Hyxo Oy Privacy Policy: Customer and Marketing Data

The privacy policy was updated and entered into force on 12 March 2026. 

Hyxo Oy 
Sortilantie 5, 04260 Kerava, Finland 
Tel. +358 10 417 4500 
hyxo@hyxo.fi 

This privacy policy explains how Hyxo Oy processes personal data in the management of customer relationships and marketing when selling and delivering products, solutions, and services. 

Purposes of Processing Personal Data Personal data is processed for the following purposes: 

Fulfilment of contracts: 

Personal data is collected and processed so that Hyxo Oy can offer and sell products, solutions, and services and fulfil its contractual obligations. In addition, data is processed so that Hyxo Oy can comply with its legal obligations related to accounting and the retention of accounting documents. Providing the data may be necessary in order for us to serve you or the organization you represent

Service development:  

Personal data may be used to develop products, solutions, and services. This may include collecting feedback as well as monitoring the sales and attractiveness of our products in order to better target our services and improve usability.

Marketing: 

Personal data may be used to maintain customer relationships and for marketing purposes, as well as to monitor the use of websites in order to target marketing. You have the right to prohibit direct marketing and to withdraw your consent to electronic direct marketing at any time. 

Legal claims:  

Personal data may be processed in order to defend or present legal claims, for example in relation to unpaid invoices. 

The legal bases based on legitimate interest are described above. 

Personal Data Collected 

Hyxo Oy may collect the following information about representatives of its current and potential customer organizations: 

• Name and contact details (work phone, email, address) 

• Organization name and job title 

• Purchase history and contract terms between Hyxo Oy and you or the organization you represent 

• Information related to customer relationship management, such as correspondence and feedback 

• Information about participation in events and meetings, subscriptions to newsletters and other marketing communications, and direct marketing prohibitions 

• Special dietary requirements and other information necessary for organizing events 

• Analytics data related to the use of websites and online services 

Hyxo Oy acts as the controller of the customer and marketing register. Access to the register is limited to employees and trainees of Hyxo Oy. External service providers, such as providers maintaining web services and customer management systems, may act as data processors. Data processing agreements compliant with data protection regulations have been concluded with these parties, defining how they may process the data and ensuring appropriate handling of personal data. 

International Transfers of Personal Data 

As a rule, Hyxo Oy does not disclose or transfer personal data outside the European Economic Area (EEA). 

In some limited situations, Hyxo Oy may disclose or transfer your personal data to an entity located in a so-called third country outside the EEA where local legislation does not guarantee a level of data protection equivalent to EU regulations. In such cases, it will be ensured that the transfer is based on transfer mechanisms compliant with data protection regulations. 

Examples include: 

• Foreign organizational customers: A foreign organizational customer may have the right to receive information about how its representatives have used Hyxo Oy’s products and services, for example for invoicing purposes. If the customer organization is located abroad, this may require transferring data to a third country. 

• Service providers: Some of Hyxo Oy’s technical service providers and web analytics services may also store or process personal data in a third country. 

You can read more about transfer mechanisms on the website of the Finnish Data Protection Ombudsman: 
Transfers of personal data outside the European Economic Area | Office of the Data Protection Ombudsman. 

We assess the effectiveness of the transfer mechanism and the need for supplementary safeguards on a case-by-case basis. 

Retention Period of Personal Data

Hyxo Oy follows the retention periods described below when storing the personal data covered by this privacy notice. 

• User account: Stored for the duration of the customer relationship, i.e., until the user account is deleted. You may request deletion of your user account at any time. This may mean that you can no longer use Hyxo Oy services, for example to purchase products. 

• Purchase data: Stored for three years from the last purchase. If you have requested that Hyxo Oy notify you about updates or new similar products related to a purchased product, your data may be stored longer according to your request. 

• Newsletter subscriptions: Stored as long as the subscription remains active. You may unsubscribe at any time. 

• Direct marketing prohibition: If you have prohibited direct marketing, Hyxo Oy may store information about this restriction until you withdraw it. 

• Marketing data: Stored for up to three years. This may include information that you have participated in a specific event or meeting. 

• Special dietary information: Deleted after the event. 

• Web analytics data: Stored for up to 38 months from collection. 

• Accounting records: Stored in accordance with accounting legislation. 

• Data related to legal claims: Stored longer if necessary if Hyxo Oy has a justified reason to believe they are needed for potential future legal disputes or similar matters. 

After the retention periods described above have expired, your personal data will either be deleted or anonymized so that it can no longer be identified at the individual level. 

Rights of the Data Subject 

Under data protection legislation, you have the right to: 

• access your personal data and, in certain situations, request a copy of it or request that it be transferred to another system 

• request correction of incorrect data 

• request deletion of outdated or unnecessary data 

• request temporary restriction of processing until another request regarding your data has been resolved 

• object to the use of your data for direct marketing 

• object, on grounds relating to your particular situation, to the processing of your data based on Hyxo Oy’s legitimate interests 

Withdrawal of Consent 

If data processing is based on your consent, you may withdraw your consent at any time. This will not affect actions carried out before the withdrawal. 

Right to Lodge a Complaint 

If you are dissatisfied with the processing of your personal data by Hyxo Oy, you may lodge a complaint with the competent data protection authority. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi). 

Sources of Data 

Hyxo Oy mainly obtains personal data from you, from the organization you represent, from public sources (such as company websites and partners providing business information services), and from Hyxo Oy partners. Web analytics data is collected using analytics services as described below. 

Cookies and Web Analytics 

Hyxo Oy uses cookies on its website. These cookies may be necessary, functional, analytics-related, or marketing-related. 

Some cookies are necessary for the technical functioning of the website. These cookies do not collect information about the user that could be used for marketing or analytics purposes. 

Consent is requested for the use of cookies other than those that are strictly necessary. You may withdraw your consent at any time, but this does not affect the legality of actions already carried out. 

The web analytics services used by Hyxo Oy collect information about how the company’s websites and services are used, what content the user views, how the user navigates between pages, from where and how the user arrived at the service, whether the user has previously visited the site or service, and information about the user’s browser settings and similar factors. In some situations, this information may be identifiable at an individual level. Information may also be collected through cookies. 

Currently, Hyxo Oy uses the following analytics service: 

• Google Analytics – Hyxo Oy uses the Google Analytics service (GA4) for the purposes described above. You can read more about the personal data collected by the service here: 
  https://policies.google.com/technologies/partner-sites 

Personal data is not used for automated decision-making or profiling as defined by law. 

This privacy notice applies to Hyxo Oy websites, including hyxo.fi and shop.hyxo.fi.