Privacy Policy

This privacy policy explains how RiverRecycle Oy (business ID 3087706-5, Kolmas linja 12 A 17, 00530 Helsinki, Finland) (“RiverRecycle”, “we” or “us”) processes personal data in connection with our website, communications, marketing and business relationships. RiverRecycle is the controller of this personal data.

1. What data do we collect?

Depending on how you interact with us, RiverRecycle may collect the following categories of personal data:

• Contact and identification data, such as your name, email address, telephone number, job title, organisation and country.
• Enquiry and correspondence data, including the information you provide in website contact forms, emails, messages, meeting requests and other communications with us.
• Business relationship data, such as your organisation, role, areas of interest, products or projects discussed, sales enquiries, communication history and notes connected with an existing or potential business relationship.
• Newsletter and marketing data, such as your email address, subscription status, communication preferences and information about your interaction with our communications, where the service used provides this information.
• Website and technical data, such as your IP address, browser type, device type, operating system, referring website, pages visited, approximate location derived from your IP address, the date and time of your visit, and other information collected through cookies or similar technologies.
• Event, meeting and media data, where relevant, such as registration details, professional contact information, meeting correspondence, photographs, recordings or other information provided in connection with an event, interview or meeting.
• Information you choose to provide voluntarily in free-text fields, attachments or other communications.

Please do not send sensitive personal data through our general website forms or by ordinary email unless it is necessary and an appropriate secure method has been agreed with us.

Providing personal data to RiverRecycle is generally voluntary. However, if you do not provide certain information, we may be unable to respond to your enquiry, provide the information or services you request, or manage our business relationship with you.

2. How do we collect your data?

You provide most of the personal data we process directly. We may collect personal data when you:

• contact us by email, telephone, social media or through a form on our website;
• request information about RiverRecycle, our projects, products or services;
• subscribe to our newsletter or other updates;
• communicate or meet with our employees or representatives;
• register for, attend or participate in an event, interview or meeting involving RiverRecycle;
• provide your contact details to us in a business context; or
• use or view our website, including through cookies and similar technologies.

We may also receive professional contact information from:

• your employer or organisation;
• publicly available professional sources, such as company websites and professional networking platforms;
• referrals or introductions from business partners and professional contacts; and
• service providers that support our website, customer relationship management, communications and marketing activities.

3. How will we use your data?

RiverRecycle may use personal data to:

• respond to enquiries and provide requested information;
• communicate with existing and potential customers, partners, suppliers, investors, donors, distributors and other stakeholders;
• manage business relationships, leads, projects, proposals, meetings and follow-up activities;
• provide information about RiverRecycle, our projects, products, services and events;
• send newsletters or other updates where you have subscribed or where another lawful basis permits us to contact you;
• operate, maintain, secure and improve our website and digital services;
• understand how visitors use our website and measure the effectiveness of our communications and campaigns;
• prevent spam, fraud, misuse and security incidents;
• maintain appropriate records of communications and business activities;
• comply with legal, regulatory, contractual and reporting obligations; and
• establish, exercise or defend legal claims.

RiverRecycle does not use the personal data covered by this website privacy policy to make decisions that produce legal or similarly significant effects based solely on automated processing.

4. What is our lawful basis for processing your data?

Depending on the circumstances, RiverRecycle processes personal data on one or more of the following bases:

• Consent, for example when you subscribe to a newsletter or agree to optional analytics or advertising cookies. You may withdraw your consent at any time.
• Steps taken at your request before entering into a contract or performance of a contract, for example when you request a proposal, pricing information or other services.
• Legitimate interests, including responding to business enquiries, maintaining professional relationships, managing sales and partnership opportunities, improving our website, protecting our systems and communicating relevant information to professional contacts. We assess these interests against your rights and reasonable expectations.
• Legal obligation, where processing is necessary to comply with applicable laws, regulatory requirements or binding requests from authorities.

5. Marketing and updates from RiverRecycle

If you subscribe to RiverRecycle communications, we may send you updates about our company, projects, products, events and activities.

In a business-to-business context, we may also contact professional contacts about information that is relevant to their role or organisation where permitted by applicable law and where our legitimate interests are not overridden by the individual’s rights.

You may opt out at any time by:

• using the unsubscribe link included in a marketing email; or
• contacting us at info@riverrecycle.com.

Opting out of marketing will not prevent us from sending communications that are necessary for an existing business relationship, transaction, contract or legal obligation.

We do not sell personal data or provide our contact lists to other organisations for their independent marketing.

6. Who processes or receives your data?

RiverRecycle may use service providers to process personal data on our behalf. These fall into the following categories:

• customer relationship management, email and newsletter service providers;
• office software, communication, collaboration and document-storage providers;
• website hosting, development, maintenance and technical support providers;
• analytics, cookie-consent, security and advertising technology providers used on the RiverRecycle website; and
• professional advisers, auditors, authorities or other recipients where disclosure is required by law or reasonably necessary to protect RiverRecycle’s rights.

Service providers may process data only for the agreed purposes and subject to applicable contractual and data-protection obligations. You may request a list of the service providers that process your personal data by contacting info@riverrecycle.com.

7. International transfers

Some of RiverRecycle’s service providers may process personal data outside Finland or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, RiverRecycle relies on an appropriate legal transfer mechanism where required. This may include an adequacy decision, the European Commission’s standard contractual clauses or another safeguard permitted under applicable data-protection law.

You may contact us for further information about the safeguards relevant to your personal data.

8. How do we store and protect your data?

Personal data may be stored in RiverRecycle’s business systems and accounts, including customer relationship management, email, collaboration, document-storage and website-related systems, depending on the purpose for which the data was collected.

RiverRecycle applies reasonable organisational and technical measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures include access controls, account management, multi-factor authentication where supported, restricted permissions, security procedures and the use of established service providers.

No method of transmitting or storing information is completely secure. RiverRecycle therefore cannot guarantee absolute security, but we review our practices and take proportionate steps to reduce data-protection and security risks.

9. How long do we keep your data?

RiverRecycle keeps personal data only for as long as it is reasonably necessary for the purpose for which it was collected, including the management of an active or potential business relationship and compliance with legal, contractual, accounting, reporting and dispute-resolution requirements.

The retention period depends on the type of information and the context in which it was collected. In particular:

• enquiry and correspondence data may be kept while an enquiry or potential business relationship remains active and for a reasonable follow-up period;
• customer, supplier, partner and contractual records may be retained for the duration of the relationship and for any additional period required by law or necessary for legal claims;
• marketing subscription data is retained until you unsubscribe, withdraw consent or the information is no longer needed, although limited suppression information may be retained to ensure that your opt-out is respected;
• cookie and analytics data is retained according to the lifespan of the relevant cookie or the settings of the relevant provider; and
• information may be retained for a longer period where necessary to comply with a legal obligation, investigate a security incident or establish, exercise or defend legal claims.

When personal data is no longer required, it is deleted, anonymised or securely disposed of in accordance with RiverRecycle’s applicable procedures and the technical capabilities of the relevant system.

10. What are your data-protection rights?

Subject to the conditions and limitations set out in applicable law, you may have the following rights:

• The right of access – You may request confirmation of whether RiverRecycle processes your personal data and receive a copy of that data.
• The right to rectification – You may request correction of inaccurate personal data or completion of incomplete data.
• The right to erasure – You may request deletion of your personal data in certain circumstances.
• The right to restrict processing – You may request that RiverRecycle restrict the processing of your personal data in certain circumstances.
• The right to object – You may object to processing based on legitimate interests and to the use of your personal data for direct marketing.
• The right to data portability – Where processing is based on consent or a contract and carried out by automated means, you may request the personal data you provided in a structured, commonly used and machine-readable format and, where technically feasible, ask for it to be transmitted to another controller.
• The right to withdraw consent – Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• The right to lodge a complaint – You may submit a complaint to the competent data-protection supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).

RiverRecycle normally responds to a valid data-subject request within one month. That period may be extended where permitted by law, for example if a request is complex or multiple requests have been made. We may need to verify your identity before fulfilling a request.

Your right to object: You may object at any time to the use of your personal data for direct marketing, and we will then stop using it for that purpose. You may also object, on grounds relating to your particular situation, to processing based on our legitimate interests. In that case, we will stop the processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

To exercise your rights, contact info@riverrecycle.com.

11. Cookies and similar technologies

Cookies are small text files stored on your device. RiverRecycle’s website may also use similar technologies, such as pixels, tags or local storage.

Some cookies are necessary for the website to operate. Other cookies may be used, subject to your choices and applicable law, to understand website use, remember settings, measure communications and support advertising or campaign analysis. Where our website uses tools provided by social media or advertising platforms, such as Meta or LinkedIn, RiverRecycle and the platform provider may act as joint controllers for the collection and transmission of the relevant data. The provider’s own privacy policy applies to its further processing of that data.

Information collected through these technologies may include:

• IP address;
• browser, device and operating-system information;
• pages visited and links selected;
• referring website;
• date, time and duration of visits;
• approximate location derived from an IP address;
• cookie identifiers; and
• interactions with website content or campaigns.

12. What types of cookies do we use?

RiverRecycle’s website may use the following categories of cookies:

• Strictly necessary cookies – These support essential website functions, security, network management and cookie-preference controls. The website may not function properly without them.
• Functionality cookies – These may remember choices or settings to provide a more consistent website experience.
• Analytics cookies – These help us understand how visitors use the website, which pages are viewed and how the website performs.
• Advertising and campaign-measurement cookies – Where enabled and accepted, these may help measure campaigns, understand actions taken after viewing an advertisement and support the delivery of more relevant communications.

13. Managing your cookie preferences

When you first visit RiverRecycle’s website, you can accept or decline optional cookies through the cookie banner. Optional cookies are not placed until you have given your consent. You can change or withdraw your consent at any time through the cookie settings on our website. You can also block or delete cookies through your browser settings, although some parts of the website may then not work properly.

14. Links to other websites

Our website may contain links to other websites, including social media platforms. This privacy policy applies only to RiverRecycle’s own website and activities. If you follow a link to another website, please read that website’s privacy policy.

15. Changes to this privacy policy

RiverRecycle reviews this privacy policy regularly and may update it when our practices or applicable law change. The current version is always available on our website. This privacy policy was last updated on 21 October 2026.

16. How to contact us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

RiverRecycle Oy
Business ID 3087706-5
Kolmas linja 12 A 17
00530 Helsinki
Finland

Email: info@riverrecycle.com