Legal
Privacy
Policy
This Privacy Notice describes how VisiLean collects, uses, stores and otherwise processes personal data when you use our services.
Introduction
Welcome to Visilean! VisiLean Ltd. offers mobile/web software applications (each, an “App”) and web services (each, a “Web Service”), allowing you, amongst other things, to digitalise and improve your construction planning and monitoring processes using highly efficient and advanced lean and BIM integrated solutions. Visilean also operates various websites (each, a “Website”).
This Privacy Notice (the “Notice”) describes how VisiLean group of companies (VisiLean Oy, VisiLean Ltd and VisiLean Pvt India Ltd) collect, use, store and otherwise process personal data that we collect or receive from or about you when you are using our services. Accordingly, this Notice is a master privacy notice, and references herein to the “Services” shall mean the Apps, the Web Services, and the Websites collectively and/or individually (as the case may be). Moreover, some of its provisions only apply to certain Services and/or individuals in certain jurisdictions (for example, the sub-paragraphs titled ‘Legal Bases’ are only relevant for GDPR-protected individuals).
For purposes of this Notice: (a) “personal data” or “personal information” means any information that can be used, alone or together with other data, to uniquely identify any living human being; (b) “GDPR” means Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (General Data Protection Regulation).
Changes to this Privacy Notice
We may update this privacy notice from time to time, for example due to changes in applicable legislation. We endeavour to carry out reasonable means to inform you of any possible changes and their effects in due time beforehand. Therefore, we advise you to review this privacy policy always after becoming aware of changes regarding the privacy notice. The latest version of the Notice will always be accessible at: https://visilean.com/privacy-policy/
This privacy notice was last updated on 19/01/2023.
Data Controller
Name: VisiLean Oy
Address: Lapinlahdenkatu 16, 00180 Helsinki, Finland
Email: [email protected]
Business ID: 2725139-5 (FI27251395).
What data do we collect?
We may collect some information from you when you register on our VisiLean cloud service for either trial or commercial usage of the VisiLean production management system.
When registering to Visilean service for the first time or when updating your data in our system, you will be asked for some personal data. This may contain all or a subset of the following data:
- Salutation (Mr., Mrs., Dr. etc)
- Given name
- Family name
- Email address
- Phone number
- Log files, IP address, usage information
- User personal image / Technical data
- Free trial additional data: Phone number, Company, Job title, City, Country, Project name
Content: When using VisiLean, you input, edit and upload information for effective use of the cloud service. VisiLean collects, converts and stores this content in connection with the service.
How do we collect your data?
We collect data in the following ways:
Data that is given to us by you:
Visilean will collect your data in a number of ways, for example:
- When requesting a free trial of Visilean if offered through our Website
- When contacting us to get more information on our product through a web form on our Website
- When registering to Visilean cloud service as a free trial user or as a commercial user
- When updating your profile information through Visilean service
Data that is collected automatically:
When you use the VisiLean cloud service, we use various tracking tools and technologies, such as analytics tools (collectively, “Tracking Tools”) across the Services to collect information about you and your activities (“Analytical Information”). Here are some examples:
Log Files — We collect log files. Examples of the information inside the log files are: internet protocol (IP) addresses; unique operational identifiers (that allow us to identify a user across multiple devices); unique advertising identifiers; device information (such as device type, operating system version, time zone, and your preferred languages); type of browser; type of operating system; Internet Service Provider (ISP); date/time stamp; referring/exit pages; clicked pages; and any other information your browser or device may send to us. We use such information to analyse trends, administer the Services, track users’ movement around the Services, and gather demographic information.
IP Address — When you access the Services or make purchases through the Services (such as a subscription to our web services), we may collect your IP address. This data may convey to us information about how you use the Services and allow us to properly bill you and enable localization features.
Usage Information — We collect information about user movements (such as the time and date you accessed the Services, the features you used, your preferences, page scrolling and clicks, and for how long you use an App). We may use tracking pixels which are used to anonymously track the online usage patterns of users of the Services.
In any case, you may be able to opt-out of us collecting some Analytical Information, through contacting us directly on [email protected].
Other Sources of Personal Data:
Some of the personal data mentioned above is collected or received directly from you; however, some of the personal data is obtained by us from third party sources. An example of third-party sources might be vendors of products and services (“Vendors”), such as the following analytics Vendors we engage in connection with the Services: Firebase (Google), MailChimp, Usersnap, Google Analytics, and SEMrush. These Vendors may also collect your personal data through their respective Tracking Tools incorporated or embedded within our Services.
How will we use your data?
Any or all of the above data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, the data may be used by us for the following reasons:
- To fulfil the delivery of access to a free trial of Visilean service.
- To fulfil the contract of a commercial Visilean project license that we have signed with a customer organisation, and that you directly or indirectly are a part of through the customer, the customer’s subcontractors or through us or our partners.
- To improve VisiLean service and our customer service.
- To send periodic emails like newsletters, company news, information about updates, product, and service information etc. You will be able to opt-out of these emails at any time.
- To administer a contest, promotion, survey or other service feature.
- Non-private or Non-Personal Information: VisiLean may disclose your non-private, aggregated, or otherwise non-personal information, such as usage statistics of the Service.
- To operate, provide, and maintain the services.
- To develop new products, services, and features.
- To enrich the content and improve the features available within the services.
- To adapt and personalize the Services, or any of its features, to users’ preferences.
- To measure, analyse and optimize our marketing efforts and efficiency, and to send marketing material to you.
- To conduct data analysis, research, and statistics, in order to innovate and improve products, services, and features.
- To communicate with you (for example, responding to your inquiries or your job application).
- To provide you with information about Services, notices of updates, and receipts.
- To monitor compliance with the terms of use.
- To bill users of paid Services or items, and for conducting internal and external financial audits.
- To provide customer support.
- To contact you for your views and opinions of the services.
- To register, authenticate, and administer your account.
- To keep the Services safe and secure.
- To detect or prevent fraud.
Legal Bases (GDPR-only): The legal bases for processing and collecting this personal data and information for the above purposes, may be one or more of the following: (a) your consent; (b) our legitimate interest in operating our Services, as well as ongoing management and development of our business; (c) contractual necessity, such as performing under the Terms of Use or other contracts (as well as in order to take steps at your request prior to entering into a contract); and (d) legal obligation, such as retaining invoice information of our paid subscribers to comply with financial regulations.
We use your Contact Information to send you promotional email: If you contact us with an inquiry, we may respond with promotional emails relating to your inquiry. You may opt-out of these email updates by following the unsubscribe link located at the bottom of the email.
We also use your Analytical Information to provide you with personalized services: In some of our Services, we will use and share (such as with advertising networks and service providers) the Analytical Information we obtain to serve you with advertisements to products and services from us and third parties that we believe may suit your interests.
Transfers outside the European Economic Area
We are based in Finland. The information we collect from you will be processed, among other places, in Finland, which is recognized by the European Union (“EU”) as having adequate protection for personal data.
Data which we collect from you may be stored and processed in and transferred to countries outside of the European Economic Area (EEA). For example, this could occur if our servers are located in a country outside the EEA or one of our service providers is situated in a country outside the EEA.
To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This ensures your Data is treated by those third parties in a way that is consistent with the Data Protection Laws.
When and how we share personal data with others?
We will not share your personal data with third parties, except in the events listed below or when you provide us your explicit and informed consent. We may share your data with the following groups:
- Any of our VisiLean group companies or affiliates — to ensure proper administration of the service and businesses.
- Our employees, local business partners, subcontractors, support agents and/or professional service personnel — to offer user advice and provide information in relation to how to use VisiLean more efficiently.
- Third party service providers who provide services to us which require the processing of personal data — to store and manage all user data including newsletter subscription settings.
- Business partners and subcontractors used for the development of our services.
Our business partners may process your personal data only for measures carried out on our behalf for the purposes defined in this privacy Notice. We always ensure that our partners do not process the personal data transferred to them for any other purposes. We do not sell your personal data to such third parties.
If you violate the law or breach your contractual terms with Visilean: We may share your personal data with any third party (such as law enforcement and legal counsel) if we believe that disclosure of such information is helpful or reasonably necessary to: (a) comply with any applicable law, legal process, or governmental request; (b) enforce the Terms of Use; (c) detect, prevent, or otherwise address fraud or security issues; and/or (d) protect against harm to the rights, property or safety of Visilean, our users, yourself and/or the public.
If we are legally required to do so: If we are bound to disclose your personal data by a judicial order or by a governmental or regulatory authority, we will comply and share the personal data with that body.
Upon M&A, insolvency, or similar event: In the event that Visilean is acquired by, or merged or consolidated with, a third-party entity, or otherwise sells or transfers some or all of its business, shares or assets to a third party entity, we may share your personal data to and with the corresponding third party entity or buyer (whether actual or potential).
Third-Party Service
Please be aware that while using the Services, you may be directed (via hyperlinks or other means) to, or be able to interact with, third-party websites, apps, services and online communities that are not affiliated with us (such as Facebook, Instagram, and LinkedIn). Moreover, if the Services integrate with a third-party service, the application programming interface (API) that performs the integration will enable the relevant third party to serve you certain content as well as access some of your Account Content. Additionally, when you pay for fee-based Services or items, your payment will be processed by third party payment processors. Any personal data you provide in connection therewith is provided to the applicable third party.
We do not control, and are not responsible for, the privacy practices of such third parties, or for their content, products and services, and we encourage you to read the terms and conditions and privacy notices of each third party that you choose to use or interact with.
Security and Data Retention
Where we store your personal data:
Visilean does not itself host the Services or operate the underlying cloud infrastructure – all of that is done by third party hosting and cloud service providers (“Hosting Providers”). This means that personal data you provide us or that we or third parties collect from you is hosted with such Hosting Providers on servers that they own or control, which servers may be located anywhere in the world.
Visilean securely stores your data at following business partners and subcontractors:
- Amazon Web Services (AWS) (for active and backed up Visilean service data)
- The Rocket Science Group LLC d/b/a Mailchimp (for newsletters and announcements)
- Microsoft Corporation (email server)
- Pipedrive Inc (for recording free pilot user information)
How long we retain your personal data:
We store your personal data as long as we need it for the purposes for which it was obtained or until you ask us to delete it. If you ask us to delete the personal data, we may still have to retain it to comply with our legal obligations, to comply with tax or accounting requirements, to resolve disputes, and/or to enforce our agreements.
Generally, Visilean will keep your data as follows:
• Personal data related to free trials for the length of the trial period (typically 30 days) after which the data will be erased
• Personal data related to commercial Visilean projects as agreed in the project contract, which also can include archive storage of project and user data after the project has finished
We implement appropriate technical, organizational, and security measures to reduce the risks of damage to (or loss of) information, or any unauthorized access or use of information. However, these measures do not provide absolute information security.
What are your data protection rights?
Visilean would like to make sure you are fully aware of your data protection rights. Every user is entitled to the following:
- Right to access — the right to request copies of the information we hold about you at any time, or that we modify, update, or delete such information.
- Right to correct — the right to have your data rectified if it is inaccurate or incomplete.
- Right to erase — the right to request that we delete or remove your data from our systems, under certain conditions.
- Right to restrict our use of your data — the right to “block” us from using your data or limit the way in which we can use it, under certain conditions.
- Right to data portability — the right to request that we move, copy, or transfer your data, under certain conditions.
- Right to object — the right to object to our use of your data including where we use it for our legitimate interests.
If you wish to exercise any of these rights, please contact us (see the “Contact Us” section below). Subject to legal and other permissible considerations, we will make reasonable efforts to honour your request promptly in accordance with applicable law or inform you if we require further information in order to fulfil your request.
Should you ever decide to delete your Account, you may do so by emailing [email protected]. If you terminate your Account, any association between your Account and personal data we store will no longer be accessible through your Account.
If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority.
Minor
You must be at least 13 years of age to use the Services. The Services are not intended for minors under the age of thirteen (13). IF YOU ARE UNDER THE AGE OF THIRTEEN (13) YOU MAY NOT USE THE SERVICES. If you are between thirteen (13) and eighteen (18) years old, you must review this Notice with your parent or guardian. If you have concerns about your child’s privacy, or if you believe that your child may have provided us with their personal data, please contact us at [email protected]. We will take steps to delete the information as soon as possible should we learn that we have collected the personal data of a child under 13 without first receiving verifiable parental consent.
Changes of business ownership and control
VisiLean Ltd may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of VisiLean Ltd. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy notice, be permitted to use the data for the purposes for which it was originally supplied to us.
We may also disclose data to a prospective purchaser of our business or any part of it. In the above instances, we will take steps with the aim of ensuring your privacy is protected.
Principles of Data Security
The security of your personal data is important to VisiLean. To prevent unauthorised access or disclosure, VisiLean have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information VisiLean collects online. The data shall be accessible to persons on a need-to-know basis only. Such persons have personal user credentials and passwords. We take backups of our information system regularly.
Contacting Us
How to contact our Data Protection Officer:
If you have any questions or requests concerning your personal data or about our privacy practices and policies, you may contact our Data Protection Officer at [email protected]. Please use this channel only for questions or requests about privacy and data protection.
How to contact our European representative:
The European representative of Visilean, for purposes of the GDPR and this Notice, is Visilean Ltd. If you are within the EEA, you may contact our European representative at: [email protected]
General inquiries:
VisiLean Ltd, Lapinlahdenkatu 16, 00180 Helsinki, Finland
Email: [email protected]