top of page

Privacy Policy

Effective as of: 15 November 2025
Data Controller: Porvoo Coating Oy
Business ID: 3559026-6
Address: Amiraalintie 4 B 4, 01150 Söderkulla
Email: porvoocoating@gmail.com
Phone: +358 40 962 0044

1. Data Controller and Contact Person

The data controller is Porvoo Coating Oy. For any questions regarding data protection or the processing of personal data, you may contact us at the address or email listed above.

2. Name of the Register

In this statement, the term “register” refers to the customer and contract register maintained by Porvoo Coating Oy, which stores personal data of natural persons.

3. Purpose of Processing Personal Data and Types of Data Processed

Personal data is processed for the following purposes, among others:

  • Managing customer relationships (e.g., providing services such as sandblasting, powder coating, wheel repair)

  • Billing, payment management, and financial administration

  • Customer service, handling of complaints, and communication

  • Marketing and communication (e.g., newsletters, offers) — based on your consent

  • Website and service development, analytics, and cookies

The personal data processed may include, for example: name, address, email address, phone number, customer relationship details, contract and billing information, received inquiries, and website usage data (e.g., IP address, cookies), where applicable.

4. Legal Basis for Processing Personal Data

The legal bases for processing personal data include:

  • The data subject’s consent, when consent has been provided for the processing (GDPR Art. 6(1)(a))

  • Processing is necessary for the performance of a contract to which the data subject is party (Art. 6(1)(b))

  • Processing is necessary for the legitimate interests pursued by the controller (Art. 6(1)(f)), such as managing customer relationships

5. Data Retention Period

Personal data is retained for as long as necessary for the purposes described above, unless a longer retention period is required by law. When the data is no longer needed, it will be deleted or anonymised.

6. Disclosure and Transfer of Data

Data is not generally disclosed to third parties without the data subject’s consent, unless required by law.
Subcontractors may be used to provide services; in such cases, the subcontractor must comply with the same data protection and data security requirements described in this policy.

Data is not transferred outside the EU/EEA without appropriate safeguards.

7. Rights of the Data Subject

The data subject has the right to:

  • Access their personal data

  • Request the correction of inaccurate information

  • Request deletion or restriction of processing, where permitted by law

  • Object to the processing of personal data on specific grounds

  • Transfer their data to another system, where applicable

  • Withdraw consent at any time, when processing is based on consent

Requests related to these rights may be addressed to the data controller using the contact details provided above.

8. Cookies and Website Use

Our website may use cookies for analytics, monitoring site functionality, and improving user experience.
Users can manage cookie settings through their browser. More detailed information and cookie management options are provided in our separate cookie policy.

9. Data Security

The data controller implements technical and organisational safeguards to ensure that personal data is not accessed unlawfully, lost, or altered.
In the event of a data breach, we follow applicable legal requirements, including notifications to authorities where necessary.

10. Changes to This Privacy Policy

This privacy policy may be updated when necessary. Updated versions will be published on our website, and changes will take effect as indicated.

bottom of page