Privacy Policy

Last Updated: September 2024

Finnleo ("Finnleo", "we", "us") is concerned about privacy issues and wants you to be familiar with how Finnleo collects, uses, and discloses your information in connection with our business.  Accordingly, we have created this Privacy Policy to describe our practices in connection with information that we collect through: (1) in-person interactions, such as at trade shows, during in-person market research, and at retail stores where our products are sold, to name a few, (2) phone interactions, (3) websites operated by us from which you are accessing this Privacy Policy (the “Sites”), (4) the software applications made available by us for use on or through computers and mobile devices (the “Apps”), (5) our social media pages and apps located at:

• Facebook (https://www.facebook.com/Finnleo)
• Twitter (https://x.com/FinnleoSauna)
• LinkedIn (https://www.linkedin.com/showcase/finnleo---pure-sauna/)
• Pinterest (https://www.pinterest.com/finnleosauna/)
• YouTube (https://www.youtube.com/channel/UC6OBxPTRTQr2SDx9CRlflLQ), and
• Instagram (https://www.instagram.com/finnleosauna/)

(collectively, our “Social Media Pages”), and (6) HTML-formatted email messages that we send to you that link to this Privacy Policy (collectively, including the Sites, Apps and our Social Media Pages, the “Services”). Except as otherwise expressly provided herein, this Privacy Policy does not govern our collection of information through any website not identified in this Privacy Policy or by any other means other than through the Services; nor does this Privacy Policy govern the collection of information by any of our Affiliated Entities (as defined below) or by third parties.

We encourage you to read this Privacy Policy before using the Services or submitting your Personal Information to us. “Personal information” is information that identifies you as an individual or relates to an identifiable individual.

Your use of the Services signifies that you agree with all terms of this Privacy Policy, so please do not use the Services if you disagree with any part of this Privacy Policy.

Policy Modifications  

Finnleo reserves the right to make changes to this Privacy Policy. In the event that Finnleo makes a material change to this Privacy Policy, it will be posted here. We encourage you to check this page regularly because your continued use of the Services following any changes to the Privacy Policy will be deemed to constitute your acceptance of such change. You can determine when this Privacy Policy was last revised by referring to the “Last Updated” legend at the top of this page.

Notice Regarding Use of the Services by Children  

The Services are not directed to children under the age of eighteen (18), and we request that children do not provide Personal Information through the Services.

How We Collect and Use Personal Information

We will collect Personal Information about you, such as your name, postal address, telephone and mobile numbers, email address, date of birth, gender, IP address, profile pictures, or social media IDs through your use of the Services, such as when you create an account or profile, order or register a product, order literature, enter contests or incentive programs, sign up for newsletters, download an App, participate in a survey, contact customer service, or otherwise do business with us or interact with the Services.  We may also receive your Personal Information from other sources, such as affiliated entities, public databases and cooperative databases; joint marketing partners; social media platforms; from people with whom you are friends or otherwise connected on social media platforms; our service providers; as well as from other third parties.  For example, if you elect to connect your social media account to your Site account, certain Personal Information from your social media account will be shared with us, which may include Personal Information that is part of your profile or your friends’ profiles.

We use your Personal Information to do business with you or otherwise provide the services you request from Finnleo such as responding to product information requests; registering products; fulfilling orders for parts, products or customer service; initiating refunds; administering contests or incentive programs; and facilitating online product visualization applications and preferred product catalogs. In our legitimate interest, where permitted, or with your prior consent, as may be required by law, we also use Personal Information to send you news about our products and promotions, to conduct online surveys, contests, other similar promotions or incentive programs via email, telephone, or postal mail, and to notify you of special events and products that you might be interested in. Please see the “Sweepstakes, Contests, and Other Promotions” section below for more information on participating in such activities.  Further, we may also use Personal Information to send you important information regarding the Services, changes to our terms, conditions, and policies and/or other administrative information. Because this information may be important to your use of the Services, you may not opt-out of receiving such communications.  In addition, we may use the information to improve Finnleo’s online and other services, such as through customer service and product support, to understand consumer preferences in developing product improvements and innovations. We may also use your Personal Information for internal business purposes, such as optimizing users’ Services experiences and analyzing, managing and expanding our businesses. If you apply for employment with Finnleo, we may use the Personal Information you supply to process your job application.

The Services may offer a feature that allows you to send an electronic postcard or otherwise share a message with a friend. If you choose to use this feature, we will ask you for the recipient’s name and email address, along with the text of any message you choose to include. By using this feature, you are telling us that you are entitled to provide us with the recipient’s name and email address for this purpose.

We may also use your personal information: (i) as necessary or appropriate under applicable law; (ii) where we determine that such use is necessary to comply with the request of a law enforcement or regulatory agency or other legal process; (iii) to protect our operations or those of any of the Affiliated Entities; (iv) to protect the rights, privacy, property, interests, or safety of Finnleo, the Affiliated Entities, Services visitors, customers, business partners, employees, or the public; (v) to permit us to pursue available remedies or limit the damages that we may sustain; (vi) to enforce our Terms of Use; (vii) to respond to an emergency; and (viii) in connection with any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of Finnleo’s business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).

How We Share Personal Information

Finnleo may share Personal Information collected via the Services with Affiliated Entities or other third parties as described below. You should also be aware that Personal Information about you may be transferred to or received by Affiliated Entities or third parties in the U.S. or in other countries, which countries may have different privacy regulations than those applicable in the country where you reside. The Affiliated Entities and third parties that process your Personal Information for us are required to do so in accordance with applicable law and cybersecurity/data privacy best practices.

• Affiliated Entities. We may share Personal Information with our parent, subsidiaries and affiliates worldwide (collectively, “Affiliated Entities”) for the purposes described in this Privacy Policy, including to permit such Affiliated Entities to send you marketing materials. If you wish to opt-out from our sharing of your Personal Information with Affiliated Entities for their marketing purposes, please see the “Choice: Opt Out” section below for information on how to opt-out.
• Service Providers. We may use third-party service providers to help us operate our business and the Services or to administer activities on our behalf, such as sending emails, hosting dealer locater sites, providing order fulfillment, conducting marketing or customer service, and administering contests or incentive programs.  These third parties may process Personal Information for those business purposes. For instance, if you request a brochure, we may share Personal Information about you with fulfillment and management agencies to complete your request.  
• Dealers and Retailers. We may share Personal Information with third parties that offer our products for sale. The third-party dealer or retailer may contact you directly by email, phone, or postal mail. If you provide any Personal Information to such a third party through its website or otherwise, your transaction will occur with the third party (and not on the Services) and the Personal Information you provide will be collected pursuant to the privacy policy of that third party. Finnleo recommends that you review the privacy policy of third parties who may contact you about Finnleo or Affiliated Entities’ products or services.  
• Advertising Partners. We may share Personal Information with advertising companies that collect information about your activities on the Services and other third party sites to help us better market our products and Services to you.
• Other Third Parties.  We may share Personal Information with unaffiliated third parties, including dealers and retailers discussed above, to permit such third parties to send you marketing materials.  
• E-mails to Friends. Please note that any Personal Information you provide in connection with sending an electronic postcard or other message to a friend through the Services, such as your name and your e-mail address, will, of course, be disclosed to your friend.
• Social Media. We may share any Personal Information you provide with your friends associated with your social media account, to other website users and as well as to your social media account provider, in connection with your social sharing activity, such as if you connect your social media account to your Services account or log-into your Services account from your social media account. By connecting your Services account and your social media account you authorize us to share information with your social media account provider and you understand that the use of the information we share will be governed by the social media site’s privacy policy. If you do not want your Personal Information shared with other users or with your social media account provider, please do not connect your social media account with your Services account and do not participate in social sharing on the Services.
• Promotions. We may share the Personal Information you provide in connection with sweepstakes, contests and similar promotions with third party sponsors of such promotions (irrespective of whether such promotions are hosted by us), or otherwise in accordance with the rules applicable to such promotion. Please see the “Sweepstakes, Contests, and Other Promotions” section below for more information on participating in such activities.
• Assignment. We may transfer information that we collect from Service users to an Affiliated Entity or a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of Finnleo’s business, assets, or stock (including without limitation in connection with any bankruptcy or similar proceedings).
• Other Disclosures. We may share your Personal Information as we believe to be necessary or appropriate: (i) under applicable law, which may include laws outside your country of residence; (ii) to comply with the request of a law enforcement or regulatory agency (including agencies outside your country of residence) or other legal process; (iii) to protect our operations or those of any of the Affiliated Entities; (iv) to protect the rights, privacy, property, interests or safety of Finnleo, the Affiliated Entities, Services visitors, customers, business partners, employees or the public; (v) to permit us to pursue available remedies or limit the damages that we may sustain (vi) to enforce our Terms of Use; and (vii) to respond to an emergency.
• Co-Branded Pages. From time to time, we may enter into a special relationship with another company that is not owned by or affiliated with Finnleo to provide additional features on the Services, such as co-branded pages. Both Finnleo and the third-party collect Personal Information on these co-branded pages. Finnleo’s collection, use, and disclosure of the Personal Information are subject to this Privacy Policy, and the third party’s collection, use and disclosure of the Personal Information are subject to its privacy policy. You should review the privacy policies posted on these co-branded pages to understand how Personal Information collected through these pages will be collected and used.
• Purchases. We may use third-party payment services (each, a “Payment Service”) to collect payments made through the Services. If you wish to make a payment through the Services, you will be directed to a webpage that is hosted by the Payment Service (or the Payment Service’s service providers) and not by us (such page, the “Payment Service Page”). Any Personal Information that you provide through the Payment Service Page will be collected by Payment Service and not by us, and will be subject to Payment Service’s privacy policy, rather than this Policy. Finnleo has no control over, and shall not be responsible for, Payment Service’s use of information collected through the Payment Service Page.

How We Collect and Use Other Information

We may also collect other information that does not directly reveal your specific identity or directly relate to an individual through the Services (“other information”), such as domain, URL, browser, device and operating system information, information about visits to the Services pages, App usage data, physical location and information collected through cookies, pixel tags and other technologies, demographic information provided by you that does not reveal your specific identity, and information that has been aggregated in a manner such that it no longer reveals your specific identity.

We and our third-party service providers may collect other information in a variety of ways, including:  

• Through your browser or device. Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services (such as the App) you are using.  We use this information to ensure that the Services function properly.  
  
  Through your use of the Apps. When you download and use an App, we and our service providers may track and collect App usage data, such as the date and time the App on your device accesses our servers and what information and files have been downloaded to the App based on your device number.
• Using cookies. Cookies are pieces of information stored directly on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other traffic data. We and our service providers use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience while using the Services, as well as for online tracking purposes. We can recognize your computer to assist your use of the Services. We also gather statistical information about the usage of the Services in order to continually improve their design and functionality, understand how the Services are used and to assist us with resolving questions regarding the Services. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use cookies in online advertising to track responses to our advertisements and to track how you arrived at our site from another website to improve your online experience with us. To learn more about the cookies or trackers currently deployed on our Sites, please click here.
  
  If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies, or be given the choice of declining or accepting the transfer to your computer of a particular cookie (or cookies) from a particular site. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html.  However, if you do not accept these cookies, you may experience some inconvenience in your use of the Services.  For example, we may not be able to recognize your computer and you may need to log in every time you visit the applicable Services.  You also may not receive advertising or other offers from us that are relevant to your interests and needs.  
• Using pixel tags and other similar technologies.  Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some Services to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.  
• We respond to browser do-not-track signals.
• Using Google Analytics.  We use Google Analytics, a Google service, and HubSpot, that uses cookies and other similar technologies to collect and analyze information about use of the Services and report on activities and website trends.  We also use an enhancement to Google Analytics called “Demographics and Interest Reporting,” through which Google provides us with information about our users’ demographics (e.g., age, gender) and interests.  This information, which Google may collect by tracking a user’s behavior across third-party websites, helps us to learn more about our users.  You can learn about Google’s practices in connection with this enhanced tracking and opt out of it by visiting www.google.com/settings/ads or by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
• Using Adobe Flash technology (including Flash Local Shared Objects (“Flash LSOs”)) and other similar technologies.  We may use Flash LSOs and other technologies to, among other things, collect and store information about your use of the Services.  If you do not want Flash LSOs stored on your computer, you can adjust the settings of your Flash player to block Flash LSO storage using the tools contained in the Website Storage Settings Panel. You can also control Flash LSOs by going to the Global Storage Settings Panel and following the instructions (which may include instructions that explain, for example, how to delete existing Flash LSOs (referred to “information on the Macromedia site), how to prevent Flash LSOs from being placed on your computer without your being asked, and (for Flash Player 8 and later) how to block Flash LSOs that are not being delivered by the operator of the page you are on at the time).  Please note that setting the Flash Player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications, including, potentially, Flash applications used in connection with the Services or our online content.
• Physical Location.  We may collect the physical location of your device by, for example, using satellite, cell phone tower, or Wi-Fi signals. We may use your device’s physical location to provide you with personalized location-based services and content. We may also share your device’s physical location, combined with information about what advertisements you viewed and other information we collect, with our marketing partners to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns.  In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you choose to deny such uses and/or sharing, we and/or our marketing partners may not be able to provide you with the applicable personalized services and content.
• From you.  Information, such as your preferred means of communication is collected when you voluntarily provide it.  Unless combined with personal information, this information does not personally identify you.
• By aggregating information.  Aggregated Personal Information does not personally identify you or any other user of the Services (for example, we may aggregate Personal Information to calculate the percentage of our users who have a particular telephone area code).

We may use and disclose other information for any purpose, except where we are required to do otherwise under applicable law.  If we are required to treat other information as Personal Information under applicable law, then we may use it for all the purposes for which we use and disclose personal information.

In some instances, we may combine other information with Personal Information (such as combining your name with your geographic location). If we do combine any other information with personal information, the combined information will be treated by us as Personal Information in accordance with this Policy.

Selling of Personal Information

We do not "sell”, as that term is defined by applicable law, your Personal Information or any other information we collect about you to any affiliated or unaffiliated third parties.  

Retention of Personal Information

We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was collected.  The criteria used to determine our retention periods include:  

• The length of time we have an ongoing relationship with you and provide services to you (for example, for as long as you have an account with us or keep using our services) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

User Generated Content Functions

Certain pages on the Services, including our Social Media Pages, enable users to create their own profile page or submit their own content (for example, message boards, forums, chat functionality and blogs, among other services). Any information you disclose in connection with such services may be publicly available and be read, collected, or otherwise used by anyone who visits the page on which you have chosen to comment, and you should exercise caution in deciding whether to disclose your information there. Finnleo cannot prevent such publicly available information from being used by others in a manner that may violate this Policy, the law, or your personal privacy and safety, and is not responsible or liable for the results of any postings or the use or disclosure of any information that you disclose via such postings.

Choice: Opt-Out

If you do not wish to receive marketing-related emails from us you may opt-out of receiving such marketing-related emails and from such sharing by following the unsubscribe instructions contained in each such email.

We will endeavor to comply with your request as soon as reasonably practicable. Please note that, if you opt-out as described above, we will not be able to remove Personal Information about you from the databases of Affiliated Entities or other third parties with which we have already shared your Personal Information as of the date on which we implement your opt-out request. If you wish to cease receiving marketing-related emails from such Affiliated Entities or other third parties, please contact such Affiliated Entities or other third parties directly or utilize any opt-out mechanisms set forth in their respective privacy policies or marketing-related emails.

Sweepstakes, Contests, and Other Promotions

We may operate sweepstakes, contests, raffles and similar promotions through the Services that may require online registration with us or with third-party sponsors of such promotions.  You should carefully review the rules of each promotion in which you participate through the Services, as they may contain additional important information about Finnleo’s or a sponsor’s use or disclosure of your personal information. To the extent that the terms and conditions of such rules concerning the treatment of Personal Information conflict with this Policy, the terms and conditions of such rules shall control.  

Third-Party Services

The Services may contain links to other sites which are not operated by Finnleo. Finnleo IS NOT RESPONSIBLE FOR THE PRIVACY PRACTICES OR THE CONTENT OF SUCH OTHER WEBSITES, INCLUDING WEBSITES OPERATED BY AFFILIATED ENTITIES. We provide such links only as a convenience, and the inclusion of links on the Services does not imply endorsement of the linked site by Finnleo. If you provide any Personal Information through any such third-party website, your transaction will occur on such third party’s website (and not on the Services) and the Personal Information you provide will be subject to the privacy policy of that third party. Finnleo recommends that you review the privacy policy of third-party websites arrived at from links on the Services.

In addition, we are not responsible for the information collection, usage, disclosure or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Apps or our Social Media Pages.  

Third-Party Advertisers

We may use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Services and other websites or online services, based on information relating to your access to and use of the Services and other websites or online services on any of your devices, as well as on information received from third parties. To do so, these companies may place or recognize a unique cookie on your browser or use similar technologies, including pixel tags. They may also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.

If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Policy, please visit http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/. You may download the AppChoices app at www.aboutads.info/appchoices to opt out in mobile apps.

Security of Personal Information

Finnleo takes measures designed to protect Personal Information collected through the Services against unauthorized access, disclosure, alteration or destruction. Unfortunately, however, no security system or system of transmitting data over the Internet can be guaranteed to be entirely secure.  If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us in accordance with the “Questions” section below.

For your own protection, we encourage you not to include sensitive personal information, such as payment card information, in any emails you may send to us. Finnleo will not request sensitive Personal Information in our emails to you.

Jurisdictional Issues

Your Personal Information may be stored and processed in any country where we have facilities, where our Affiliated Entities are located, or in which we engage service providers, and by using the Services you understand that your information will be transferred to countries outside of your country of residence, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your personal information.

ADDITIONAL INFORMATION UNDER THE LAWS OF CALIFORNIA AND OTHER JURISDICTIONS

Collection, Disclosure, Sale and Sharing of Personal Information

The following chart details which categories of Personal Information we collect and process, as well as which categories of Personal Information we disclose to third parties for our operational business purposes, including within the 12 months preceding the date this Privacy Policy was last updated. The chart also details the categories of Personal Information that we “share” for purposes of cross-context behavioral or targeted advertising, including within the 12 months preceding the date this Privacy Policy was last updated.

We do not sell Personal Information as defined under applicable law. We have not engaged in such activities in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the foregoing, we do not knowingly sell or share the Personal Information of minors under 16 years of age.

Use of Sensitive Personal Information

Subject to your consent where required by applicable law, we may use Sensitive Personal Information for purposes of providing goods or services as requested by you; ensuring security and integrity; short term transient use such as displaying first party, non-personalized advertising; performing services for our business, including maintaining and servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, or providing similar services on behalf of our business; and activities relating to quality and safety control or product improvement.

Individual Requests

Subject to applicable law, you may make the following requests:

1. You may request to know whether we process your Personal Information, and to access such Personal Information.
   1. If you are a California consumer, you may request that we disclose to you the following information covering the 12 months preceding your request:
      1. The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
      2. The business or commercial purpose for collecting sharing or selling (if applicable) Personal Information about you;
      3. The categories of Personal Information about you that we sold or shared (as defined by the CCPA) and the categories of third parties to whom we sold or shared such Personal Information (if applicable); and
      4. The categories of Personal Information about you that we otherwise disclosed, and the categories of third parties to whom we disclosed such Personal Information (if applicable).
2. You may request to correct inaccuracies in your Personal Information;
3. You may request to have your Personal Information deleted.
4.  You may request to receive a copy of your Personal Information, including specific pieces of Personal Information, including, where applicable, request to obtain a copy of your Personal Information in a portable, readily usable format;
5. You may request to opt out of targeted advertising (as defined by applicable privacy law) or the “sharing” of your Personal Information for cross-context behavioral advertising (as defined by applicable privacy law); and
6. You may request to opt out of the “sale” of your Personal Information, as defined under applicable privacy law; however, please note that we do not “sell” Personal Information.
7. You may request to opt out of the processing of your Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you; however, please note that we do not use your Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

We will not unlawfully discriminate against you exercising your rights applicable privacy law.  To make a privacy request, please contact us at privacy@sauna360.com or 1-888-780-4427. We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the Personal Information subject to the request. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies. We may need to request additional Personal Information from you, such as name, email address, postal address, and purchase history to verify your identity and protect against fraudulent requests. You may make a request on behalf of a child who is under 13 years old if you are the child’s parent or legal guardian.  If you make a request to delete, we may ask you to confirm your request before we delete your Personal Information.

We use services to help deliver targeted advertisements to you as described above. Applicable privacy laws may classify our use of some of these services as “sharing” your personal information with the advertising partners that provide the services, from which you have the right to opt-out.  You can submit requests to opt-out of tracking for advertising purposes here: Do Not Share My Personal Information.  Your request to opt-out will apply only to the browser and the device from which you submit the request.  You can also broadcast the Global Privacy Control (GPC) to opt-out of targeted advertising for each participating browser you use. To learn more about GPC, visit https://globalprivacycontrol.org.

Appeal Process

If we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us via privacy@sauna360.com or 1-888-780-4427.

Authorized Agents

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Individual Requests.”  Not all kinds of requests can be made by authorized agents in all states. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Individual Requests” or confirm that you provided the agent permission to submit the request.

De-Identified Information

Where we maintain or use de-identified or aggregated data, we will continue to maintain and use the de-identified or aggregated data only in a de-identified or aggregated fashion and will not attempt to re-identify the data.

QUESTIONS

If you would like to exercise your privacy rights under the laws applicable to your place of residence, please see ADDITIONAL INFORMATION UNDER THE LAWS OF CALIFORNIA AND OTHER JURISDICTIONS below. If you have questions about this Policy or how Finnleo processes your personal information, you may contact Kevin Edwards, Director of Data Analytics and Privacy at Masco Corporation, our parent company, whom is responsible for overseeing our privacy program, by emailing consumerprivacy@mascohq.com or calling 1-833-724-0948.  

ADDITIONAL INFORMATION REGARDING THE EUROPEAN UNION, EUROPEAN ECONOMIC AREA, AND SWITZERLAND

International Personal Information Handling  

We take assorted measures to meet applicable legal requirements for the transfer of your Personal Information to recipients in countries outside of the EU, EEA or Switzerland to ensure that the transfer and handling of your Personal Information receives adequate protection in compliance with applicable data protection rules such as the General Data Protection Regulation (“GDPR”), including the use of EU Standard Contractual Clauses and verifying the recipients have adopted Binding Corporate Rules or adhere to the EU-US and Swiss-US Privacy Shield Framework. Where your Personal Information is transferred within Finnleo or Sauna360, we use an intracompany data transfer agreement.

Personal Information Retention

Your personal information will be retained no longer than reasonably necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required by applicable law. Generally, this means we will retain your personal information so long as we have your consent to do so unless there is legitimate business or legal purpose to retain your personal information for a longer period (such as tax regulations, commercial laws or, for example, warranty purposes).

Your Rights

You have the right to request under the GDPR and other relevant European international or local data protection rules: (i) access to your personal information (Art. 15 GDPR); (ii) correction of your personal information if it is incomplete or inaccurate (Art. 16 GDPR); (iii) right to deletion (Art. 17 GDPR); (iv) right to restriction of processing (Art. 18 GDPR); (v) right to data portability (Art. 20 GDPR), and (vi) right to object to the processing of your data (Art. 21 GDPR). These rights do not apply if we can show there are compelling and legitimate business or legal reasons for processing that outweigh your interests, or if we need your data for the establishment, exercise, or defense of legal claims. If you like would to request a copy of your personal information or exercise any of your other rights, please contact us at privacy@sauna360.com.