Privacy Policy

Last updated: 2.10.2026

1. Data Controller

Company Teräs-Kari Oy
Business ID 0280420-5
Address: Sulantie 15, 04300 Tuusula

Sähköposti: info@teras-kari.fi
Telephone +358 9 275 4436

This Privacy Policy applies to the processing of personal data carried out by Teräs-Kari Oy through its website.

2. What Personal Data Do We Process?

The following personal data may be collected through the contact form on our website:

  • Name
  • Email:
  • telephone number, if provided by the user
  • personal data contained in the message submitted through the contact form
  • other information voluntarily provided by the user in connection with their enquiry

The contact form is used to receive enquiries and requests for quotations.

3. Purposes of Processing Personal Data

Personal data is processed for the following purposes:

  • responding to enquiries
  • handling enquiries
  • processing requests for quotations and preparing quotations
  • communicating with prospective customers
  • managing potential customer relationships
  • providing and arranging services related to the company's business activities

Personal data is processed only to the extent necessary for these purposes.

4. Legal Basis for Processing Personal Data

The legal basis for processing personal data is Article 6(1)(b) of the General Data Protection Regulation (EU) 2016/679 (GDPR), according to which the processing of personal data is lawful where it is necessary for taking steps at the request of the data subject prior to entering into a contract.

Processing enquiries and requests for quotations submitted through the contact form requires the processing of personal data in order to respond to the enquiry, assess the requested service and prepare a potential quotation.

If an enquiry results in a customer relationship, the processing of personal data will continue on the applicable legal basis for the management of the customer relationship and the performance of contractual obligations.

Where the processing of personal data is required by a separate legal obligation, the processing may also be based on Article 6(1)(c) of the GDPR.

5. How and Where Is Personal Data Processed?

The contact form is implemented on a WordPress website using an Elementor form.

Information submitted through the contact form:

  1. is stored in the website's WordPress system in the Elementor form submissions; and
  2. is delivered to the company's email address through Microsoft Outlook / Microsoft 365.

The website's hosting services are provided by Data Group Finland. Data Group Finland.

Service providers involved in the processing of personal data have access to personal data only to the extent necessary to provide and maintain their services.

Microsoft 365 services are subject to Microsoft's terms and conditions concerning data protection and the processing of personal data.

6. Retention Period

Personal data submitted through the contact form is retained for as long as the enquiry, request for quotation, or related matter is being processed and the information is required for handling the matter.

Once the matter has been resolved and there is no longer a justified need to retain the personal data, the data will be deleted unless there is a legal or other legitimate basis for continued retention.

If an enquiry results in a customer relationship, the retention of personal data may be subject to the retention periods applicable to the customer relationship and statutory obligations.

7. Recipients of Personal Data

Personal data may be processed in the systems of the following service providers:

  • Data Group Finland Data Group Finland – website hosting and WordPress server environment
  • Elementor / WordPress technical implementation of the website and contact form, and management of form submission data
  • Microsoft 365 / Outlook receipt and processing of messages submitted through the contact form

Personal data may also be disclosed to public authorities where required by applicable law.

8. Transfers of Personal Data Outside the EU or EEA

Any potential transfers of personal data outside the European Union or European Economic Area by service providers are carried out in accordance with applicable data protection legislation and using appropriate safeguards.

9. Protection of Personal Data

Personal data is processed confidentially and protected by appropriate technical and organisational measures against unauthorised access, alteration, disclosure, destruction and other unlawful processing.

Access to personal data is restricted to persons who have a legitimate need to process such data based on their work or duties.

10. Rights of Data Subjects

Under applicable data protection legislation, data subjects have the right to:

  • receive information about the processing of their personal data
  • obtain access to their personal data
  • request the rectification of inaccurate or incomplete personal data
  • request the erasure of their personal data in certain circumstances
  • request restriction of the processing of their personal data in certain circumstances
  • object to the processing of their personal data in certain circumstances
  • request the transfer of their personal data from one system to another where the applicable legal requirements are met

Requests concerning the exercise of these rights may be submitted by email to:

info@teras-kari.fi

Additional information may be requested where necessary to verify the identity of the person making the request.

11. Right to Lodge a Complaint with a Supervisory Authority

Data subjects have the right to lodge a complaint with the competent data protection supervisory authority if they consider that their personal data has been processed in violation of applicable data protection legislation.

In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman. Tietosuojavaltuutetun toimisto.

12. Changes to This Privacy Policy

This Privacy Policy may be updated when necessary, for example due to changes in legislation, website functionality, service providers, or the ways in which personal data is processed.

The current version of this Privacy Policy is available on this website.

Last updated: 2.10.2026