Privacy Policy: Määrätieto Oy

This Privacy Policy describes how Määrätieto Oy collects, uses, and protects personal data in accordance with the European Union’s General Data Protection Regulation (GDPR).

1. Data Controller and Contact Information

Controller: Määrätieto Oy (Business ID: 2277780-6)

Address: Rantatie 30, FI-21600 Parainen, Finland

Contact Person: Hannu Karhu

Email: hannu.karhu@maaratieto.fi

2. Purpose and Legal Basis for Processing

We process personal data for the following purposes:

Responding to Inquiries: Managing messages sent via the website’s contact form.

Customer Relationship Management: Maintaining communication with current and potential partners.

Contract Preparation: Steps taken prior to entering into a service agreement.

Legal Basis for Processing:

Legitimate Interest: For customer service, communication, and business development.

Contractual Necessity: For processing required to fulfill or prepare a contract between the controller and the data subject (or their representative).

3. Data Categories and Sources

We collect only the information necessary for the purposes mentioned above, primarily directly from the user:

Name

Email address

Company name

Message content (provided by the user)

Technical identifiers, such as IP addresses, which may be logged during website visits for security and functionality.

4. Data Retention Period

Personal data is stored only as long as necessary to fulfill the defined purposes:

Leads and Contact Requests: Typically 2 years from the last contact.

Accounting Records: 7 years in accordance with the Finnish Accounting Act.

Contractual Data: For the duration of the customer relationship plus any statutory limitation periods.

5. Data Transfers and Recipients

Data may be shared with selected service providers who enable our operations:

IT Service Providers: Such as email hosting and collaboration platforms (e.g., Microsoft 365/Teams).

Authorities: When required by law.

Data is primarily processed within the EU/EEA. If data is transferred outside this area (e.g., via global cloud services), we ensure a high level of protection by using standard contractual clauses (SCCs) or other legal transfer mechanisms.

6. Rights of the Data Subject

Under the GDPR, you have the following rights regarding your personal data:

Right of Access: To receive confirmation on whether we process your data and a copy of that data.

Right to Rectification: To request correction of inaccurate or incomplete data.

Right to Erasure: To request the deletion of your data ("Right to be forgotten").

Right to Object: To object to processing based on legitimate interest or for direct marketing.

Right to Restriction: To limit the processing of your data in certain situations.

To exercise these rights, please contact us at: hannu.karhu@maaratieto.fi.

7. Cookies and Security

Cookies: Our website uses essential cookies to ensure functionality. For any non-essential analytics cookies, we will request your explicit consent via a cookie banner.

Security: We use technical measures, such as SSL encryption (HTTPS), to protect data transmitted via our website. Access to personal data is restricted to authorized personnel only.

8. Changes to this Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version is always available on our website at www.maaratieto.fi.

Last updated: February 12, 2026.