Privacy policy

1. Data controller

VTA Tekniikka Oy / Mia Ström Business ID: 0124397-9 Address: Lumijälki 1, 01740 Vantaa, Finland Domicile: Vantaa Phone: +358 10 5508 0 Email: vta@vta.fi

2. Categories of data subjects

This policy concerns the personal data we process about users of the Service and/or contact persons of corporate users, as well as other individuals whose personal data the provision and receipt of the Service requires us to process.

3. Purposes of processing

Personal data is processed primarily in order to provide the Service and to manage and maintain the customer relationship. Data may also be used to monitor and investigate misuse, and to plan and develop the controller’s business operations and services. Within the limits permitted by law, we may also process personal data for marketing purposes.

4. Legal basis for processing

The processing of personal data described in this policy is based, as a rule, on the performance of our website service and on our legitimate interest in processing personal data in order to provide the Service and to conduct and develop our business. For individual data, processing may also be based on your consent or on our statutory obligation to process your personal data, for example for taxation or accounting purposes.

5. Data processed

We process the following user-related data:

• the user’s or contact person’s name, email address, phone number and other contact details, and other information provided by the user, as well as the user’s IP address
• information you provide via the contact and quote request forms, such as company name, message content, interests and preferred method of contact, and the history of our correspondence
• technical data concerning the use of the Service, such as browsing and search data (e.g. information collected by cookies)
• data concerning customer communication, marketing and other contact (including direct marketing prohibitions and consents)

6. Data disclosures

The site is a showcase and marketing website. We do not sell or rent your personal data to third parties.

Our subcontractors and service providers may process your data to the extent necessary for the provision of the Service (for example, service providers related to website hosting, email delivery and sending the newsletter). Data may also be disclosed to our service providers for ordinary data processing, financial administration and other business services, and to competent authorities or other third parties where we believe disclosure is necessary under applicable law or regulation, in order to exercise or defend our legal rights, or to protect the vital interests of any person.

The controller generally has no need to transfer your data outside the European Union or the European Economic Area in order to provide the Service. In individual cases, however, your data may, within the limits permitted by law, be transferred outside the EU or EEA based on your consent, on the need to transfer the data to perform a contract concluded with you or in your interest, or in other situations permitted by applicable legislation.

7. Data retention

Personal data is retained only for as long as we have a justified need related to the processing purposes mentioned above.

We regularly assess the existence of such needs in relation to the personal data we retain, and to the extent we assess that the need has ceased, we delete the personal data from the system or anonymise it; or, where this is not possible (for example to the extent the data is stored in backup archives), we retain it securely and prevent its further processing until deletion is possible.

Personal data related to a customer relationship is generally retained only for the duration of the active customer relationship and for a reasonable period thereafter in order to respond to any enquiries and contacts related to the customer relationship. However, to the extent the data is subject to a retention obligation arising from, for example, accounting or taxation legislation, the data is in any case retained for the minimum period required by that obligation.

8. Data security

Access to the material is restricted solely to the controller’s employees and service providers who are entitled to it for the performance of their duties. The controller uses appropriate technical and organisational measures to protect the data against unauthorised access, alteration, disclosure, destruction or other unauthorised processing. The controller requires all service providers it uses to maintain confidentiality, appropriate information security and a commitment to the requirements and principles of applicable data protection legislation.

9. Rights of the data subject

In accordance with applicable data protection legislation, as a data subject you have the following rights:

• The right to obtain confirmation from us as to whether we process personal data concerning you and, if we do, the right to know what personal data of yours we process.
• The right to request the rectification of data concerning you and, in certain cases, the right to require the erasure or restriction of your personal data or to object to its processing.
• The right to opt out of the direct marketing messages we send you.
• To the extent the processing of personal data is based on consent, the right to withdraw, at any time, the consent you have given for the processing of personal data.
• The right to lodge a complaint with the supervisory authority (the Office of the Data Protection Ombudsman, tietosuoja.fi) if you consider that the processing of your personal data infringes data protection legislation.

You can exercise your rights by contacting us using the contact details provided in this policy.

10. Updates to this policy

We may update this policy from time to time due to changes in legislation or in our business. We aim to inform data subjects of changes in a manner appropriate to their significance.

Contact and quote request forms

When you send us a message via the contact or quote request form, we process the information you provide (name, email address, phone number, any company name, interests and the content of your message) in order to handle and respond to your enquiry. The processing is based on our legitimate interest in responding to enquiries and on taking steps prior to a possible contract.

A message sent via the form is delivered by email through Microsoft 365 (Microsoft), and we retain it in our email system for as long as the contact requires.

Newsletter subscription

Subscribing to the newsletter is based on the consent you give. We collect your email address and, optionally, your company name and the interests you select in order to send and target the newsletter.

We use Mailchimp (Intuit Inc.) to deliver the newsletter; its servers are located in the United States, which means your data is transferred outside the EU/EEA. The transfer is based on your consent and appropriate safeguards.

You can unsubscribe at any time using the link at the bottom of every message or by contacting us.

Cookies

We use only cookies that are necessary for the operation of the site, such as a cookie that remembers the language you have selected. We do not use tracking or advertising cookies. A cookie is a small text file saved to your browser. You can block cookies in your browser settings, but the site may then not work as intended.

We also use Vercel Analytics to measure visitor numbers. This measurement is cookieless and does not collect personal data or identifying information, so it does not require consent.