This privacy policy will explain how XO Boats uses the personal data we collect from you when you use our website.
Data controller
The data controller is: XO Boats Oy Ludviginkatu 3-5 A, 00130 Helsinki, Finland Email: info@xoboats.fi
What data do we collect?
XO Boats collects the following data:
- Personal identification details provided via the dealer enquiry form in the Configurator (name, email address, telephone number, country/selected dealer).
- Browsing data via Google Analytics 4 (in aggregated/pseudonymised form, subject to prior consent only).
How do we collect your data?
You provide most of the data we collect directly. We collect and process your data when:
- Please submit an enquiry to your local dealer via the Configurator on the website, providing your contact details.
- You use or view our website via browser cookies (Google Analytics 4, subject to your consent).
Legal basis for processing
We process your data on the following grounds:
- Consent (Article 6(1)(a) of the GDPR) — for the sending of marketing communications and for analytics cookies (GA4).
- Performance of a contract (Article 6(1)(b) of the GDPR) — for the processing of orders or enquiries you send to us.
- Legitimate interest (Article 6(1)(f) of the GDPR) — for website security and fraud prevention.
How we use your data
XO Boats collects your data for the following purposes:
- To send you information and emails about our products and services that may be of interest to you (only with your explicit consent).
- To send you marketing material about our products and services (only with your explicit consent).
- To analyse website usage in aggregate form using Google Analytics 4, with a view to improving its functionality and content (only subject to consent to analytics cookies).
Google Analytics 4 and data transfers outside the EU
Our website uses Google Analytics 4 (provided by Google Ireland Limited), a statistical analysis tool that collects pseudonymised browsing data (e.g. pages visited, session duration, traffic source).
Data collected via GA4 may be transferred to servers located in the United States. Google adheres to the EU-US Data Privacy Framework and uses standard contractual clauses (SCCs) as a safeguard for such transfers.
This processing takes place solely with your consent, which you have given via the cookie banner. You may withdraw your consent at any time via the website’s cookie settings.
For further information: Google’s Privacy Policy.
Cookies used
| Cookie | Supplier | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | It distinguishes unique users | 2 years |
| ga* | Google Analytics 4 | Retains the session status | 2 years |
| [technical session cookies] | XO Boats | Basic website functionality | Session |
How we store your data
XO Boats stores your data securely on its own private servers. Access to this data is restricted, and appropriate security protocols are in place.
XO Boats will retain your email address, name and location for up to 2 years. Once this period has elapsed, the data will be deleted from our records and servers.
Data collected via Google Analytics 4 is retained for a maximum of 14 months, in line with Google’s recommended default settings.
Marketing
XO Boats would like to send you information about our products and services that may be of interest to you, as well as those of our partner companies.
If you have agreed to receive marketing communications, you can always unsubscribe at a later date.
You have the right, at any time, to ask XO Boats to stop contacting you for marketing purposes.
If you no longer wish to be contacted for marketing purposes, please contact us at info@xoboats.fi.
What are your rights regarding data protection?
XO Boats wishes to ensure that you are fully aware of all your data protection rights. Every user has the right to:
Right of access – request a copy of your personal data.
Right to rectification – to request the correction of inaccurate data.
Right to erasure – to request the erasure of your personal data, subject to certain conditions.
Right to restriction of processing – to request that the processing of your data be restricted, under certain conditions.
Right to object – you may object to the processing of your data, subject to certain conditions.
Right to data portability – to request that your data be transferred to another organisation or directly to you, subject to certain conditions.
If you wish to exercise any of these rights, please contact us at info@xoboats.fi. We will respond to your request within 30 days, as required by Article 12 of the GDPR.
Complaints
If you believe that the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the relevant supervisory authority:
Office of the Data Protection Ombudsman (Finland) Office of the Data Protection Ombudsman — www.tietosuoja.fi
If you live in another EU country, you can also contact the supervisory authority in your country of residence.