Valid from: 10.7.2025

1. The controller

• Name: Fimafri Oy
• Business ID: 2816888-4
• Domicile: Kouvola
• Address: Tolkkilankatu 6 A 24, 45100 Kouvola, Finland
• Email: info@fimafri.com
• Telephone: +358 44 236 9782

2. Data Protection Officer

• Please notify this person if necessary - it could be the CEO or a separate person in charge of data protection, for example.

3. Groups of registrants

The personal data processed in the register include:

• Customers, contact via forms.
• Stakeholders, such as partners.
• Jobseekers (if recruiting).

4. Types of data processed

The data processed include:

• Contact information: name, address, email, phone number
• Company and position/title information (e.g. role of respondent)
• Payment or contract information (orders, invoices)
• Voluntary information provided through forms
• IP address and analytics data from cookies

5. Purpose and legal basis of the processing

The data is processed for the following purposes:

1. Customer relationship management & billing (accounting obligation - personal data retention for 7 years)
2. Communication and customer service.
3. Marketing and newsletters (by consent only).
4. Website activity monitoring (Google Analytics, cookies, consent).
5. Compliance with legal obligations (e.g. accounting).

The legal grounds are:

• Discussions at the time of billing - a legal obligation.
• Marketing - consent.
• Website analytics - legitimate interest of the controller

6. Data retention period

• Accounting records (e.g. customer and payment data): 7 years.
• Marketing register: until consent is withdrawn.
• Website analytics (Google Analytics)

7. Transmission of data and recipients

Information may be disclosed:

• For public authorities on the basis of legal requirements.
• Service providers (e.g. email marketing, analytics) with a data processing agreement.
• Cookies to third party service providers (Google Analytics, some-plugin services, etc.).

Data will not be transferred outside the EU/EEA without appropriate security mechanisms.

8. Rights of the data subject

The data subject has the right to:

• Right of access to your own data.
• Correct incorrect information.
• Delete data ("the right to be forgotten") where the law allows.
• Restrict or object to processing, including in direct marketing.
• Data portability to another scheme (to the extent permitted by law).
• Withdraw consent marketing and analytics.
• Complain to the data protection authority (Office of the Data Protection Ombudsman, P.O. Box 800, 00531 Helsinki; tietosuoja@om.fi).

9. Cookies

The Fimafr website uses:

• Necessary cookies for the functionality of the site.
• For analytics use, Google Analytics cookies, only with consent.
• Website cookies are activated through consent

10. Security measures

The data will be treated confidentially and secured:

• With usernames, encryption, access restrictions.
• Through data processing agreements with partners.
• With regular updates and backups.

11. Data protection issues

The Data Protection Officer can be contacted for all data protection matters (info@fimafri.com).