Privacy Policy

Last updated: 22 June 2026

This Privacy Policy (tietosuojaseloste) explains how Rinsingaeliminat.ddd ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website. We process personal data in compliance with:

• Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR);
• Finnish Data Protection Act (Tietosuojalaki, 1050/2018);
• Finnish Act on the Protection of Privacy in Working Life (759/2004), where applicable;
• Other applicable Finnish and EU legislation.

1. Data Controller

The data controller (rekisterinpitäjä) responsible for your personal data is:

Rinsingaeliminat.ddd
Business address: Tiilitehtaankatu 49, 65100 Vaasa, Finland
Email: reply@rinsingaeliminat.world
Phone: +358 40 646 4339

For all data protection enquiries, please contact us using the details above. We have not appointed a separate Data Protection Officer (DPO), as we are not required to do so under Article 37 GDPR. Data protection matters are handled directly by the data controller.

2. Register Description

Under Section 10 of the Finnish Data Protection Act and Articles 13–14 GDPR, we provide the following information about our register (rekisteriseloste):

2.1 Name of the Register

Website User and Contact Register of Rinsingaeliminat.ddd.

2.2 Personal Data We Collect

We may collect the following categories of personal data:

• Identity and contact data: name and email address when you submit our contact form.
• Communication data: message content and any information you voluntarily include in enquiries.
• Technical data: IP address, browser type and version, device type, operating system, language settings, referring URL, and access timestamps collected through server logs and cookies.
• Usage data: pages visited, session duration, click paths, and interaction patterns — only when you have consented to analytics cookies.
• Consent data: your cookie preferences, consent category selections, and the date and time consent was given or withdrawn.

We do not routinely collect special categories of personal data (Article 9 GDPR) such as health data, nor do we process data relating to criminal convictions (Article 10 GDPR).

2.3 Sources of Data

Personal data is obtained from:

• You directly — when you complete the contact form or communicate with us.
• Automatically — through cookies, server logs, and similar technologies when you browse the website.
• Third parties — analytics providers (only with your consent) and embedded service providers such as Google Maps on our contact page.

2.4 Purposes and Legal Bases for Processing

We process personal data only where a legal basis under Article 6 GDPR applies:

Purpose	Data Used	Legal Basis
Responding to contact enquiries	Name, email, message	Consent (Art. 6(1)(a)); pre-contractual steps (Art. 6(1)(b))
Website operation and security	Technical data, server logs	Legitimate interests (Art. 6(1)(f)) — ensuring site security and preventing abuse
Storing cookie preferences	Consent records	Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f))
Website analytics	Usage data, technical data	Consent (Art. 6(1)(a)) — only after explicit opt-in
Marketing measurement	Usage data, device identifiers	Consent (Art. 6(1)(a)) — only after explicit opt-in
Legal compliance	Any relevant data	Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. You may object to such processing (see Section 7).

2.5 Obligation to Provide Data

Providing personal data through the contact form is voluntary. However, if you do not provide your name, email, and message, we cannot respond to your enquiry. Browsing the website without submitting the contact form does not require you to identify yourself, except for technical data automatically processed for site delivery.

3. Data Retention

We retain personal data only for as long as necessary for the purposes stated above, in line with the Finnish Data Protection Act and GDPR storage limitation principle (Article 5(1)(e)):

• Contact form messages: up to 24 months from the date of last communication, unless a longer period is required for legal claims or accounting obligations.
• Server logs: up to 90 days, unless needed for security incident investigation.
• Analytics data: up to 26 months or as configured by the analytics provider, only where consent was given.
• Cookie consent records: up to 12 months from the date of consent, or until you withdraw consent.
• Marketing data: until consent is withdrawn or up to 12 months of inactivity, whichever comes first.

After retention periods expire, data is securely deleted or irreversibly anonymised. Backup copies may persist for a limited technical period before automatic deletion.

4. Recipients and Data Processors

We do not sell your personal data. We may share data with the following categories of recipients:

• Hosting and IT infrastructure providers — servers located in the EU/EEA, bound by data processing agreements under Article 28 GDPR.
• Analytics providers (e.g. Google Analytics) — only when you have consented to analytics cookies.
• Embedded service providers (e.g. Google Maps) — may set their own cookies; see our Cookie Policy.
• Professional advisers — lawyers or accountants, under confidentiality obligations, when necessary.
• Advertising partners (e.g. Google Ads) — may process device and usage data for ad delivery and measurement only when you have consented to marketing cookies. Google Ireland Ltd. may act as an independent controller for ad personalisation. See Google Privacy Policy.
• Public authorities — when required by Finnish or EU law, court order, or lawful request from Traficom, the Data Protection Ombudsman, or other competent bodies.

4.1 Online Advertising

This website may display advertisements through Google Ads or similar programmes. We do not sell personal data to advertisers. Where marketing cookies are accepted, advertising partners may use cookies or similar identifiers to measure ad performance, limit repeat ads, and show contextually relevant advertising, in accordance with their policies and your consent choices.

You may withdraw marketing consent at any time via Cookie Preferences (available in the site footer) or by clearing cookies in your browser. Editorial content on this site is independent of advertising unless clearly labelled as sponsored.

5. International Data Transfers

We primarily store and process data within the EU/EEA. If personal data is transferred to countries outside the EU/EEA (for example, where a service provider is located in the United States), we ensure appropriate safeguards under Chapter V GDPR, including:

• European Commission adequacy decisions;
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Supplementary technical and organisational measures where required by Finnish Data Protection Ombudsman guidance and CJEU case law (Schrems II).

You may request a copy of applicable transfer safeguards by contacting us.

6. Security Measures

Under Article 32 GDPR and Section 32 of the Finnish Data Protection Act, we implement appropriate technical and organisational measures, including:

• HTTPS/TLS encryption for data in transit;
• Access controls limiting personal data to authorised personnel only;
• Regular review of security practices and software updates;
• Secure deletion procedures when data is no longer needed;
• Staff awareness of data protection obligations.

In the event of a personal data breach likely to pose a risk to your rights, we will notify the Office of the Data Protection Ombudsman within 72 hours as required by Article 33 GDPR and inform affected individuals without undue delay where required by Article 34 GDPR.

7. Your Rights Under GDPR and Finnish Law

As a data subject, you have the following rights under GDPR and the Finnish Data Protection Act:

• Right of access (Art. 15): obtain confirmation of whether we process your data and receive a copy.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion where data is no longer necessary, consent is withdrawn, or processing is unlawful.
• Right to restriction (Art. 18): request limited processing in certain circumstances.
• Right to data portability (Art. 20): receive data you provided in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to object (Art. 21): object to processing based on legitimate interests, including profiling; object at any time to direct marketing.
• Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdraw cookie consent via browser settings or by contacting us.
• Right not to be subject to automated decision-making (Art. 22): we do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact reply@rinsingaeliminat.world. We will respond within one month of receiving your request, as required by Article 12(3) GDPR. This period may be extended by two further months for complex requests; we will inform you of any extension and the reasons.

We may request proof of identity before processing your request to protect your data from unauthorised access. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

8. Right to Lodge a Complaint

If you believe your personal data has been processed in violation of GDPR or Finnish law, you have the right to lodge a complaint with the supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
Email: tietosuoja@om.fi
Website: tietosuoja.fi/en
Telephone: +358 29 566 6700

You may also lodge a complaint with the supervisory authority in your EU/EEA country of residence or place of work.

9. Children's Data

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. Under Finnish law and Article 8 GDPR, where consent is the legal basis, parental consent is required for children under 16 in Finland. If you believe we have collected data from a child, please contact us immediately and we will delete it without undue delay.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements under Finnish and EU law. The "Last updated" date at the top indicates the current version. Material changes will be communicated on our website where appropriate. We encourage you to review this page periodically.

Back to Home