This policy explains what personal data we process, for what purpose and on what basis, and what rights you have. We process data only to provide the service — we don't sell or rent your data.

1. Data controller

Company: [Company name] (Business ID [Business ID])
Address: [address]
Email: [email]

The company details will be completed once registration is finalised.

2. What data we process

Contact details: name, email, phone number and location.
Device details: device type, make and model, condition and other details you provide.
Messages: the description or question you write in the application.
Business customers: company name, company form, Business ID and contact person details.

We collect only the data you provide in the form. We do not collect special categories of personal data.

3. What we use the data for

Processing your application and assessing the device.
Communicating with you and making a possible offer.
Delivering the service: intake, data erasure, refurbishment and recycling.

4. Legal basis for processing

Processing is based on your consent (General Data Protection Regulation, GDPR, Article 6(1)(a)), which you give before submitting the application, and on the preparation and performance of a contract (GDPR Article 6(1)(b)). You can withdraw your consent at any time by contacting us.

5. Data storage and location

We put privacy first: the data you fill in before consenting stays only in your own browser (local storage) and is not sent to the server. Only when you give consent and submit the application is the data stored on our server, linked to the application's reference number.

We keep application data for as long as needed to handle the matter, at most [retention period]. After that the data is deleted or anonymised.

6. Data sharing and processors

We don't sell or disclose your data for marketing purposes. We use trusted service providers (for example web hosting and email sending) that process data on our behalf only according to our instructions. The providers used are listed here once confirmed: [processors].

7. Cookies and browser storage

We don't use tracking or advertising cookies, nor analytics that identify you. That's why we don't show a separate cookie banner — we only use browser storage that is essential to the service:

Form draft (local storage): keeps your unfinished application only in your browser so you can continue later. It isn't sent to the server before your consent. You can remove it with the form's “Clear” action or in your browser settings.
Admin session cookie: used only for staff to sign in to the admin view. It doesn't concern customers.

If we introduce visitor analytics in the future, we'll choose a privacy-respecting, cookieless solution. If we ever used cookies that require consent, we'd ask for clear consent separately.

8. Your rights

You have the right to:

access your data and request a copy of it,
rectify inaccurate or incomplete data,
request erasure of your data,
restrict or object to processing,
withdraw the consent you gave,
lodge a complaint with the data protection authority (tietosuoja.fi).

You can exercise your rights by contacting: [email].

9. Changes to this policy

We update this policy as the service develops. We'll announce significant changes on the website, and the latest update date is shown at the top of the page.

Privacy policy