Privacy Notice – RELEX Solutions Analytics

General Planning Solutions Analytics  

This page outlines how Retail Logistics Excellence – RELEX Oy (“RELEX Oy”) and its affiliated companies globally (jointly “RELEX”) utilize the third-party analytics tools (“Analytics”) in RELEX services. This notice complements the RELEX privacy notice on Planning Solutions. 

Information on cookies and related data collection on public RELEX web pages is described in a separate, dedicated privacy notice. 

Purposes 

The Analytics tool provides insights to RELEX about how users interact with RELEX’s solutions. Such insights help us identify areas for improvement, prioritize product development, and make our solutions and use processes even more intuitive and user-friendly. With data on how the solutions are used, we can better understand feature adoption and identify opportunities to improve workflows and platform functionality, simplify navigation, and enhance the overall user experience. This aligns with the purposes outlined in our Planning service privacy notice. Analytics data are retained for periods defined below to support our analytics and reporting. 

The consent data is solely used to allow or block the use of the analytics tool and to store your consent. 

RELEX does not use the personal data collected for automated decision-making or individual profiling.  

What data is processed? 

The Analytics tool processes data to help us understand how users interact with our platforms and therefore improve their experience. The types of data that are processed per solution type include: 

RELEX Plan (Forecast and Replenishment) 

• User data: Pseudonymized user ID, user role, user type, RELEX UI language, company name, company city, and company country. Identifiable personal data is pseudonymized to enable privacy preserving analytics. 
• User interface usage data: Information about user interactions, such as log-in/log-out information, clicks, navigation paths, time spent on pages, and device, browser, and operating system information. 
• Retention: Personal data is retained for up to five years. Historical metadata: The analytics tool tracks historical metadata, enabling insights across multiple platform versions.  

RELEX Promo (Pricing and Promotions) 

• User data: Pricing & Promotion user ID (numerical), project ID, session ID 
• User interface usage data: information about user interactions, such as log-in/log-out information, clicks, navigation paths, time spent on pages, technical errors and device, browser, and operating system information.  
• Retention: 30 days 

Consent tool 

The consent tool collects and processes data to track users’ consent. The types of data processed include: 

• Personal data: User email, Consent decision, Consent decision date and time 
• Retention: The Consent tool stores historical consent decisions for five years, enabling consent logs per user over time. 

Legal basis 

We collect the analytics data based on your consent. A consent tool gives users the option to allow or deny tracking and analytics data collection. 

Should you later withdraw your consent, analytics data already collected is retained. Where applicable, the continued storage and use of the data is based on RELEX’s legitimate interest in continuing to store the whole and unaltered set of previously collected data. This is a prerequisite for retaining data that is useful for the purpose it was collected. 

Collecting the consent status is needed so that RELEX complies with the said legal obligation. 

Data movement 

Source of data 

Analytics data is collected directly from users interacting with RELEX services. This includes actions taken within the UI, such as log-in/log-out information, clicks, navigation paths, and time spent on pages.  

Information on status of consent is collected when users are asked to decide whether to allow or deny UI analytics. 

Exchanges of data with customers and partners 

Information collected with the analytics tool may be shared with customers and partners to provide insights into feature adoption and user behavior. Information is shared only in aggregated and pseudonymized formats to ensure privacy. Identifiable personal data or consent status data are not shared. 

Transfers of data to processors 

The analytics vendor (Pendo.io), based in the United States, is the primary processor for the analytics data. The vendor uses sub-processors like Google Cloud Platform, Amazon Web Services, and others.  

The consent vendor (OneTrust), based in the United States, is the primary processor for the consent data. The vendor uses sub-processors including Microsoft Corporation Azure Hosting Services, Amazon Web Services, and others.  

You can read more about RELEX processors and the locations of personal data processing here. 

We ensure that the transfer is legal and safe by concluding agreements with the said sub-processors based on the EU Commission’s standard contractual clauses. (The fixed content of such clauses is available here.) 

Security 

We implement robust security measures to protect data processed with the tools, including: 

• Encryption: All data are encrypted both in transit and at rest. 
• Access controls: Role-based access ensures that only authorized RELEX personnel can view or manage data. 
• Audits: Regular security audits are conducted to identify and mitigate risks. 

Exercising your rights and contact information 

You may grant and withdraw your consent via the service user interface. For information on how to exercise your other rights and how to contact RELEX, please see RELEX privacy notice on Planning Solutions.  

Changes 

To keep this notice up to date, we make changes and additions to this from time to time. We publish the changed notice on our website or on any other channel where this privacy notice has previously been made available. Any changes apply from the date that we publish the revised notice.