Privacy Policy – Colour App In this document we tell about data collection and processing carried out by Tikkurila Group companies in connection with the use of our colour tools (Tikkurila Colour Master, Alcro Design, Beckers Easy Colour, hereafter Colour App). 1. Data Controller The data controller with respect to anonymous data is Tikkurila Oyj, Heidehofintie 2, 01300 Vantaa, Finland, or one of its subsidiaries. Contact email address: dataprotection(at)tikkurila.com 2. Collected Personal Data and Legal Grounds of Processing 2.1. Anonymous Data The following anonymous data will be gathered in connection with the use of Colour App based on your consent: Usage data of the application, that will be gathered after you have downloaded the application and begun using the application:  * Navigation inside the application * Phone operating system * Errors from the application * Duration of use * Location of use * Client ID (randomly generated) If you have given consent for the processing of anonymous data, you are given a client ID which is used to connect anonymous data to the ID. Anonymous data is not connected to you by other means than the client ID which can be used to delete data related to that ID. We are not linking any data collected from the app with any third party for advertising purposes or any other purposes. 2.2. Other Data The following data will be gathered and processed in all cases, and processing is based on our legitimate interest to process data to enable the use of the application: * Photos that you upload to the application 3. Data processors: The data will be jointly controlled by Tikkurila Oyj or its Group companies. The anonymous data will be gathered through Google Firebase. The processors of the data will be Google and Huld Oy. Tikkurila ensures that outsourcing takes place within the rules of the applicable law. The service providers are only allowed to use personal data to provide agreed service to Tikkurila and according to the terms and conditions agreed with Tikkurila. To some extent, the data will also be transferred to other companies belonging to Tikkurila Group. Tikkurila will ensure that there are legal grounds for transferring the data and that the data is protected according to the applicable law, especially by using the model contracts of the EU Commission concerning data transfer. 4. Purposes of Data Processing The anonymous data will be processed to gather insights about the usage of the application for the further development of the application. We are not linking any data collected from the app with any third party for advertising purposes or any other purposes. Photos are processed to enable the use of the application. 5. Protection of the Data Tikkurila will ensure the data security of collected data by using adequate technical and organizational measures. Only authorized representatives of Tikkurila and authorized external service providers working on behalf of Tikkurila to have the right to process the anonymous data. Tikkurila has given limited access to data only to those persons who need to have the access to carry out the defined purpose of processing. 6. Data Deletion The anonymous data will be automatically deleted after two years from the collection. The anonymized findings will not be deleted and shall be used in application development indefinitely. Photos are stored until you remove them from the application. 7. Your Rights Concerning Anonymous Data You have the right to ask for a copy of the anonymous data concerning the ID generated to you in the register. You have also the right to prohibit Tikkurila from processing anonymous data concerning the ID generated to you in case there are no legal grounds for processing and a right to ask Tikkurila to restrict processing the data. Additionally, you have the right to ask Tikkurila to rectify incorrect data concerning the ID generated to you and the right to withdraw the consent for processing your data. The request for the above-mentioned matters shall be made to the contact information mentioned above. You can also withdraw your consent for processing the anonymous data concerning the ID generated to you by changing the settings in the application. You have also a right to make a claim to the data protection authority concerning the processing of data concerning the ID generated to you.