Privacy Policy

Lokala has appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with data protection laws and regulations. If you have any questions or concerns about how we handle your personal data, including requests to exercise your data protection rights, you can contact our DPO via email at [email protected]. [email protected].

We collect personal data that you voluntarily provide to us when you sign up for and use our Online Services or when you contact us.

3.1 Data You Provide to Us

• Basic Information: Such as your name, email address, company ID, company name, address, and other information you provide to us. Legal Basis: Contract necessity and legitimate interests.
• Access Data and Transaction Data: Such as your email and password for signing in and data on purchase transactions completed through us. Legal Basis: Contract necessity.
• Payment Data: Necessary to process your payment if you choose to make purchases. All payment data is handled and stored by Stripe. Legal Basis: Contract necessity.

Providing this personal information is voluntary. However, if you choose not to provide certain data, you might not be able to use our website fully.

3.2 Data We Collect Automatically

• Location Information: Data about the geographic location of your device, which may be precise (such as GPS data) or approximate (such as IP-based location). Legal Basis: Legitimate interests.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and other tracking technologies. Legal Basis: Legitimate interests. Where required by law, we obtain your consent.

3.3 Ensuring Data Accuracy

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

We process personal data only to the extent necessary and appropriate for the specific processing purposes. We use your personal data for the following purposes:

• Processing your orders and managing your personal account.
• User identification and login.
• Product development.

We also collect and process data from companies that sign up for our marketplace. This includes:

• Company Registration and Verification: To register companies and verify their legitimacy and compliance with our marketplace standards.
• Service Provision: To provide services and support to the companies listed on our marketplace.
• Marketing and Communication: To send important updates, offers, and information relevant to companies.

We primarily store your personal data on servers located within the European Union (EU). Our Service is hosted on secure servers situated within Finland. We utilize third-party service providers to enhance our services, such as for image storage. When this occurs, we ensure that appropriate safeguards are in place.

We do not store your personal data longer than is legally permitted and necessary for the purposes of providing our service.

After you delete your user account, we may retain personal data only as long as required by law or as reasonably necessary for claims handling, bookkeeping, internal reporting, and reconciliation purposes. Once the retention period ends, we will securely delete or anonymize your personal data.

We want to ensure you are fully aware of all your data protection rights:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any inaccurate information.
• The right to withdraw consent: You have the right to withdraw consent at any time free of charge.
• The right to erasure: You have the right to request that we erase your personal data under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data.
• The right to object to processing: You have the right to object to our processing of your personal data.
• The right to data portability: You have the right to request that we transfer the data we have collected to you or another organization in a readable format.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated date at the top of this Privacy Policy. We will notify you of significant changes by posting a notice on our website or by other appropriate means. These changes will be effective immediately upon posting unless otherwise stated.