Privacy Policy: Määrätieto Oy

This Privacy Policy describes how Määrätieto Oy collects, uses, and protects personal data in accordance with the European Union’s General Data Protection Regulation (GDPR).

1. Data Controller and Contact Information Controller: Määrätieto Oy (Business ID: 2277780-6) Address: Rantatie 30, FI-21600 Parainen, Finland Contact Person: Hannu Karhu Email: hannu.karhu@maaratieto.fi

2. Purpose and Legal Basis for Processing We process personal data for the following purposes:

• Responding to Inquiries: Managing messages sent via the website’s contact form.

• Customer Relationship Management: Maintaining communication with current and potential partners.

• Contract Preparation: Steps taken prior to entering into a service agreement.

• Website Analytics: Analyzing website traffic and user behavior to optimize our services and marketing.

Legal Basis for Processing:

• Legitimate Interest: For customer service, communication, and business development.

• Contractual Necessity: For processing required to fulfill or prepare a contract between the controller and the data subject (or their representative).

• Consent: For the use of non-essential cookies and analytics tools (e.g., Google Analytics).

3. Data Categories and Sources We collect only the information necessary for the purposes mentioned above, primarily directly from the user:

• Name

• Email address

• Telephone number

• Company name

• Message content (provided by the user)

• Technical and Analytics Data: IP addresses, browser types, device information, traffic sources, and website usage data, which are collected via Google Analytics when you consent to analytics cookies.

4. Data Retention Period Personal data is stored only as long as necessary to fulfill the defined purposes:

• Leads and Contact Requests: Typically 2 years from the last contact.

• Accounting Records: 7 years in accordance with the Finnish Accounting Act.

• Contractual Data: For the duration of the customer relationship plus any statutory limitation periods.

• Analytics Data: Data collected via Google Analytics is retained according to Google's standard retention periods (typically up to 14 months) before being automatically deleted.

5. Data Transfers and Recipients Data may be shared with selected service providers who enable our operations:

• IT Service Providers: Such as email hosting and collaboration platforms (e.g., Microsoft 365/Teams).

• Analytics Providers: We use Google Analytics to understand website traffic and usage.

• Authorities: When required by law.

Data is primarily processed within the EU/EEA. If data is transferred outside this area (e.g., via global cloud services or to Google LLC in the United States), we ensure a high level of protection by using standard contractual clauses (SCCs) or by ensuring the provider is certified under the EU-U.S. Data Privacy Framework.

6. Rights of the Data Subject Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: To receive confirmation on whether we process your data and a copy of that data.

• Right to Rectification: To request correction of inaccurate or incomplete data.

• Right to Erasure: To request the deletion of your data ("Right to be forgotten").

• Right to Object: To object to processing based on legitimate interest or for direct marketing.

• Right to Restriction: To limit the processing of your data in certain situations.

• Right to Withdraw Consent: You can withdraw your consent for analytics cookies at any time via our cookie consent manager.

To exercise these rights, please contact us at: hannu.karhu@maaratieto.fi.

7. Cookies and Security

• Cookies: Our website uses essential cookies to ensure basic functionality. With your explicit consent, we also use third-party analytics cookies (Google Analytics) to measure website performance, track traffic sources, and improve user experience. You can manage your preferences or withdraw your consent at any time via the cookie consent banner available on our website.

• Security: We use technical measures, such as SSL encryption (HTTPS), to protect data transmitted via our website. Access to personal data is restricted to authorized personnel only.

8. Changes to this Policy We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version is always available on our website at www.maaratieto.fi.

Last updated: March 22, 2026.