Privacy Policy – RELEX Website

1. Introduction and Scope

This RELEX website privacy notice (“Notice“) informs you about how Retail Logistics Excellence – RELEX Oy (“RELEX Oy“) and its affiliated companies globally (jointly “RELEX“) collect and process data and personal data  in the context of RELEX website at www.relexsolutions.com and any associated web pages, microsites, and landing pages operated by RELEX (collectively and separately, the “Website“).

This Notice applies to all visitors and users of the Website, regardless of location. Specific websites may also have complementary notices in addition to this Notice.

This Notice is not exclusive, and it only focuses on data collection and processing taking place via RELEX Website infrastructure, individual pages may include or partake to data collection and processing for other contexts. In such case, we inform about related data processing in appropriate context via separate privacy notices.

Links to some of the related notices are provided at the end of this document.

In this Notice:

• “personal data” means any information that can directly or indirectly identify you as an individual.
• “cookies” and “trackers” refer to small data files and similar technologies used to recognise or identify your device when you visit the Website. These are described in full in Section 8.

RELEX is committed to respecting your privacy and to complying with applicable data protection and privacy laws, including the EU General Data Protection Regulation (“GDPR“) and the EU ePrivacy Directive as implemented in Finland and other applicable jurisdictions.

2. Data Controller

The data controller responsible for the processing of personal data under this Notice is:

Retail Logistics Excellence – RELEX Oy
Business ID: FI 1963444-1
Address: Postintaival 7, FI-00230 Helsinki, Finland, or

RELEX Solutions Inc.
Business ID: 16045074
Address: 1230 Peachtree Street NE
Suite 500, Atlanta, GA 30309, United States of America

Other RELEX affiliates may process personal data on RELEX Oy’s behalf for the purposes described in this Notice. A list of RELEX affiliates is available at www.relexsolutions.com/contact/.

Contact for privacy matters: privacy@relexsolutions.com

3. Personal Data We Collect

RELEX collects personal data when you visit or interact with the Website. The types of personal data collected depend on how you use the Website.

Data collected automatically

When you visit the Website, certain technical data is collected. Some data is collected automatically for essential purposes; other data is only collected with your prior consent through cookies and similar tracking technologies:

• IP address and approximate geographic location derived from it
• Browser type, language, and version
• Operating system
• Pages visited, time and duration of visits, and navigation paths
• Referring URL (the page you came from)
• Device type and identifiers
• Clicks and interactions with content (heat mapping and session recording)
• Email opens and clicks, tracked by our email platform, and your subsequent Website activity when you arrive via an email link (marketing consent required)
• Conversation content and interaction data generated when you engage with RELEX’s interactive AI assistant (1Mind) on the Website
• AI bot and crawler traffic patterns, derived from server-side request log analysis (Profound Agent Analytics)
• Contact-level identification data, where you are identifiable as a US-based visitor through digital fingerprinting and publisher network matching (Vector)

This data is collected through cookies and similar tracking technologies, as well as through server-side log analysis, as described in detail in Section 8 of this Notice.

4. Purposes and Legal Bases for Processing

RELEX processes personal data collected through the Website for the following purposes, each on the stated legal basis under GDPR:

5. Contact Form Data

When you submit a form on the Website — for example a contact form, demo request, or event registration — RELEX collects your first name and last name, business email address, phone number, company name, job title, country or business address, and the content of your message or request.

Purpose. To respond to your enquiry, manage the customer or prospect relationship and related communications, and, where relevant, to carry out sales follow-up and direct marketing.

Legal basis. Legitimate interest (Article 6(1)(f)), and, where required by applicable law, your consent (Article 6(1)(a)) for direct marketing.

Retention. Your personal data is retained for as long as there is a legitimate business need to maintain the relationship or follow up on your enquiry. You may request deletion at any time by contacting privacy@relexsolutions.com.

RELEX may combine the data you submit with data available from public sources or from an existing business relationship between RELEX and your organisation.

Contact and prospect data submitted through the Website is processed as part of RELEX’s wider sales and marketing activities. For full details of the processors involved, international transfers, and the safeguards applied, please see the RELEX Sales and Marketing Privacy Notice.

If your submission relates to a work application, that processing is described here.

6. Third-Party Services and Data Processors

RELEX uses a number of third-party services on the Website that may collect or process personal data. The table below lists the primary third-party services, their category, and links to their privacy policies.

Visitor Identification (US visitors only)

For visitors located in the United States, RELEX uses Vector (Vector Labs, Inc.) to identify individual website visitors at contact level. This section explains what that involves.

How it works. When you visit the Website, an IP address is processed to determine your location. Where you are located in the United States and you have consented, Vector matches your device against a third-party publisher network using digital fingerprinting and hashed email addresses, and returns identifying information to RELEX. Vector obtains this information from external data sources including LiveIntent, 5×5, People Data Labs, and CoreSignal. Visitors located in the European Union/EEA are not identified at contact level; IP address processing to determine location applies to all visitors and is described in Section 3.

Information received. Name, email address, LinkedIn profile, job title, and company name, together with the pages you viewed on the Website.

How RELEX uses it. RELEX combines this information with its own CRM records to identify prospective business contacts, segment audiences, and deliver targeted advertising. The resulting data may be shared with RELEX’s advertising platforms (LinkedIn, Meta, Google, Reddit) and enrichment tools (HubSpot, Clay).

Legal basis. Consent, obtained through the cookie consent panel before any identification takes place.

How long. Information obtained through Vector is used for as long as RELEX profiles you as an individual with a potential interest in RELEX products and services, and in any event for no longer than two (2) years. Where this information is added to a RELEX CRM record, it is thereafter retained under RELEX’s standard CRM retention scheme.

Withdrawing consent. You can withdraw consent at any time via the “Cookie Settings” link in the footer of any page. Withdrawal stops future identification but does not affect processing already carried out.

7. International Transfers of Personal Data

RELEX operates globally. Some of the personal data collected through the Website may be transferred to and processed in countries outside the European Union/EEA, including the United States, where a number of RELEX’s third-party service providers are located.

When transferring personal data outside the EU/EEA, RELEX ensures that the transfer is lawful and carried out with appropriate safeguards in place, including:

• Agreements based on the EU Commission’s Standard Contractual Clauses (SCCs);
• Transfer to countries with an EU adequacy decision; or
• Other measures permissible under applicable data protection legislation.

When transferring your personal data outside the European Union to the countries or entities not providing adequate level of personal data protection, we will ensure that the transfer is legal and safe by concluding agreements based on the European Union Commission’s standard contractual clauses with the recipient of the personal data and/or taking other safeguards.

You can request additional details regarding the transfer and the appropriate safeguards in place and obtain a copy of the related documents. See the end of this notice for contact information.

8. Cookies and Tracking Technologies

8.1 What are cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website and certain third parties to recognise your device and store certain information about your preferences or actions over time.

In addition to cookies, the Website uses related tracking technologies such as tracking pixels, web beacons, unique device identifiers, and browser fingerprinting (together referred to as “trackers”). Where this Notice refers to cookies, it covers all such technologies unless otherwise stated.

8.2 Categories of cookies

RELEX uses the following categories of cookies on the Website:

Category 1 – Strictly Necessary / Essential These cookies are required for the Website to function and cannot be disabled. They do not require your consent. They enable core functionality such as page navigation, access to secure areas, and storing your cookie preferences.

Category 2 – Analytics / Performance These cookies help RELEX understand how visitors interact with the Website by collecting information about pages visited, time spent on pages, and errors encountered. The data collected is aggregated and used to improve the Website. These cookies require your consent.

Category 3 – Functional These cookies enable enhanced functionality and personalisation, such as video players and live chat services. They may be set by RELEX or by third-party providers. These cookies require your consent.

Category 4 – Marketing / Advertising These cookies track your browsing activity across websites to enable RELEX and its advertising partners to deliver targeted advertisements relevant to your interests. They also allow RELEX to measure the effectiveness of its advertising campaigns. These cookies require your consent.

Server-side log analysis (no cookies) In addition to client-side cookies, RELEX uses Profound Agent Analytics to analyse traffic to the Website at the server level. This tool works by collecting HTTP server request logs — including IP addresses, request URLs, user agent strings, HTTP headers, and response metadata — and does not place any cookies or JavaScript trackers on your device. Because no data is stored on your device, this analysis does not require cookie consent; however, it involves processing of your IP address as described in Section 3.2. The purpose is to identify and classify AI crawler and bot traffic versus human traffic, enabling RELEX to understand how AI systems interact with the Website’s content.

Similarly, Vector uses digital fingerprinting and a third-party publisher network to identify individual website visitors at the contact level. Vector’s identification operates on US-based visitors only; it does not collect contact-level personal data from visitors based in the European Union/EEA, in compliance with GDPR. Where Vector sets identifiers on your device, these fall within the Marketing/Advertising category and require your consent.

8.3 Cookie details

The table below lists the main cookies currently used on the Website. Please note that the specific cookies in use may change as RELEX updates its tools and partners. The most up-to-date list is reflected in the cookie consent management panel accessible via the “Cookie Settings” link in the footer of the Website.

Strictly Necessary / Essential Cookies

Analytics / Performance Cookies

Functional Cookies

Marketing / Advertising Cookies

Note on Profound Agent Analytics: Profound does not set any cookies or client-side trackers. It operates exclusively through server-side HTTP log analysis. It therefore does not appear in the cookie table above but is described in Section 8.3 and listed in Section 6. 

Note: Cookie names, durations, and owners are subject to change as RELEX updates its tools and partners. The above table reflects the cookies in use as of the date of the last update of this Notice. The cookie consent panel on the Website reflects the current state at all times.

8.4 How to manage your cookie preferences

Cookie consent panel When you first visit the Website, a cookie banner will appear asking for your consent to use non-essential cookies. You can choose to accept all cookies, reject all non-essential cookies, or customise your preferences by category.

You can review and change your cookie preferences at any time by clicking the “Cookie Settings” link in the footer of any page on the Website. This will reopen the cookie consent panel and allow you to withdraw or modify your consent.

Browser settings Most browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, delete cookies after each session, or alert you when a cookie is being set. Please note that disabling cookies may affect the functionality of the Website. For guidance, visit the help pages of your browser:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Apple Safari

Opting out of interest-based advertising To opt out of interest-based advertising delivered by third parties, you can use the following tools:

• EU: www.youronlinechoices.eu
• US: optout.networkadvertising.org and www.aboutads.info/choices
• Google: adssettings.google.com
• LinkedIn: linkedin.com/psettings/advertising
• Meta/Facebook: www.facebook.com/adpreferences
• Microsoft: choice.microsoft.com
• Hotjar: www.hotjar.com/legal/compliance/opt-out

9. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data processed by RELEX:

• Right of access: You have the right to request a copy of the personal data that RELEX holds about you and to receive information about how it is processed.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”): You have the right to request that RELEX delete your personal data where there is no longer a legitimate basis for processing it.
• Right to restrict processing: You have the right to request that RELEX limit the processing of your personal data in certain circumstances.
• Right to object: You have the right to object to processing based on legitimate interest or for direct marketing purposes at any time. Where you object to direct marketing, RELEX will cease processing your data for that purpose immediately.
• Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (including consent to non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Consent to cookies can be withdrawn via the Cookie Settings link in the Website footer.
• Right to lodge a complaint: You have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or with the supervisory authority in your country of residence or place of work if you believe that RELEX has not complied with applicable data protection law.

To exercise those rights that cannot be exercised via cookie settings or marketing settings, please contact RELEX at: privacy@relexsolutions.com

RELEX will respond to your request within one month. Requests are free of charge unless they are manifestly unfounded or excessive.

10. Retention of Personal Data

RELEX retains personal data only for as long as necessary for the purposes for which it was collected, and in accordance with applicable law.

• Contact form data and prospect data are retained for as long as there is a legitimate business need to maintain the relationship, typically for the duration of the sales process and for a reasonable period thereafter.
• Analytics and performance data collected via cookies is retained in accordance with the cookie durations set out in Section 8.4 and as per the data retention policies of the relevant third-party service providers.
• System logs may be retained for up to 12 months for security and operational maintenance purposes.
• Consent records: RELEX retains the consent records for accountability purposes as required by applicable laws.

Once the applicable retention period expires, personal data is deleted or anonymised.

11. Security

RELEX has implemented appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Restricting access to personal data to authorised personnel on a need-to-know basis;
• Requiring third-party service providers to implement adequate data security measures;
• Using encryption and secure transmission protocols where appropriate.

More information about RELEX’s security practices is available at www.relexsolutions.com/security-compliance/.

12. Profiling and Automated Decision-Making

RELEX uses personal data collected through the Website to build profiles of customers and prospective customers, and to segment and target communications based on characteristics such as geographic location, industry, job role, and demonstrated interests. This helps RELEX deliver more relevant content and communications.

For visitors located in the United States, this profiling includes identification at contact level, meaning that RELEX may link your browsing activity on the Website to you as a named individual, and combine it with information about you obtained from third-party sources. This is described in Section [N] and takes place only where you have consented.

Profiling is used to prioritise sales outreach and to deliver targeted advertising. RELEX does not use personal data collected through the Website for automated decision-making that produces legal or similarly significant effects on individuals.

13. Contact Information

For any questions, concerns, or requests related to this Notice or to the processing of your personal data by RELEX, please contact:

Retail Logistics Excellence – RELEX Oy
Business ID: FI 1963444-1
Address: Postintaival 7, FI-00230 Helsinki, Finland
Website: www.relexsolutions.com

Privacy Director: Hannes Saarinen
Email: privacy@relexsolutions.com

If you wish to unsubscribe from RELEX marketing communications, please use the unsubscribe link included in any RELEX marketing email, or contact us at the address above.

If you feel that your rights have not been upheld, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Website: tietosuoja.fi
Email: tietosuoja@om.fi
Address: PO Box 800, FI-00531 Helsinki, Finland

14. Changes to This Notice

To keep this Notice accurate and up to date, RELEX will make changes and additions to it from time to time, for example when we introduce new tools or services on the Website, or when there are changes in applicable law.

We will publish the updated Notice on the Website and update the “Last updated” date at the top.

We recommend that you revisit this Notice from time to time to stay informed of any updates. Your continued use of the Website after any changes take effect will constitute your acknowledgement of the revised Notice.