Privacy notice

1. Controller

The controller is eTorkkel, Finnish business ID 3282967-3.

For privacy-related requests, contact info@etorkkel.fi or call +358 40 034 0931.

2. What personal data do we process?

We process only the data needed to provide services, communicate, measure website usage and keep the website secure.

• Name, email address, phone number and message content if you contact us.
• Information related to customer relationships, requests for proposals and service delivery.
• Technical server log data, such as IP address, time, browser, device and requested page, if stored by the server or hosting provider.
• A language preference cookie if you change the website language.
• Google Analytics 4 analytics data if you give analytics consent.

3. Why do we use the data?

• To respond to enquiries and manage customer relationships.
• To plan and deliver offers, contracts and services.
• To maintain the website, investigate errors, protect security and prevent abuse.
• To measure and improve website usage with Google Analytics 4 if the user accepts analytics.
• To comply with legal obligations, such as accounting requirements.

4. Legal bases

• Contract or pre-contractual steps when you request an offer or order a service.
• Legitimate interest when we respond to enquiries, manage customer relationships and maintain website security.
• Legal obligation when we process invoicing or accounting data.
• Consent when we use Google Analytics 4 analytics.

5. Cookies, consent and Google Analytics 4

The website uses a necessary locale cookie to remember the selected language. The cookie is valid for up to 12 months. It is not used for marketing or user profiling.

The website may use Google Analytics 4 to measure visitor numbers, page views, traffic sources and contact-related clicks. On this website, GA4 is activated only if the user accepts analytics in the consent banner.

If you reject analytics, the GA4 analytics script is not loaded and analytics cookies are not set. You can later remove your consent choice from your browser’s site data or localStorage.

Google states that Google Analytics does not log individual IP addresses from EU users and that EU traffic is collected in the EU before further processing. Google may still process analytics data to provide, secure and maintain the service.

6. Recipients and transfers

Data may be processed in technical services used for hosting, email, backups, customer management, accounting and website maintenance.

Based on analytics consent, Google LLC and its subprocessors may process Google Analytics 4 data. Google provides the analytics service under its own terms and privacy practices.

We do not sell personal data. Data may be disclosed to authorities if required by law.

If personal data is transferred outside the European Economic Area, GDPR-compliant safeguards such as European Commission standard contractual clauses are used unless another lawful transfer mechanism applies.

7. Retention periods

• Contact data is stored for as long as needed to handle the matter and any customer relationship.
• Customer, contract and invoicing data is stored during the contract period and afterwards for legally required periods.
• Technical logs are stored only as long as needed for security, troubleshooting and service reliability.
• The language preference cookie is stored for up to 12 months or until you delete it from your browser.
• GA4 retention is configured in Google Analytics settings. The recommendation is to keep retention as short as practical, for example 2 months, unless there is a clear business need for longer retention.

8. Your rights

Under the GDPR, you have the right to:

• receive information about how your personal data is processed,
• request access to your personal data,
• request correction of inaccurate data,
• request deletion or restriction of processing where applicable,
• object to processing based on legitimate interest,
• withdraw consent where processing is based on consent,
• lodge a complaint with a supervisory authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman: tietosuoja.fi.

9. Security

Personal data is protected with appropriate technical and organisational measures. Data is processed only by people and service providers who have a justified need to access it.

10. Changes to this notice

This privacy notice is updated if personal data processing, website functionality, analytics or service providers change materially.