Privacy policy

1. Controller

Ajtu Oy (Business ID 3298473-7)
Ilvesvuorenkatu 20
01900 Nurmijärvi
Email: info@kokolattiamatto.com
Phone: 046 804 3237

2. What data is collected

We process only the data necessary to provide a quote and carry out the service:

• name
• email address
• phone number
• address and city (if the customer provides them)
• details about the space (area, type of space, requested add-on services)
• the free-text message the customer writes themselves

3. Basis and purpose of processing

The basis for processing is a contract, or steps to enter into a contract, based on the data subject’s request (GDPR 6.1.b). The data is used to prepare quotes, for customer service and to carry out the service. The data is not used for marketing without separate consent.

4. Retention period

• Quote requests — 12 months from when they are sent
• Accounting records of services carried out — 6 years from the end of the financial year (Accounting Act 2:10)
• Site usage measurement data (cookieless, no IP addresses) — at most 12 months

5. Disclosure of data

Data is not disclosed to third parties for marketing or other purposes. We use the following service providers for the technical processing of data:

• Vercel Inc. — the technical operation of the site, plus cookieless, anonymous visitor measurement (Vercel Analytics). Servers located in the USA, with EU/EEA standard contractual clauses (SCC) in force under contract. Data from the site’s own cookieless usage measurement is stored in Vercel’s EU region (Stockholm); see section 8.
• Resend — sending quote-request emails (EU data centre, EU/EEA data processing agreement in force)
• Google Ireland Ltd. — only with your consent: visitor analytics (Google Analytics 4) to improve the site and ad-conversion measurement (Google Ads). Google Consent Mode v2 is in use; no personalised advertising.
• Microsoft Ireland — usability analytics (Microsoft Clarity): page usage such as clicks and scrolling is measured without cookies on the basis of legitimate interest, to improve the site; the content of form fields is masked. With your consent Clarity also uses cookies to link visits.

6. Your rights as a data subject

Under the EU General Data Protection Regulation you have the following rights:

• the right to access the data we process about you
• the right to have your data rectified
• the right to have your data erased (“the right to be forgotten”)
• the right to restrict processing
• the right to data portability
• the right to lodge a complaint with the Data Protection Ombudsman (tietosuoja.fi)

You can exercise your rights by contacting us at the details above.

7. Data security

Data is processed over an encrypted connection (HTTPS). Access to personal data is restricted to those who need it for their work duties.

8. Cookies and analytics

By default the site uses only essential cookies, and site usage (e.g. clicks and scrolling) is measured without cookies using Vercel Analytics and Microsoft Clarity; the content of form fields is masked. In addition, we measure site usage with our own cookieless measurement: which pages and page sections are read, what is clicked and how visitors progress through the form steps — without the content of form fields. IP addresses are not stored, and location is determined only at city level. The data is stored in Vercel’s EU region (Stockholm) for at most 12 months. The legal basis is legitimate interest (developing the site and our services). With your consent we also use visitor analytics (Google Analytics 4 and Clarity cookies) to improve the site and ad-conversion measurement (Google Ads) — in accordance with Google Consent Mode v2 and without personalised advertising. You can withdraw or change your consent at any time. For more details: cookie policy.