Privacy Policy
This policy explains what personal data Finn Component Trading Oy processes through the fct.fi website, for what purpose and for how long. It is written in accordance with Article 13 of the EU General Data Protection Regulation (GDPR).
Updated
1. Controller
For any data protection matter, please use the contact details above. We have not appointed a separate data protection officer, as the scale of our operations does not require one.
| Company | Finn Component Trading Oy |
|---|---|
| Business ID | 1817880-0 |
| Address | Alasuutarintie 5, 48400 Kotka, Finland |
| fct@fct.fi | |
| Phone | +358 50 529 3001 |
2. What data we process
When you submit the contact form, we process the following:
- name
- phone number
- email address
- message content
- the page the form was sent from
- IP address and browser identification data
3. Purpose and legal basis
The IP address and browser data are used only for rate limiting and automated spam detection. They are not used for profiling and are not combined with other data.
| Responding to your enquiry and preparing a quote | Steps prior to entering a contract (GDPR Art. 6(1)(b)) |
|---|---|
| Storing a backup copy of the enquiry so the message is not lost if email delivery fails | Legitimate interest (GDPR Art. 6(1)(f)) |
| IP address and browser data to prevent spam and abuse | Legitimate interest (GDPR Art. 6(1)(f)) |
4. Source of the data
All data we process comes directly from you when you fill in the form. We do not obtain data from external sources and we do not buy contact details.
5. Recipients of the data
Form data passes through the following service providers. Each processes the data only on our instructions and not for their own purposes.
| Zoner Oy (Finland) | Website hosting. The backup copy of the form is stored on this server. |
|---|---|
| EmailJS | Delivers the form message as email. The service runs in the browser and receives the name, phone number, email address and message. |
| Cloudflare | Website proxy and protection. Processes IP addresses for traffic routing and attack prevention. |
6. Transfers outside the EU
Some of the service providers listed above may process data outside the European Economic Area. In those cases the transfer is based on the safeguards in Article 46 of the GDPR, such as the standard contractual clauses approved by the European Commission.
We do not transfer data outside the EU for any purpose other than those described above.
7. Retention periods
| Backup copy of the contact form on the server | 12 months, after which the data is deleted automatically |
|---|---|
| Enquiry received by email | Kept for as long as handling the matter requires |
| Data relating to a completed order | The period required by the Finnish Accounting Act, generally 6 years from the end of the financial year |
8. Security
- The site uses an encrypted HTTPS connection.
- The form backup is stored in a server directory that cannot be reached with a web browser.
- Access is limited to the people who need it to handle enquiries.
- Administrative access is password protected, with the password stored as a hash.
9. Cookies and analytics
The site uses no tracking cookies and no advertising cookies. Visitor statistics are collected with cookieless analytics that store no identifiers in your browser and do not track you across sites. For this reason the site has no cookie consent banner.
Your browser may store technical data necessary for the site to work, such as your language choice. This does not require consent.
10. Your rights
Under the GDPR you have the right to:
- know what data we process about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- request erasure of your data (Art. 17)
- restrict processing (Art. 18)
- object to processing based on legitimate interest (Art. 21)
- receive your data in a portable format (Art. 20)
Requests can be made by email to fct@fct.fi. We respond within one month. We may ask you to verify your identity before acting on a request.
11. Right to lodge a complaint
If you consider that we process your data unlawfully, you may lodge a complaint with the supervisory authority: Office of the Data Protection Ombudsman, P.O. Box 800, FI-00531 Helsinki, tietosuoja.fi.
12. Providing the data is voluntary
Filling in the form is voluntary. Name, email address and message are required so that we can reply. If you prefer not to use the form, you can contact us by phone or email.
We do not carry out automated decision-making or profiling.
13. Changes to this policy
We update this policy if our processing changes. The current version is always on this page, and the update date is shown at the top.