FINLAND
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence or place of work or in the Member State in which the alleged infringement occurred, if the data subject considers that the processing of personal data concerning him or her infringes this Regulation.