Privacy Policy
Updated: 20.11.2024
1. Data Controller
2. Name of the Register
Kevyt Remppa customer register and website user register
3. Purpose and Legal Basis of Personal Data Processing
Personal data is processed for the following purposes:
- Providing customer service and managing customer relationships
- Processing quote requests and enquiries
- Providing renovation services and fulfilling contracts
- Invoicing and payment processing
- Marketing and communications (based on consent)
- Service development and statistical analysis
- Fulfilling legal obligations
The legal bases for processing are performance of a contract, legitimate interest, legal obligation, and the data subject's consent.
4. Data Content of the Register
The following data may be stored in the register:
- Name
- Contact details (phone number, email address, postal address)
- Company name and business ID (for business customers)
- Quote request and project details
- Customer relationship data (quotes, contracts, invoices)
- Website usage data (IP address, browser type, visit time)
- Data collected through cookies
- Communication history
5. Regular Sources of Data
Personal data is primarily collected directly from the data subject through web forms, email, telephone, or other communication channels. Data may also be collected from public registers (e.g. company data) and from third parties (e.g. partners).
6. Data Retention Period
Personal data is retained as follows:
- Customer data: For the duration of the customer relationship and 10 years after its termination (in accordance with accounting legislation)
- Quote requests: 2 years, if they do not result in a customer relationship
- Marketing consents: Until consent is withdrawn or the data is no longer necessary
- Website usage data: Up to 26 months
- Cookie data: See section 7 (Cookies)
7. Cookies
Our website uses cookies to improve the user experience and to analyse website usage.
What are cookies?
Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit our website. Cookies help the website recognise your device on subsequent visits.
Cookies we use
Necessary cookies
These cookies are essential for the basic functionality of the website. They store, among other things, your cookie consent and session data. These cookies cannot be disabled.
Retention period: 12 months
Analytics cookies
We use analytics cookies (e.g. Google Analytics) to understand how users use our website. This data helps us improve our service. Analytics cookies require your consent.
Retention period: 26 months
Marketing cookies
Marketing cookies are used to track visitors on websites. The purpose is to display advertisements that are relevant and interesting to the individual user. These cookies require your consent.
Retention period: 12 months
Managing cookies
You can manage your cookie settings by clicking the "Cookie settings" link at the bottom of the page. You can also block the use of cookies in your browser settings, but this may limit the functionality of the website.
8. Regular Disclosures and Transfers of Data
Personal data is not regularly disclosed to third parties. Data may be disclosed in the following situations:
- To authorities in situations required by law
- To service providers who process data on our behalf (e.g. IT services, invoicing, email services)
- To partners for the execution of a project (e.g. electricians), when necessary for the performance of a contract
Personal data may be transferred outside the EU/EEA only if the recipient is located in a country whose level of data protection has been deemed adequate by the European Commission, or if other appropriate safeguards are in place (e.g. EU Standard Contractual Clauses).
9. Principles of Register Protection
Personal data is protected from unauthorised access and processing in the following ways:
- Data is stored in secure systems and servers
- Databases and backups are protected with firewalls and passwords
- The website uses SSL encryption (HTTPS)
- Access to data is restricted to personnel who need it for their duties
- Staff are trained in data protection and bound by a confidentiality obligation
- Information security and protection methods are reviewed and updated regularly
10. Rights of the Data Subject
You have the following rights regarding the processing of your personal data:
Right of access
You have the right to review what personal data we have stored about you.
Right to rectification
You have the right to request the correction of inaccurate or incomplete data.
Right to erasure
You have the right to request the deletion of your data in certain situations (e.g. if the data is no longer needed for its original purpose).
Right to restriction of processing
You have the right to request the restriction of the processing of your data in certain situations.
Right to object
You have the right to object to the processing of your data on grounds relating to your particular situation, when the processing is based on legitimate interest.
Right to data portability
You have the right to receive the personal data you have provided in a machine-readable format and to transfer it to another data controller.
Right to withdraw consent
If the processing is based on consent, you have the right to withdraw your consent at any time.
Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority (the Office of the Data Protection Ombudsman, www.tietosuoja.fi) if you consider that the processing of your personal data violates data protection legislation.
To exercise your rights, please contact the data controller using the contact details provided above. We aim to respond to your requests within one month.
11. Automated Decision-Making and Profiling
We do not use personal data for automated decision-making or profiling that would have legal effects or similarly significant effects on the data subject.
12. Changes to the Privacy Policy
We reserve the right to make changes to this privacy policy. Changes will be announced on this page. We recommend reviewing the privacy policy regularly. This privacy policy was last updated on 20.11.2024.
Questions about privacy?
If you have questions about our privacy practices or wish to exercise your rights, please contact us.