PRIVACY POLICY

This is KFX Finland Oy’s registration and data protection statement in accordance with the EU General Data Protection Regulation (GDPR). Prepared on 24.01.2025. Latest change 30.01.2025.

This Privacy Statement explains how KFX Finland Oy collects, uses, stores and protects your personal data on our website. By using our website, you agree to the terms of this privacy statement.

1. Registrar

KFX Finland Oy, Tuusulantie 124, 04310 Tuusula, Suomi

2. The contact person responsible for the register

Konsta Mannerheimo, +358503512004

3. Register name

KFX Finland Oy’s marketing and online service user register

4. Legal basis and purpose of personal data processing

According to the EU’s General Data Protection Regulation, the legal basis for processing personal data is the person’s own consent to use the data.

The purpose of personal data processing is communication with customers and marketing. The information is not used for automated decision-making.

Google Analytics collects website user data that is used for the following purposes:

Analyzing and improving website usage
Enhancing the user experience on the website
Marketing and tracking website traffic

5. Register’s information content

Information stored in the register includes: person’s name, company/organization, contact information (phone number, e-mail address, address), IP address of the network connection, information about ordered services and their changes, billing information, other information related to the customer relationship and ordered services.

IP addresses of website visitors and cookies necessary for the functions of the service are processed on the basis of a legitimate interest, e.g. to take care of information security and for the collection of statistical data of website visitors in those cases when they can be considered to be personal data. If necessary, consent is requested separately for third-party cookies.

We use Google Analytics on our website to collect and analyze data about users’ website activity. Google Analytics collects the following information:

Users’ IP addresses (anonymized)
Website usage (number of visits, duration of visits, pages viewed)
Devices and browsers used
Geographical location of users
Traffic sources (where users came from, e.g., search engines, links, direct URLs)

Google Analytics does not collect personally identifiable information, such as your name, email address, or other identifying details.

6. Regular sources of information

Personal data is collected from the registrant himself, e.g. by telephone and via the contact form on the website.

The information to be saved in the register is obtained from the customer, e.g. From messages sent via web forms, by e-mail, by phone, via social media services, contracts, customer meetings and other situations where the customer gives out their information. Information about contact persons of companies and other organizations can also be collected from public sources such as websites, directory services and other companies.

7. Regular transfers of data and transfer of data outside the EU or EEA

Information is not regularly disclosed to other parties without the express consent of those concerned.

Data collected through Google Analytics may be available on Google’s servers. Google does not combine the collected data with personal data and does not use it for purposes other than providing the analytics service.

We do not share the information we collect with third parties, unless it is required by law or is part of our business practices (e.g. purchasing services or partners).

8. Google Analytics – Cookies, Data Retention, Your Rights and Choices

8a) Cookies

Our website uses cookies to help us improve the user experience and collect statistical data via Google Analytics. Cookies are small text files that are stored on your device. You can disable cookies in your browser settings, but this may limit the functionality of the website.

8b) Data Retention

The data collected by Google Analytics is stored on Google’s servers. The data is automatically deleted when it is no longer needed for analysis purposes or upon user request for deletion.

8c) Your Rights and Choices

You have the right to request access to your personal data, as well as the right to correct or delete your data where applicable by law. You can also block cookies through your browser settings or use plugins to prevent Google Analytics from using cookies.

9. Principles of registry protection

Care is taken when processing the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

10. The right of inspection and the right to demand correction of information

Every person in the register has the right to check their information stored in the register and to demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about him or demand correction, the request must be sent in writing to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).

11. Other rights related to the processing of personal data

A person in the register has the right to request the removal of personal data about him from the register (“the right to be forgoeen”). Those registered also have other rights according to the EU’s General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests must be sent in writing to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).