Quote

Privacy Policy (GDPR & CCPA Compliant)

Last Updated: February 1, 2026 | Gridsspotbridg Suomi Oy

1. Data Controller and Contact Details

This Privacy Policy describes how Gridsspotbridg Suomi Oy (hereinafter "we", "our", or "the Company") collects, processes, stores, and protects personal data in strict accordance with the EU General Data Protection Regulation (GDPR 2016/679) and applicable provisions of the California Consumer Privacy Act (CCPA).

Data Controller Identity:
Gridsspotbridg Suomi Oy (Business ID: 3284910-8)
Registered Address: Teollisuustie 14 B, 00700 Helsinki, Finland
General Support: [email protected]
Data Protection Officer (DPO): [email protected]

2. Personal Data Collected and Purposes of Processing

We collect personal information solely when necessary to deliver our services, process site measurement requests, coordinate installation logistics, and comply with statutory obligations. Data collected includes:

  • Contact Information: Full name, telephone number, email address, property installation address, and postal code.
  • Site & Technical Data: Garage opening dimensions, existing door configuration, electrical readiness, and customer-provided opening photos.
  • Billing & Invoicing Information: Household tax credit details (where requested), billing address, and transaction records.
  • Digital & Telemetry Data: IP address, cookie tokens, browser user agent, and aggregated visit statistics via user consent.

3. Legal Bases for Data Processing

We process your personal information under Article 6 of the GDPR based on the following grounds:

  • Contract Performance: Processing quotes, delivering custom door units, carrying out installation, or executing emergency repairs.
  • Legal Obligation: Maintaining statutory accounting records and tax receipts for 6–10 years as mandated by Finnish accounting law.
  • Legitimate Interests: Managing customer relationships, processing warranty claims, and maintaining high service quality standards.
  • Consent: Opt-in newsletter delivery or non-essential website performance cookies.

4. Data Transfers and Third-Party Processors

We never sell, trade, or rent personal data to third parties for marketing purposes. Personal data is shared exclusively with certified technical partners essential for order fulfillment:

  • Authorized certified installation subcontractors and freight carriers (limited strictly to delivery address and contact phone number).
  • Certified payment gateway providers and electronic invoicing systems.
  • Cloud and IT infrastructure providers operating strictly within EU/EEA data centers.

5. Your Rights as a Data Subject (GDPR & CCPA)

You are entitled to exercise the following statutory rights regarding your personal information:

  • Right of Access: Request a full copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): Request data deletion, subject to statutory retention obligations (e.g. accounting laws).
  • Right to Restrict or Object: Object to processing for direct marketing purposes.
  • Right to Data Portability: Receive your provided data in a structured, machine-readable format.

To exercise any of your rights, send a written request to [email protected]. We respond to all verified inquiries within 30 days.

6. Data Retention and Security Measures

Personal data is retained only as long as necessary to fulfill the specific purposes outlined herein. Warranty files are preserved for the full duration of the panel guarantee (up to 10 years). All collected records are protected using robust technological safeguards, including end-to-end transport encryption, firewalls, and role-restricted staff access.