Privacy Notice

PRIVACY NOTICE

Updated: 27 November 2025

This privacy notice (the “Privacy Notice”) explains how the companies listed below and belonging to the group with Harvia Plc (publicly listed at OMX Helsinki) as the ultimate parent company (the “Harvia Group”) collects, processes and shares your personal data and what your rights are in relation to your personal data. The company acting as the controller for personal data may be referred to as “we” or “us”. The term “personal data” means any information or set of information from which you can be identified, either directly or indirectly.

The companies listed as controllers in this Privacy Notice each act as independent data controllers for the personal data processing related to their respective business operations. This means each company acts as a separate controller for the personal data of its own users, such as those using its applications and websites. Since all the named companies follow consistent data processing practices, this Privacy Notice covers the personal data processing activities across all these entities.

We are committed to complying with data protection legislation and respecting the privacy of our customers and visitors to our website. When processing personal data, we will always act in accordance with the applicable legislation. In particular, within the European Union (EU), we comply with the General Data Protection Regulation (2016/679).

It is important to us that you are confident that your data will be handled securely and in accordance with applicable legislation. We encourage you to read this Privacy Notice and contact us if you have any questions.

CONTROLLERS AND THE CONTENTS OF THE PRIVACY NOTICE

Harvia Finland Oy

Business ID: 0176654-2

Teollisuustie 1–7, 40951 Muurame, Finland

Contact: data.protection@harvia.com

Harvia Austria GmbH

Business Register number: 129036i

Wartenburger Straße 31 4840 Vöcklabruck, Austria

Contact: data.protection@harvia.com

As a data subject, you may be an end user of our application or our website, or a customer of our online stores. The term “data subject” refers to a natural person whose personal data is processed by us.

This Privacy Notice concerns the processing of personal data by Harvia Finland Oy in the following contexts:

Visits to the following websites:

  • www.harvia.com

  • www.harviagroup.com

Visits to and purchases made via the online store at:

  • webshop.harvia.com

The use of the following applications and services:

  • MyHarvia for Xenio

  • MyHarvia 2

  • Harvia Media Bank

  • Harvia Sauna Designer

This Privacy Notice concerns the processing of personal data by Harvia Austria GmbH in the following contexts:

Visits to and purchases made via the online store at:

  • shop.harvia.com

The applications and services listed above are individually referred to as the “Application”.

PURPOSE OF THE PROCESSING OF PERSONAL DATA AND CATEGORIES OF PERSONAL DATA PROCESSED

We will process your personal data only for the purposes described in this Privacy Notice or for other purposes disclosed to you when we collect your personal data and only to the extent that the processing of personal data is necessary for each of the purposes of processing.

We collect and process your personal data for different purposes depending on who you are and how you interact with us. Certain types of processing are necessary for the functionality of our products and to provide certain features. Unfortunately, if you do not wish to share this information with us, we will not be able to provide all the functionality of our products, systems or applications. For example, the use of our connected products requires the provision of some personal data.

Website visitors:

  • Enabling the use of the website: When you visit our website, we process your personal data to offer you the opportunity to use our website and its functionalities, as well as for ensuring the overall security, functionality and stability of the website, including preventing and detecting possible misconduct and attacks towards the security of the website. The collecting and further processing of your personal data on our website is mostly done by using automated technical means, such as cookies and other similar technologies.

  • Organising competitions and promotions: We process your personal data to organise and administer competitions or other commercial promotions, if you choose to participate in them.

  • Improving our website: We process the personal data you provide to improve the quality of our website by analysing the features and functionality of the website that you use and by analysing the parts of the online store that you visit.

  • Marketing analytics and personalised marketing: We process your personal data to conduct marketing analytics and to engage in targeted and personalised marketing through, e.g. using cookies on our website.

  • Direct marketing: We may process your personal data by sending you direct marketing communications, such as our newsletter.

Online store customers:

  • Order processing and delivery: We process your personal data to process online store orders and other purchases (and other related transactions, such as repair and warranty transactions) and to deliver the products you have purchased to you.

  • Processing payments: We process your personal data to enable and process payments you make to us.

  • Customer communications: We also process the personal data you provide to notify you of changes to our online store. If you contact our customer service, we will use the information you provide to answer your questions and resolve any problems you may have. We may also process personal data to ensure and improve the quality of our customer service.

  • Direct marketing: We may process your personal data by sending you direct marketing communications, such as our newsletter.

  • Organising competitions and promotions: We process your personal data to organise and administer competitions or other commercial promotions, if you choose to participate in them.

  • Improving our online store: We process the personal data you provide to improve the quality of the online store by analysing the features and functionality of the online store that you use and by analysing the parts of the online store that you visit.

Users of the Application

  • Provision of the Application: We process personal data primarily to complete and maintain your registration within the Application, to provide certain features of the Application and to ensure the technical functionality of the Application. We process personal data to provide you with the best possible visitor and customer experience when using the Application.

  • Processing payments: We process your personal data to enable and process payments you make to us.

  • Improving the Application: We process the personal data you provide to improve the quality of the Application by analysing the features and functionality of the Application that you use and by analysing the parts of the Application that you visit. We may also process limited information about when you last had an active subscription with us, even after you have deleted your account, unless you have specifically requested deletion of all your data.

  • Improving the Application by using Location information: We process your Location information to improve the application and to collect data on how and from where you use our products and services.

  • Service requests: We process your Location information to allocate a local service partner for you in case of troubleshooting or maintenance.

  • Customer communications: We also process the personal data you provide to notify you of changes to our Application. If you contact our customer service, we will use the information you provide to answer your questions and resolve any problems you may have. We may also process personal data to ensure and improve the quality of our customer service.

  • Direct marketing: We may process your personal data to send you direct marketing communications, such as our newsletter.

  • Organising competitions and promotions: We process your personal data to organise and administer competitions or other commercial promotions, if you choose to participate in them.

  • Training of AI models: We may use your personal data to train our AI models.

We process the following personal data:

Website visitors:

Information related to the use of the website such as IP address, information collected through cookies, website activity, time of visit, information on how you use our website and referral page.

Customer service information such as information on contacts with customer service and the information you provide in connection with such contacts.

Information on competitions and promotions such as information you provide to us when participating in a competition or promotion by filling out a form or similar.

Contact information such as your name, email address and phone number.

Online store customers:

Contact information such as name, email address and phone number.

Address information such as shipping and invoicing address.

Purchase information such as information related to products and services that you have purchased, transaction information and payment method information.

Customer service information such as information on contacts with customer service and the information you provide in connection with such contacts.

Marketing information such as direct marketing authorisations and prohibitions.

Information on competitions and promotions such as information you provide to us when participating in a competition or promotion by filling out a form or similar.

Information on the use of the online store such as information on which features of the online store you use, which parts of the online store you visit and performance data from your visits to the online store.

Users of the Application:

Contact information such as name, email address and phone number.

Company information such as information on which company you represent, if any.

Country information such as the country or territory associated with your contact information.

Location information such as your geographical location when using the Application.

Purchase information such as information related to products and services that you have purchased, transaction information and payment method information.

Information on the use of products and their functions such as device identification data including serial number and log data.

Customer service information such as information on contacts with customer service and the information you provide in connection with such contacts.

Marketing information such as direct marketing authorisations and prohibitions.

Information on competitions and promotions such as information you provide to us when participating in a competition or promotion by filling out a form or similar.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The processing of personal data is based on the legal bases listed in the tables below depending on who you are.

 Website visitors:

  • Purpose of processing: Enabling the use of the website

  • Personal data processed: Information related to the use of the website

  • Legal basis: Legitimate interest to have a secure and working website for its business purposes and to communicate with current and potential customers (Article 6(1)(f) of the GDPR). Please see our cookie policy or the cookie banner on our website for detailed information on the cookies we use. For harviagroup.com, the cookie policy is available at: https://harviagroup.com/cookie-policy/

  • Purpose of processing: Customer communications

  • Personal data processed: Customer service information

  • Legal basis: Legitimate interest to communicate with current and potential customers when the people contact us in relation to the products and services we offer (Article 6(1)(f) of the GDPR).

  • Purpose of processing: Organising competitions and promotions

  • Personal data processed: Contact information, Information on competitions and promotions

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Marketing analytics and personalised marketing

  • Personal data processed: Information related to the use of the website

  • Legal basis: Consent (Article 6(1)(a) of the GDPR). Please see our cookie policy or the cookie banner on our website for detailed information on the cookies we use. For harviagroup.com, the cookie policy is available at: https://harviagroup.com/cookie-policy/

  • Purpose of processing: Direct marketing

  • Personal data processed: Contact information

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

Online store customers:

  • Purpose of processing: Order processing and delivery

  • Personal data processed: Contact information, Purchase information, Address information

  • Legal basis: Agreement (Article 6(1)(b) of the GDPR)

  • Purpose of processing: Processing payments

  • Personal data processed: Purchase information, Address information

  • Legal basis: Agreement (Article 6(1)(b) of the GDPR)

  • Purpose of processing: Customer communications

  • Personal data processed: Customer service information

  • Legal basis: Legitimate interest to communicate with current and potential customers when the people contact us in relation to the products and services we offer (Article 6(1)(f) of the GDPR).

  • Purpose of processing: Direct marketing

  • Personal data processed: Contact information, Marketing information

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Organising competitions and promotions

  • Personal data processed: Contact information, Information on competitions and promotions

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Improving our online store

  • Personal data processed: Information on the use of the online store, Purchase information

  • Legal basis: Legitimate interest to maintain an operational online store and to keep improving our products and services that we offer to our customers (Article 6(1)(f) of the GDPR).

Users of the Application:

  • Purpose of processing: Provision of the Application

  • Personal data processed: Contact information, Purchase information, Company information

  • Legal basis: Agreement (Article 6(1)(b) of the GDPR)

  • Purpose of processing: Service requests

  • Personal data processed: Location information

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Processing payments

  • Personal data processed: Purchase information, Company information

  • Legal basis: Agreement (Article 6(1)(b) of the GDPR)

  • Purpose of processing: Improving the Application

  • Personal data processed: Information on the use of products and their functions, Customer service information

  • Legal basis: Legitimate interest to continuously improve the products and services we offer by using data created through the use of the Application and through interactions and feedback received from our customers (Article 6(1)(f) of the GDPR).

  • Purpose of processing: Improving the Application by using Location information

  • Personal data processed: Location information

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Customer communications

  • Personal data processed: Customer service information

  • Legal basis: Legitimate interest to communicate with current and potential customers when the people contact us in relation to the products and services we offer (Article 6(1)(f) of the GDPR).

  • Purpose of processing: Direct marketing

  • Personal data processed: Contact information, Marketing information

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Organising competitions and promotions

  • Personal data processed: Contact information, Information on competitions and promotions

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

  • Purpose of processing: Training of AI models

  • Personal data processed: Information on the use of products and their functions, Country information, Purchase information

  • Legal basis: Legitimate interest to develop our own AI model to improve our services in the future and to provide our customers with new functionalities (Article 6(1)(f) of the GDPR).

  • Purpose of processing: Training of AI models

  • Personal data processed: Location information

  • Legal basis: Consent (Article 6(1)(a) of the GDPR)

COOKIES

We may use cookies and tags on our website to ensure that the website functions optimally and that all content is displayed properly. A cookie is a text file that is stored on your web browser or device. We also use cookies to collect comprehensive analytical information about your use of our services and products, to store functionality and to direct relevant news and offers to you.

You have the option to change your web browser settings regarding the use and coverage of cookies. However, remember that if cookies are not accepted, some of the functions of the website may be impaired and some of the content of the website may not be displayed properly.

REGULAR SOURCES OF PERSONAL DATA

We primarily obtain your personal data directly from you. You may provide us personal data for instance through our website, by sending us emails, through phone conversations or meetings with us, or through documents you provide to us.

We may collect and update personal data also from publicly available sources, or registers of authorities and companies providing services related to personal data.

We may also collect personal data automatically when you visit our website, where personal data may be collected via cookies. 

RETENTION PERIOD OF PERSONAL DATA

We will retain personal data only for as long as necessary to fulfil the purposes for which it is processed or to comply with legal obligations. The data will be deleted or made anonymous when it is no longer necessary to retain it for the purposes of the law or the exercise of the rights or obligations of either party.

Personal data processed based on your consent is retained until you withdraw your consent.

DISCLOSURES AND TRANSFERS OF PERSONAL DATA

We may transfer your personal data to any companies belonging to the Harvia Group. Another company or foundation within the Harvia Group may also process your personal data on our behalf. Such processing is based on our legitimate interest to transfer personal data for administrative purposes within the group.

We may also disclose your personal data to third parties that we use as service providers or subcontractors. We use trusted contractual partners with whom we have agreed terms that comply with the requirements of data protection legislation.

We may also disclose your information to public authorities where we are required by law to do so, for example, to prevent or investigate fraud or other illegal activities. We may also disclose your personal data to other parties on the order of a competent court. In addition, we may disclose your information in connection with a potential sale of a business or other business reorganisation to a purchaser of a business or other relevant party in connection with the reorganisation.

When transferring data, we will ensure a high level of data security and protection in accordance with the EU General Data Protection Regulation. Third parties and their subcontractors may also transfer personal data outside the EU or the European Economic Area. In these situations, we comply with the applicable legislation and its requirements, such as the standard contractual clauses (SCCs) adopted by the European Commission. The SCCs can be found here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

We may transfer your personal data in the following countries or jurisdictions outside the EU and the European Economic Area:

United States of America

Canada

United Kingdom

Switzerland

DATA SECURITY PRINCIPLES

The security of personal data is important to us. We have put in place appropriate technical and organisational measures to protect personal data:

  • Access to data is limited to those persons who need it for their job duties.

  • Information systems and equipment are protected by technical measures, including firewalls and passwords.

  • Our staff are trained to handle data appropriately.

  • Electronic files are regularly backed up.

  • The destruction of material containing personal data is carried out in a secure manner.

  • If, despite our security measures, a data breach occurs that is likely to have a negative impact on the data subjects' data protection, we will notify the competent authorities and the data subjects concerned as soon as possible, if required by applicable data protection legislation.

RIGHTS OF THE DATA SUBJECT

We have summarized the rights that you as a data subject have under the mandatory European data protection legislation below. The regulation regarding some of the rights is complex in nature and the regulated rights are subject to a number of exceptions. To keep this Privacy Notice concise, not all of the details of the regulation have been included in the summary.

Access to Your Personal Data

You have the right to ask us whether we are processing personal data about you, and if we are, you can request to access that data. You can also request information about how we process your personal data and about your rights concerning that data. If any of your personal data is inaccurate, you have the right to request that we correct it.

Erasure of Your Personal Data (“Right to be Forgotten”)

You can ask us to delete your personal data at any time. We must comply with your request if we have no legal basis to continue processing your personal data. However, please note that certain data may be subject to statutory retention periods. Until these retention periods expire, we are not permitted to delete that data.

Data Portability

If we process your personal data based on your consent or a direct agreement with you, and we do so by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.

Objection to Processing

If we process your personal data based on our legitimate interests, you can object to that processing. After you object, we must stop processing the data unless we can show compelling lawful grounds to continue. You can also object to the use of your personal data for marketing at any time, and we will cease such processing immediately. When we first collect your personal data, you may be asked whether you wish to receive marketing communications. If you wish to unsubscribe later, you can click the ‘unsubscribe’ link in our emails or contact us by any other means.

Restriction of Processing

You may have the right to request a restriction of how we process your personal data. If granted, we will only store your data and will not process it further, except in limited circumstances.

Withdrawal of Consent

If you have given consent for certain processing activities, you can withdraw this consent at any time with effect for the future. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

How to Exercise Your Rights

To use any of these rights, please contact us using the details provided at the start of this Privacy Notice. We may refuse to act on a request if we can demonstrate that it is manifestly unfounded. If you request multiple copies of your personal data under your right of access, or if you submit more than one request per year, we may charge a reasonable fee reflecting our administrative costs.

Complaints

If you believe our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a supervisory authority in the EU Member State where you live, work, or where you believe the violation took place. That said, we welcome the opportunity to address your concerns directly before you contact a supervisory authority.

CHANGES TO THE PRIVACY NOTICE

We reserve the right to amend or update this Privacy Notice as necessary.

ADDITIONAL PRIVACY INFORMATION FOR ALL U.S. CUSTOMERS

This section supplements the information contained in, and should be read in conjunction with, our Privacy Notice. If you are a resident of certain U.S. states, such as California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, you may have additional rights regarding your “personal information” or “personal data” (as such terms are defined under applicable law; collectively referred to in this section as “personal data”).  

Notice at Collection

This Privacy Notice discusses in detail the categories of personal data we collect and how we use, disclose, and retain such information. We collect personal data from you to provide, maintain, and improve our services. This includes information gathered when you visit our website, make a purchase, interact with customer service, or use our Application.

For more information about the specific categories of personal data we collect, the purposes for which we process that information, and the third parties with whom we may share, please refer to the following sections of this Privacy Notice:

  • PURPOSE OF THE PROCESSING OF PERSONAL DATA AND CATEGORIES OF PERSONAL DATA PROCESSED

  • LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

  • DISCLOSURES AND TRANSFERS OF PERSONAL DATA

In the preceding twelve (12) months, we have not sold personal data to third parties. We do not, and will not, sell your personal data to third parties for cross-context behavioural advertising. We may share your personal data with third-party advertising and analytics services, which we use for various purposes, including to provide relevant content and advertising to you, collect and analyze usage information through cookies and other similar technologies, provide certain features to you, and engage in auditing, research, or reporting. We do not knowingly or intentionally collect personal data of children under 16. We have collected and disclosed only the categories of personal data as described in the “Disclosures and Transfers of Personal Data” and “Notice to California Residents” sections of this Privacy Notice.

Customer Rights

Depending on the state in which you reside, you may have certain rights regarding your personal data. The exact scope of these rights may vary by state:

Right to know what personal data we have collected

You may have the right to know whether we process your personal data and to request what information we have collected about you, including:

  • The categories of personal data we have collected;

  • The categories of sources from which the personal data is collected;

  • The business or commercial purposes for collecting, selling, or sharing that personal data;

  • The categories of third parties to whom we disclose personal data;

  • The specific pieces of information that we have collected about you.

Right to deletion

You may have the right to request that we delete the personal data that we have collected from you, subject to certain legal exceptions. For example, we may need to retain personal data to provide requested products and services or fulfill legal obligations.

Right to correction

You may have the right to request that we correct inaccurate or incomplete personal data that we hold about you.

Right to restriction

You may have the right to restrict or object to certain uses of your data.

Right to opt out of selling, sharing, or profiling for automated decision making

You may have the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling activity in furtherance of decisions that produce legal or similarly significant effects. As of the date of this Privacy Notice:

  • We do process personal data for the purposes of targeted advertising;

  • We do not sell your personal data in exchange for money;

  • We do not engage in any profiling activity based on your personal data that produce legal or similarly significant effects.

Non-Discrimination

You are entitled to exercise the applicable rights described above free from discrimination, including in the form of legally prohibited price increases or decreases in the quality of services we provide. However, we may offer different tiers of our services as permitted by law.

Notice to California Residents

If you are a California resident, California law requires us to provide additional information about how we collect, use and disclose your “personal information” (as that term is defined in the California Consumer Privacy Act (“CCPA”)).

Personal Information We Collect, Use, Disclose, “Sell” and “Share”

This Privacy Notice discusses in detail the categories of personal data we collect and how we use, disclose, and retain such information. We provide additional information required by the CCPA in the chart below. As stated above, we do not, and will not, sell your personal information to third parties for cross-context behavioural advertising. We may share your personal information with third parties for cross-context behavioural advertising as described below.

Categories of personal information: Identifiers, such as name, email address, phone number, shipping address, online identifiers, and IP address

How we use this personal information

  • Enabling use of the website, online store, and Application

  • Providing services and responding to requests

  • Order processing and delivery

  • Processing payments

  • Customer communications

  • Organising competitions and promotions

  • Personalizing services, such as remembering login details and preferences

  • Direct marketing, such as contacting customers with relevant offers and information

  • Marketing analytics and personalised marketing

  • Analyzing and improving the use of the website, online store, Application and other services

  • Security and fraud prevention

  • Complying with the law and defending our legal/contractual rights

Categories of third parties to which we disclose this personal information for a business purpose

  • Service providers, subcontractors and advisors

  • Entities for business transfer purposes

  • Entities for legal purposes

  • Others with your consent

Categories of third parties to which we “share” this personal information for advertising and related analytics purposes

  • Advertising and related analytics providers

  • We do not share login information, such as your account name or password.

Categories of personal information: Commercial Information, such as information related to products and services that you have purchased, transaction information, payment method information and financial information (e.g., credit card details in connection with a purchase)

How we use this personal information

  • Enabling use of the website, online store, and Application

  • Providing services and responding to requests

  • Order processing and delivery

  • Processing payments

  • Customer communications

  • Organising competitions and promotions

  • Personalizing services

  • Direct marketing

  • Marketing analytics and personalised marketing

  • Analyzing and improving the use of the website, online store, Application and other services

  • Security and fraud prevention

  • Complying with the law and defending our legal/contractual rights

Categories of third parties to which we disclose this personal information for a business purpose

  • Service providers, subcontractors and advisors

  • Entities for business transfer purposes

  • Entities for legal purposes

  • Others with your consent

Categories of third parties to which we “share” this personal information for advertising and related analytics purposes

  • Advertising and related analytics providers

  • We do not share payment method or financial information.

Categories of personal information: Internet or network activity information, such as browsing history, information collected through cookies, website activity, time of visit, information on how you use our website and referral page, device identification data including serial number and log data, and information on which features of the online store you use, which parts of the online store you visit and performance data from your visits to the online store

How we use this personal information

  • Enabling use of the website, online store, and Application

  • Providing services and responding to requests

  • Personalizing services

  • Marketing analytics and personalised marketing

  • Analyzing and improving the use of the website, online store, Application and other services

  • Security and fraud prevention

  • Complying with the law and defending our legal/contractual rights

Categories of third parties to which we disclose this personal information for a business purpose

  • Service providers, subcontractors and advisors

  • Entities for legal purposes

  • Others with your consent

Categories of third parties to which we “share” this personal information for advertising and related analytics purposes

  • Advertising and related analytics providers

Categories of personal information: Geolocation Data, such as the country or territory associated with your contact information and your geographical location when using the Application

How we use this personal information

  • Providing services and responding to requests

  • Training of AI models

  • Analyzing and improving the use of the website, online store, Application and other services

  • Security and fraud prevention

  • Complying with the law and defending our legal/contractual rights

Categories of third parties to which we disclose this personal information for a business purpose

  • Service providers, subcontractors and advisors

  • Entities for legal purposes

  • Others with your consent

Categories of third parties to which we “share” this personal information for advertising and related analytics purposes

  • We may share general geolocation data to advertisers and related analytics providers. We do not share precise geolocation data.

Categories of personal information: Professional or employment-related information, such as information on which company you represent, if any

How we use this personal information

  • Providing services and responding to requests

  • Analyzing and improving the use of the website, online store, Application and other services

  • Security and fraud prevention

  • Complying with the law and defending our legal/contractual rights

Categories of third parties to which we disclose this personal information for a business purpose

  • Service providers, subcontractors and advisors

  • Entities for business transfer purposes

  • Entities for legal purposes

  • Others with your consent

Categories of third parties to which we “share” this personal information for advertising and related analytics purposes

  • Advertising and related analytics providers

Additional California Privacy Rights

California residents may make certain requests about their personal information under the CCPA as set forth in the “Customer Rights” section above. In addition:

  • If we ever sell your personal information to third parties for purposes of cross-context behavioural advertising, we will provide you with appropriate notice and the ability to opt out of such disclosures.

  • If we ever offer financial incentives in exchange for your personal information, we will provide you with appropriate notice of such incentives.

  • In the limited circumstances that we process sensitive personal information as defined in the CCPA (such as log-in information and precise geolocation data), we do not use or disclose it other than for disclosed and permitted business purposes. We do not use or disclose this information in a manner that would trigger the right to limit its use under the CCPA.

“Shine the Light” Disclosure

If you are a customer and a California resident, you are permitted under California law to request certain information once per year regarding our disclosure of “personal information” (as that term is defined under applicable California law) to third parties for those third parties’ direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

How to Make a Request to Exercise Your Rights or Opt Out of Sharing of Personal Information

To make a request to know, delete, correct, restrict, or op-out of selling, sharing or profiling your personal data or any other privacy-related request, please contact us at data.protection@harvia.com or www.harvia.com. We may request additional information or documentation for the purpose of verifying your identity. In some cases, you may be able to exercise certain rights by editing your profile, deleting your account, or by using the “Cookie Consent” link on our website footer to opt out of “Preferences” and “Marketing” cookies.

In addition, as described in the “COOKIES” section of this privacy notice, you have the option to change your web browser settings regarding the use and coverage of cookies . However, if cookies are not accepted, some of the functions of the website may be impaired and certain website content may not be displayed properly. Please note that you must complete this process for each browser or device you use to access our website, online store, or Application.

If we decline to take action regarding a request that you have submitted, you may submit an appeal by sending an email to data.protection@harvia.com. We will respond within the time frame required by the applicable state law.