Privacy & Cookie Notice
Controller
What we collect
- Contact & project data: name, company, email, phone, addresses, project details, files you upload.
- Billing data: invoice address, VAT number, payment status.
- Technical data: IP, device/browser info, pages viewed, cookie IDs
Why we use your data (GDPR Art. 6)
- Provide quotes & services (design, manufacturing, installation, maintenance) – Contract (6(1)(b)).
- Support & communications (updates, warranty) – Contract/Legitimate interests (6(1)(b)/(f)).
- Billing, accounting & legal duties – Legal obligation (6(1)(c)).
- Site operation, security & analytics – Legitimate interests (6(1)(f)); non-essential cookies only with consent (6(1)(a)).
Marketing (news, offers, case studies) – Consent (6(1)(a)) or B2B legitimate interests (6(1)(f)). You may opt out anytime.
We do not sell personal data.
Why we use your data (GDPR Art. 6)
- Provide quotes & services (design, manufacturing, installation, maintenance) – Contract (6(1)(b)).
- Support & communications (updates, warranty) – Contract/Legitimate interests (6(1)(b)/(f)).
- Billing, accounting & legal duties – Legal obligation (6(1)(c)).
- Site operation, security & analytics – Legitimate interests (6(1)(f)); non-essential cookies only with consent (6(1)(a)).
Marketing (news, offers, case studies) – Consent (6(1)(a)) or B2B legitimate interests (6(1)(f)). You may opt out anytime.
We do not sell personal data.
Cookies
We use: essential (always on), analytics, and marketing cookies. Non-essential cookies load only if you consent. Manage choices in your browser and via Cookie Settings (link on our site). Blocking cookies may affect functionality.
Sharing
- Service providers (processors): hosting, email, CRM/marketing, analytics, backups, accounting.
- Installation/logistics partners: limited project data.
- Authorities: when required by law.
Corporate transactions: under GDPR safeguards.
International transfers
Retention
- Quotes & project files: 5 years after completion (or warranty/maintenance period).
- Contracts, invoices & accounting: 6–10 years (legal requirement).
- Marketing contacts: until you unsubscribe/withdraw consent (+ brief logging).
- Logs & analytics: 14–26 months (tool settings).
Afterwards we delete or anonymise.
Your rights
You can access, rectify, erase, restrict, object (incl. direct marketing), port data you provided by consent/contract, and withdraw consent at any time.
Requests: helsinginvalomainos@gmail.com (we verify identity; we reply within GDPR timelines).
You may complain to the Office of the Data Protection Ombudsman (Finland): tietosuoja.fi.
Security
Children
Changes
We may update this Notice; changes will appear here with an updated date.