Privacy policy

This is a register and privacy statement in accordance with the EU General Data Protection Regulation (GDPR).

Name of the register. DropGear Oy Ab customer register.

Data controller. DropGear Oy Ab, Business ID 3501756-6, Linnoitustie 2 A, FI-02600 Espoo, Finland.

Person responsible for register matters. Harri Vähäkangas, CEO.

Purpose of the register. The register serves as the customer register of DropGear Oy Ab. Data is used to manage the customer relationship, to respond to contact requests and customer applications, and to deliver services.

Regular sources of data. The primary source is the customer. Data may also be obtained from official and company registers (for example the Finnish Business Information System maintained by the Patent and Registration Office) and from mutual partners.

Contents of the register. The register mainly contains information provided by customers themselves: name, company and business ID, email address, phone number, address details and other information given in a form.

Regular disclosures. With the customer’s consent, data may be disclosed to partners shared by the customer and DropGear Oy Ab in order to deliver ordered products and services. Invoicing data may be disclosed to payment processors. Data is not disclosed to other third parties within or outside the EU. Data may be disclosed to authorities upon a request based on Finnish law.

Principles of protection. Data is not stored in physical form, except for accounting records accessible only to designated employees and the accountant, who are bound by confidentiality. Electronic data is transferred over encrypted (TLS) connections and protected by a firewall. Only designated employees, identified by username and password, have access to the register. Data is treated as confidential.

Right of access and objection. The data subject has the right to access the data stored about them, and to request the correction of inaccurate data or the erasure of data. A written request is sent to the person responsible for register matters. Access is free of charge when exercised no more than once a year.

Retention. Personal data is retained only for as long as necessary for its purpose. Website contact and application form submissions are retained for a maximum of 6 months, after which they are deleted automatically from the website database. Customer relationship data is retained for the duration of the relationship and as required by accounting legislation.

Cookies. This website does not use tracking or marketing cookies. Only data necessary for operation is stored in the browser, such as the language choice and the login token for site administration. Web fonts are loaded from Google Fonts.