Rantasalmi Log Houses

Privacy policy

We value your privacy and are committed to protecting it in accordance with this privacy policy, applicable laws, and good business practices.

This privacy policy provides information in accordance with the EU General Data Protection Regulation (GDPR) about the personal data we collect, how we process this information, and what rights and options you have regarding your data.

Privacy policy

Data Controller

Rantasalmi Log Houses / Finn-Bois MTR Oy
VAT FI20917246
Kyläluudankaari 6
FI-50600 Mikkeli, Finland

mikko.mannila(at)rantasalmi.com

What information is collected?

We store and retain information provided by users in the following cases:

Identification information, like your name
Contact details, such as phone number, email address, and postal address
Marketing communication consents

We collect information when you submit a contact request through a form. The collected information includes the details you provide (name, contact information) and your message. This information is used for customer service, processing inquiries, and marketing communication (if you have given consent for marketing).

The information is retained only as long as necessary to process the request or in accordance with legal requirements.

Who uses the information?

The information is primarily used by the staff of Rantasalmi Log Houses / Finn-bois MTR Oy.

In some cases, we may need to transfer data to trusted third parties for purposes such as storage, analytics, or marketing. We only work with partners with whom we have established comprehensive data protection and data processing agreements that comply with the EU General Data Protection Regulation (GDPR). These partners are not permitted to use the data for their own purposes or share it further.

More information on the processing of data by Google Analytics: Google Analytics Privacy Policy

What is the information used for?

The information is used for:

For visitor analysis and website development
For responding to inquiries

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the individual's consent (documented, voluntary, specific, informed, and unambiguous), contract, or legal obligation. The data is processed only for specified purposes, and it will not be shared for other purposes without separate consent.

Are your data secure?

All the information you provide is stored in password-protected and, where necessary, encrypted databases, in compliance with the EU General Data Protection Regulation (GDPR) and with the use of other appropriate security measures. Information collected by third parties is stored in accordance with the GDPR, and our partners have the necessary data protection and data processing agreements in place.

We receive copies of your message and order to our company's email, and this information is securely stored in our database for as long as necessary, but no longer than required by law.

Information about the processing of cookies and other data collected by Google Analytics can be found here: Google Analytics Privacy Policy.

What rights do you have?

Right of access
The data subject can check the personal data we have stored.

Right to rectification of data
The data subject can request the correction of incorrect or incomplete data concerning them.

Right to object
The data subject can object to the processing of personal data if they believe that their personal data has been processed unlawfully.

Right to object to direct marketing
The data subject has the right to prohibit the use of their data for direct marketing.

Right to erasure
The data subject has the right to request the deletion of their data if the processing is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why the data cannot be deleted. It should be noted that the data controller may have a legal or other obligation to retain the requested data. The data controller is required to retain accounting records for the period specified in the Accounting Act (10 years). Therefore, accounting-related data cannot be deleted before the retention period has expired.

Right to withdraw consent
If the processing of personal data concerning the data subject is based solely on consent, and not, for example, on a customer relationship or membership, the data subject may withdraw their consent.

The data subject has the right to lodge a complaint with the Data Protection Ombudsman
The data subject has the right to request that we restrict the processing of disputed data until the issue is resolved.

Right to lodge a complaint
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they believe that we are violating applicable data protection laws while processing personal data. Contact details for the Data Protection Ombudsman: Office of the Data Protection Ombudsman

Regular sources of information
The data in the register comes from the information provided by the customer themselves when the customer relationship is established or during it, as well as from the information collected directly from the customer through online forms.

To exercise your rights, you can contact our customer service or send your request by email to mikko.mannila(at)rantasalmi.com.