Privacy Policy

We aim to understand the needs of the users of our services, and therefore we collect information relating to the users of our services, such as information about their behaviour when using our online service. Our online service is publicly accessible, and browsing the website does not require registration. The website may also contain a separate section that requires users to log in.

This Privacy Policy explains what personal data we may collect about you when you use our services or contact us through our online service (hereinafter referred to as the “Service”). We also explain the purposes for which we may use such information.

By using our Service, you accept the processing of your data in accordance with this Privacy Policy. We may amend this Privacy Policy by publishing a new version online. Your continued use of the website and related services after the publication of a new version will be considered acceptance of the amended terms.

Data Collection

The following information may be collected:

IP address
Software and hardware information
Information collected through cookies
Other information collected with the customer’s consent

Information We Collect Through Our Online Service

We store information that you provide to us through the Service’s contact form. If you would like to receive a response to feedback submitted via a feedback form or email, you must provide your contact details. Messages submitted through the contact form are archived within the Service.

When submitting feedback containing personal data, please note that the security of an unencrypted feedback form or email message is limited, and the confidentiality and protection of the information cannot therefore be fully guaranteed. This should be taken into particular consideration when submitting information that is sensitive from a privacy perspective.

Purpose of the Register

The register is used, in accordance with applicable data protection legislation, for managing and developing customer relationships and for providing, developing and maintaining the Service. We may also use the register to provide information about our various services and for billing purposes.

Based on the personal data collected, we may also send you targeted marketing or customer communications. If you do not wish to receive such communications, you may notify the controller of the register at any time.

Disclosure of Information

Ekosata Oy does not sell, exchange or transfer your personally identifiable information to external parties. This does not include trusted third parties who assist us in maintaining our website or conducting our business. Such third parties are also required to keep the information confidential.

We may disclose information when we believe that doing so is necessary to investigate, prevent or otherwise address illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our terms of use, or where disclosure is otherwise required by law.

Is My Personal Data Transferred Outside the EU?

As a general rule, your personal data is not transferred outside the EU. Any potential transfers outside the EU would only concern situations where the servers of systems used by us are located outside the EU.

Should such transfers occur, we will ensure that the processing, transfer and storage of your personal data are carried out on appropriate legal grounds and with adequate safeguards as required by law.

How Long Is My Personal Data Retained?

We do not retain your personal data for longer than is necessary for the purposes for which it is used or as required by contract or law. However, retention periods may vary depending on the purpose and circumstances.

As a general rule, personal data is removed from our systems after the contractual relationship has ended. We also aim to update your information from time to time.

Website visitor data collected by Google Analytics is retained for 14 months, after which it is automatically deleted from Google’s servers.

Protection of the Register

The register is protected against unauthorised access, and access to the register is secured with personal usernames and passwords. Users with access to the register are bound by confidentiality obligations.

Access to the register is restricted to employees of Ekosata Oy. Employees are bound by an obligation of confidentiality.

Cookies

Cookies are small identifiers stored on a visitor’s computer or other device when they visit a website. Our Service uses cookies to enable us to provide the Service in the most user-friendly and high-quality manner possible.

Statistical information may be collected about the use of the Service, including the number of visitors, most popular pages, landing pages, exit pages and other similar information. Google Analytics may be used to collect statistical information within the Service. Google may disclose information to third parties where required by law. Google’s Privacy Policy is available at:

http://www.google.fi/policies/privacy/

By using our Service, the visitor consents to the disclosure of the above-mentioned information to Google in accordance with the terms described above. If you do not want the Service to collect information through cookies, you can disable cookies in your web browser settings. Most web browsers allow users to block cookies.

Disabling cookies may affect the functionality of the Service, and we cannot guarantee that the Service will function without errors if the use of cookies is not permitted.

Social Media Plugins

Our Service may contain links or connections to third-party websites as well as social media plugins, such as YouTube, Vimeo, AddThis, Twitter, Facebook, Instagram and LinkedIn.

Using social media plugins may result in identifiable information being transmitted to the relevant social media service providers. When opening a plugin, you may allow cookies from third-party websites to be stored on your computer or device. The operators of these services may then be able to track your use of the website if you are logged in to the relevant social media service.

Third-party services or applications provided or transmitted through the Service are subject to the terms and conditions of the respective third parties. The administrator of the Service has no control over such third-party websites and is not responsible for any material published on them or for their use.

Visitor’s Rights

Withdrawal of Consent

If we process your personal data on the basis of your consent, you may withdraw your consent at any time by notifying us, for example by sending an email to the controller of the register.

Right of Access

You have the right to obtain confirmation from us as to whether we process personal data concerning you and to obtain information about the personal data we process about you. You also have the right to receive additional information about the grounds and purposes for processing your personal data.

Right to Rectification

You have the right to request that we correct any inaccurate, outdated or otherwise incomplete personal data concerning you.

Right to Object to Direct Marketing

You may object to the processing of your personal data for direct marketing purposes by sending an email to the controller of the register.

Right to Object to Processing

If we process your personal data on the basis of the public interest or our legitimate interests, you have the right to object to the processing of your personal data insofar as there are no compelling legitimate grounds for the processing that override your rights, or where the processing is not necessary for the establishment, exercise or defence of legal claims.

Please note that in such circumstances we may no longer be able to provide our services to you.

Right to Restriction of Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data.

Right to Data Portability

If we have processed your personal data on the basis of your consent or for the performance of a contract, you have the right to receive the data you have provided to us electronically in a commonly used format so that it can be transferred to another service provider.

Register Information

Name of the register: Ekosata Oy Customer Register
Data Controller: Ekosata Oy, Oppipojankatu 1, 32200 Loimaa, Finland
Contact person for register-related matters: Juhani Turpeinen, juhani.turpeinen@ekooil.com

Changes to the Privacy Policy

Any changes to this Privacy Policy will be published on our online service.

Privacy Policy last updated: 23 January 2026