Privacy Policy
Who is responsible for your data
Link Industrial Oy (Business ID 3641805-4) is the controller of the personal data described in this policy. We decide why and how that data is processed.
For any question about your personal data, contact iikka.kallio@linkindustrial.fi. We are not required to appoint a Data Protection Officer and have not appointed one.
What this policy covers
This policy applies to visitors of this website and to the business contacts we deal with — customers, suppliers, subcontractors and applicants. It does not cover our employees, who are informed separately.
Most of our work is business-to-business. In practice the personal data we hold is professional contact information: the name, title, employer, email and phone number of the people we work with.
What data we process
- Contact details — name, company, job title, email address, phone number.
- Correspondence — the content of messages you send us through the contact form or by email, and our replies.
- Project and quotation data — enquiries, offers, orders, schedules, site records and invoicing details, to the extent these identify a person.
- Technical data — IP address, browser and device type, pages visited and time of visit, collected automatically by our web server and by cookies.
- Recruitment data — the information you choose to send us when applying for a job.
We do not collect special categories of personal data, and we do not use automated decision-making or profiling.
Why we process it, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Answering enquiries and preparing quotations | Contact details, correspondence | Legitimate interest — responding to a business enquiry; steps prior to a contract |
| Delivering projects and managing the customer relationship | Contact details, project data | Performance of a contract |
| Invoicing, accounting and statutory records | Invoicing details, project data | Legal obligation — Accounting Act (1336/1997) |
| Keeping the site secure and available | Technical data, server logs | Legitimate interest — network and information security |
| Measuring how the site is used | Analytics cookies | Consent |
| Recruitment | Application data | Consent; steps prior to a contract |
Where we rely on legitimate interest, we have weighed our interest in running and marketing an industrial contracting business against your rights, and use only the minimum data needed for the purpose.
Where the data comes from
Almost always from you — through the contact form, by email, by phone or in the course of a project. We may also collect professional contact details from public sources such as a company website, the Finnish Trade Register or a professional network, when we approach a potential customer or supplier.
Who else sees it
We do not sell personal data and we do not disclose it for third-party marketing. Data is shared only where a project or the law requires it:
- Customers and main contractors — the names and qualifications of the people working on a site, where the site requires it.
- Service providers acting on our behalf — website hosting, email, accounting and IT support. These act as processors under a written data processing agreement and may use the data only on our instructions.
- Authorities — where disclosure is required by law, for example tax or occupational safety reporting.
Transfers outside the EU and EEA
Our own systems are operated within the EU and EEA. Some of the services we use are provided by companies established outside the EEA. Where data is transferred outside the EEA, we rely on an adequacy decision by the European Commission or on the Commission's Standard Contractual Clauses together with supplementary safeguards.
When we deliver a project for a customer located outside the EEA, contact and project data may be transferred to that customer on the same basis.
How long we keep it
- Enquiries that do not lead to a contract — up to 24 months from the last contact.
- Customer and supplier relationships — for the duration of the relationship, and for up to 10 years after the last project, matching the limitation periods that apply to construction and installation work.
- Accounting material — 6 years from the end of the accounting year, as required by the Accounting Act.
- Applications — 12 months, unless you agree to a longer period.
- Server logs — confirm with your host, typically 1–12 months.
When a retention period ends, the data is deleted or anonymised.
How we protect it
Access to personal data is limited to the people who need it for their work. Systems are protected by personal credentials and multi-factor authentication where available, connections to this site are encrypted with TLS, and devices are kept up to date. Paper documents containing personal data are kept in locked premises.
If a data breach is likely to result in a risk to your rights, we notify the Data Protection Ombudsman within 72 hours and inform you directly where the risk is high.
Your rights
Under the GDPR you have the right to:
- Ask what personal data we hold about you and receive a copy of it.
- Have inaccurate or incomplete data corrected.
- Have data erased, where we no longer have grounds to keep it.
- Restrict processing while a dispute about accuracy or legitimate interest is resolved.
- Receive data you have given us in a machine-readable format, or have it transferred to another controller.
- Object to processing based on legitimate interest, on grounds relating to your situation.
- Withdraw consent at any time, where processing is based on consent. Withdrawal does not affect processing carried out before it.
Send your request to iikka.kallio@linkindustrial.fi. We answer within one month. If a request is complex, we may extend that by two months and will tell you why. We may need to verify your identity before acting.
If you are not satisfied
Contact us first — most issues are quicker to settle directly. You also have the right to lodge a complaint with the supervisory authority:
Office of the Data Protection Ombudsman
PO Box 800, FI-00531 Helsinki, Finland
tietosuoja.fi/en · +358 29 566 6700
Changes to this policy
We update this policy when our processing changes or the law requires it. The version number and effective date at the top of this page always show the current version. Material changes are announced on this page before they take effect.
Cookie Policy
What cookies are
A cookie is a small text file stored on your device when you visit a website. It lets the site remember things between page loads — your language, for example — and lets us count visits. This policy also covers similar technologies such as local storage and pixels.
Your consent
Cookies that are strictly necessary for the site to work are set without consent, as permitted by the Finnish Act on Electronic Communications Services (917/2014). Everything else — analytics and marketing — is set only after you allow it in the cookie banner.
You can change or withdraw your choice at any time through the cookie settings on this site, or by clearing cookies in your browser. Refusing non-necessary cookies does not restrict your access to any part of the site.
Categories we use
| Category | What it does | Consent |
|---|---|---|
| Necessary | Page delivery, language selection, security, form submission and remembering your cookie choice. | Not required |
| Functional | Remembers preferences that improve the experience but are not essential. | Required |
| Analytics | Counts visits and shows which pages are read, so we can improve the site. | Required |
| Marketing | Measures advertising and builds audiences across sites. | Required |
Cookies on this site
| Cookie | Set by | Purpose | Category | Duration |
|---|---|---|---|---|
wp-wpml_current_language | WPML | Remembers the language you are reading in | Necessary | 1 day |
elementor | Elementor | Stores which page layout has been loaded | Necessary | Session |
PHPSESSID | Link Industrial | Keeps your session together across pages | Necessary | Session |
| consent cookie | banner plugin | Records your cookie choice | Necessary | 6–12 months |
| _ga, _ga_* | Google Analytics | Distinguishes visitors and sessions | Analytics | Up to 2 years |
Third-party services
This site loads typefaces from Google Fonts. When a font is requested, your IP address is transmitted to Google. If you would rather this did not happen, the fonts can be served from our own server instead — see the note below.
fonts.googleapis.com. It removes this disclosure entirely, and it makes the first paint faster. Once done, delete this clause.
Managing cookies in your browser
Every major browser lets you see stored cookies, delete them and block new ones, under privacy or security settings. Blocking all cookies will break parts of most websites, including the language selection on this one.
Changes to this policy
We review this list whenever we add or remove a service on the site. The effective date at the top of this page shows when it was last reviewed.
Questions about your data?
Write to us and say what you need. We answer within one month, and usually a lot sooner.