Select Page

Pematic Oy – Website Privacy Notice

Version 1.0 – 27 January 2026

1. Data Controller

Pematic Oy
Teollisuustie 4
FI-40950 Muurame, Finland

Email: pematic@pematic.fi / info@pematic.fi
Phone: +358 44 762 4511

2. Contact Person for Data Protection Matters

Satu Risteelä
Email: satu.risteela@pematic.fi
Phone: +358 44 762 4521

3. Register Name

Register of Personal Data for Website Users

4. Purpose and Legal Basis of Processing

Personal data is processed for the following purposes:

  • Contact form submissions
  • Website analytics (Google Analytics)
  • Technical operation and maintenance of the website

The legal bases for processing are:

  • Performance of a contract
  • Legitimate interest

5. Personal Data Processed

Contact Form

  • Name
  • Email address
  • Phone number
  • Message content

Analytics Data

  • Anonymized IP address
  • Browser information
  • Device information
  • Website usage data

6. Data Retention Periods

  • Contact form submissions: 12 months
  • Analytics data: 14 months
  • Log files: 12–24 months

7. Sources of Personal Data

Personal data is obtained from:

  • Information provided directly by users
  • Technical data collected through Google Analytics

8. Recipients of Personal Data

Hosting Provider

Valo Network Oy (Valonopea)
ns-01.valonopea.fi

Analytics Provider

Google Ireland Ltd

9. Transfers Outside the EU/EEA

Google Analytics may process personal data using the European Commission’s Standard Contractual Clauses (SCCs) and other applicable safeguards.

10. Cookies

The website uses:

  • Essential cookies
  • Analytics cookies

11. Data Security

We protect personal data through:

  • HTTPS encryption
  • Firewalls
  • Secure backups

Access control and user permission management

12. Rights of Data Subjects

Data subjects have the right to:

  • Access their personal data
  • Request correction of inaccurate data
  • Request deletion of personal data
  • Restrict processing
  • Object to processing

13. Changes to This Privacy Notice

This privacy notice may be updated when necessary.

PRIVACY NOTICE

Data Controller

Pematic Oy
Teollisuustie 4
FI-40950 Muurame, Finland

Contact Person

Miia Sarkola
Phone: +358 44 762 4521
Email: satu.risteela@pematic.fi

Register Name

Customer Register

Purpose and Legal Basis of Processing

The purpose of the customer register is to support sales activities and customer relationship management.

Personal data is processed in connection with:

  • Orders
  • Invoicing
  • Debt collection
  • Customer communications
  • Other activities related to managing customer relationships

Personal data is processed on the basis of the contractual relationship arising from an order, enabling us to fulfill our contractual and statutory obligations.

Contents of the Register

The customer register may contain the following information:

Customer Information

  • Customer number
  • Company name
  • Billing address
  • Delivery address
  • Business ID
  • E-invoicing information
  • Preferred language

Contact Person Information

  • Name
  • Telephone number
  • Email address

Customer Relationship Information

  • Customer number
  • Order history
  • Invoicing information
  • Payment information

Data Retention

Personal data is retained only for as long as necessary for the purposes described in this privacy notice, unless a longer retention period is required by law.

Sources of Data

Information stored in the register is primarily obtained directly from the customer when placing an order or during the customer relationship.

Information may also be obtained from third-party sources, including:

  • Finnish Business Information System (YTJ)

Disclosure of Personal Data

Customer information may be disclosed to our financing and credit information service partners when necessary.

Otherwise, personal data will only be disclosed where required by law.

Personal data is not transferred outside the European Union or the European Economic Area.

Technical and Organisational Security Measures

Data stored in the register is protected through technical and organisational safeguards, including:

  • Firewall protection
  • Password-protected systems
  • Regular backups
  • Secure backup storage separate from production systems
  • Restricted access to facilities containing servers, workstations, and backups
  • Password-protected workstations
  • Access rights granted only to authorised employees
  • Processing of personal data only by personnel whose duties require such access
  • Regular information security training for employees

Rights of Data Subjects

Data subjects have the right to:

  • Access personal data concerning them
  • Request rectification of inaccurate data
  • Request erasure of personal data
  • Request restriction of processing
  • Request transfer of personal data to another system where applicable

Certain rights may be limited by mandatory legal requirements.

Version History

Original Publication Date: 24 May 2018

Suositus ennen julkaisua

Koska sivusto on englanniksi, suosittelisin myös päivittämään GDPR-termit hieman kansainvälisempään muotoon:

  • Privacy Notice (mieluummin kuin Privacy Statement)
  • Data Controller (virallinen GDPR-termi)
  • Data Subject Rights (GDPR-termi)
  • Standard Contractual Clauses (SCCs) (täydellä nimellä)

European Economic Area (EEA) (ei pelkkä ETA)