Privacy notice
Website visitors and representatives of customers, suppliers and other stakeholders
Updated: 6 February 2026
In this privacy notice (“privacy notice”), we explain how Conlog Oy (“we” or “controller”) collects, processes and shares your personal data and what your rights are in relation to your personal data. The term "personal data" means any information relating to an identified or identifiable natural person in accordance with applicable data protection regulations.
When processing personal data, we always act in accordance with applicable data protection legislation. In particular, we comply with the EU General Data Protection Regulation (2016/679), which generally applies to all processing of personal data.
It is important to us that you can trust that your data will be processed securely and in accordance with applicable legislation. We encourage you to read this privacy notice and contact us if you have any questions.
Controller and the contents of the privacy notice
Controller: Conlog Oy
Business ID: 2029239-7
Address: Ahmasjärventie 2–4, 91300 Ylikiiminki
Contact: sales@conlog.fi
As a data subject, you may be a visitor to our website or a representative of a potential or current customer, supplier or other stakeholder. The term "data subject" refers to a natural person whose personal data is processed by us.
This privacy notice concerns the processing of personal data in the following contexts:
- Visits to our website: conlog.fi
- Processing of personal data of representatives of our customers, suppliers and other stakeholders (collectively, "Representatives")
Purpose of processing personal data
We process your personal data only for the purposes described in this privacy notice or for other purposes that are specifically communicated to you when your personal data is collected, and only to the extent that the processing of personal data is necessary for each purpose of processing.
We collect and process your personal data for different purposes depending on your role in your interaction with us.
Website visitors:
- Enabling the use of the website: We process your personal data to enable you to use our website and its features and to ensure the overall security, functionality and stability of the website, including the prevention and detection of potential misuse and attacks that threaten the security of the website. The collection and further processing of your personal data on our website is mainly done using automatic technical means, such as cookies and other similar technologies.
- Improving our website: We process the personal data you provide to improve the quality and functionality of our website by analysing the features and functions you use on the website and analysing the parts of the website you visit.
- Marketing analytics: We use marketing analytics to understand how people interact with our website and services. This helps us to tailor the content and advertisements we offer, support social media features, and analyse site traffic. We may use cookies and similar technologies to collect information about your browsing habits, such as the pages you visit, the links you click and the length of your visits.
- Sending newsletters: We process the personal data you provide to send you customer letters and newsletters.
- Other legitimate business interests: We process your personal data to a limited extent for other legitimate purposes related to our business. These include responding to your enquiries, identifying potential customers and generating leads, improving the quality and user experience of our services and website, ensuring data security, protecting our property, preventing and investigating suspected misconduct, and analysing and compiling business statistics.
Representatives:
- Management of customer and business relationships: entering into and implementing agreements between us and you or the organisation you represent, conducting due diligence checks and other background checks permitted by applicable law, managing and developing business relationships, monitoring compliance with agreements, and investigating possible suspected misconduct.
- Compliance with applicable statutory requirements: complying with tax and corporate conformity requirements and responding to requests from authorities, for example, based on tax or accounting legislation or other legal obligations applicable to us.
- Billing: handling and managing billing between the organisation you represent and us.
- Communication with you and third parties: communicating with current or potential customers, suppliers or other stakeholders in connection with our business, for example, with stakeholders to maintain and improve our relationships or to respond to requests or enquiries from representatives of potential or current stakeholders.
- Sending marketing communications: direct marketing and sending you customer letters and information about our services.
- Other legitimate business interests: processing your personal data to a limited extent for other legitimate purposes related to our business, such as identifying potential customers and generating business opportunities, to develop and improve the quality, functionality or user experience of our services and website, to ensure and improve the security of our data security and premises, to protect our property, to prevent and investigate suspected misconduct, as well as to analyse and compile statistics for business purposes.
Categories of personal data processed
We process the following personal data:
Website visitors
|
Information related to the use of the website |
such as IP address, information collected through cookies, time of visit, browser version, and information about the use of our website. |
|
Information on customer service |
such as information about your contacts with us and information you provide in connection with these contacts. |
|
Contact information |
such as your name, email address and telephone number. |
Representatives
|
Contact information |
such as name, email address and telephone number. |
|
Information related to the business relationship |
such as the name and the business ID of the organisation you represent, your position in the organisation, your language preferences, information about meetings between us and you, and information about agreements between us and you or the organisation you represent, as well as your relationship to the agreement. We may verify and supplement the information from publicly available sources, such as your public LinkedIn profile. |
|
Content of the communication |
such as information provided to us in meetings, email correspondence and other means of communication, as well as the timing and other details of communications between you and us. |
Legal basis for processing personal data
The processing of personal data is based on the legal bases listed in the tables below depending on your role in your interaction with us.
Website visitors
| Purpose of processing | Personal data processed | Legal basis |
|
Enabling the use of the website |
Information related to the use of the website (excluding personal data collected through non-essential cookies) |
Legitimate interest in maintaining a secure and functional website for business purposes and communicating with current and potential customers (Article 6(1)(f) of the GDPR). |
|
Improving our website |
Information related to the use of the website, Information on customer service, Contact information |
Legitimate interest in maintaining a customer service channel and improving the website (Article 6(1)(f) of the GDPR).
The processing of personal data collected through non-essential cookies is based on your consent (Article 6(1)(a) of the GDPR). |
|
Marketing analytics |
Information related to the use of the website |
1. Consent (Article 6(1)(a) of the GDPR). We base our processing on your consent to process personal data collected by non-essential cookies.
2. Legitimate interest in analysing the effectiveness of our marketing campaigns or understanding customer preferences, where such processing is necessary for marketing and improving our services (Article 6(1)(f) of the GDPR). |
|
Sending newsletters |
Contact information |
Consent (Article 6(1)(a) of the GDPR). |
|
Other legitimate business interests |
Information related to the use of the website, Information on customer service, Contact information |
Legitimate interest in identifying potential customers and generating business opportunities, responding to enquiries made through our website, developing and improving services, ensuring data security, protecting property, preventing and investigating suspected misconduct, and compiling statistics for business purposes (Article 6(1)(f) of the GDPR). |
Representatives
| Purpose of processing | Personal data processed | Legal basis |
|
Management of customer and business relationships |
Contact information, Information related to the business relationship, Content of the communication |
Legitimate interest in managing and developing customer relationships with customers, suppliers and other stakeholders, fulfilling contractual obligations and performing due diligence and background checks within the limits permitted by applicable law, as well as to ensure compliance with contractual obligations and investigate suspected misconduct in business relationships (Article 6(1)(f) of the GDPR). |
|
Compliance with applicable statutory requirements |
Contact information, Information related to the business relationship, Content of the communication |
Legal obligation (Article 6(1)(c) of the GDPR). |
|
Billing |
Contact information, Information related to the business relationship, Content of the communication |
Legitimate interest in managing finances, invoicing and payment administration in business relationships (Article 6(1)(f) of the GDPR). |
|
Communication with you and third parties |
Contact information, Information related to the business relationship, Content of the communication |
Legitimate interest in maintaining and developing business relationships through communication with customers, suppliers and other stakeholders (Article 6(1)(f) of the GDPR). |
|
Sending marketing communications |
Contact information, Information related to the business relationship, Content of the communication |
Legitimate interest in providing information about services to current and potential stakeholders and maintaining business relationships (Article 6(1)(f) of the GDPR).
Where required by applicable law, we will only send you direct marketing based on your consent (Article 6(1)(a) of the GDPR). |
|
Other legitimate business interests |
Contact information, Information related to the business relationship, Content of the communication |
Legitimate interest in identifying potential customers and generating business opportunities, developing and improving services, ensuring data security, protecting property, preventing and investigating suspected misconduct, and compiling statistics for business purposes (Article 6(1)(f) of the GDPR). |
Cookies
We use cookies and identifiers on our website to ensure its optimal functioning and the correct display of content. A cookie is a text file that is stored in your browser or on your device. We use cookies to personalise the content and advertisements we offer, to support social media features and to analyse our site traffic.
Please see our website's cookie banner for more information about the cookies we use. The cookie banner allows you to give your consent to the use of non-essential cookies or to withdraw your previously given consent.
You can change your browser's cookie settings at any time. However, please note, that blocking cookies may impair the functionality of the website and not all content may be displayed correctly.
Collection of personal data
We mainly collect your personal data directly from you or the organisation you represent. You can provide us with your personal data, for example, via our website or email, in telephone conversations or meetings, or in documents you send us.
We may collect and update personal data from publicly available sources or from the registers of authorities and companies providing personal data services.
We may collect personal data automatically using cookies when you visit our website.
Retention period of personal data
We will retain personal data only for as long as is necessary to fulfil the purpose for which it is processed or to comply with legal obligations. The data will be deleted or anonymised when it is no longer necessary to retain it for the purpose of the law or the exercise of the rights or obligations of either party.
The personal data of website visitors is mainly processed for the duration of their visit to the website. The exact retention periods for cookies can be found in the cookie banner. If you contact us via our website, your enquiry will mainly be stored for two (2) years, unless we have an additional obligation or right to process the personal data in the communication for a longer period. Personal data collected for direct marketing purposes will be retained for two (2) years after the end of the marketing campaign.
For representatives, personal data will mainly be retained for as long as our customer or business relationship with the organisation you represent lasts, and for two (2) years after the end of that customer or business relationship. We may be required to retain some data for longer periods, for example due to mandatory accounting legislation.
Personal data processed on the basis of your consent will be retained until you withdraw your consent or until there is no longer a need to process the personal data in question, whichever occurs first.
Disclosure and transfer of personal data
We may disclose your personal data to third parties that we use as service providers or subcontractors, such as providers of services for maintaining personal data. We use trusted contractual partners with whom we have agreed on terms that comply with the requirements of data protection legislation.
We may disclose your information to authorities where we are required by law to do so, for example to prevent or investigate fraud or other illegal activities. We may disclose your personal data to other parties upon the order of a competent court or if required by mandatory legislation. In addition, we may disclose your data in connection with a potential sale of a business or other business reorganisation to a purchaser of a business or other relevant party in connection with a reorganisation.
When transferring data, we will ensure a high level of data security and data protection in accordance with the EU General Data Protection Regulation. Third parties and their subcontractors may transfer personal data outside the EU or the European Economic Area. In these situations, we comply with applicable legislation and its requirements, such as the standard contractual clauses (SCCs) approved by the European Commission. The SCCs can be found here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
We or our sub-processors may transfer your personal data outside the EU or the European Economic Area if this is necessary for the performance of our services, for example when using global cloud services. In connection with these services, personal data is mainly retained within the EU, but in certain situations personal data may be transferred to countries where the service providers or their sub-processors operate. You can request further information about the service providers we use at a given time, by contacting us at the email address provided at the beginning of this privacy notice.
Data security principles
The security of personal data is important to us. We have put in place appropriate technical and organisational measures to protect personal data:
- Access to data is limited to those persons who need it for their job duties.
- Information systems and equipment are protected by technical measures, including firewalls and passwords.
- Our staff are trained to handle data appropriately and in accordance with the instructions given by the controller.
- Electronic files are regularly backed up.
- The destruction of material containing personal data is carried out in a secure manner.
- If, despite our security measures, a data breach occurs that is likely to have a negative impact on the data subject’s data protection, we will notify the competent authorities and the data subjects concerned as soon as possible, if required by applicable data protection legislation.
Your rights as a data subject
Below we have summarised the rights you have as a data subject under mandatory data protection legislation. The legislation regarding some of the rights is complex in nature and the regulated rights are subject to a number of exceptions. To keep this privacy notice concise, not all of the details of the legislation have been included in the summary.
Access to your Personal Data
You have the right to ask us whether we process personal data concerning you. If we process your personal data, you can request access to such data. You may also request information on how we process your personal data and on your rights in relation to such data. If any of your personal data is inaccurate, you have the right to request that we correct it.
Erasure of Your Personal Data (‘Right to be Forgotten’)
You can ask us to delete your personal data at any time. We must comply with your request if we have no legal basis to continue processing your personal data. Please note, however, that certain data may be subject to statutory retention periods during which we may not delete such data.
Data Portability
If we process your personal data based on your consent or a direct agreement with you, and we do so by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.
Objecting to Processing
If we process your personal data based on our legitimate interests, you can object to that processing. After you object, we must stop processing the data unless we can show compelling lawful grounds to continue. You can object to the use of your personal data for marketing at any time, and we will cease such processing immediately. When we collect your personal data, you may be asked whether you wish to receive marketing communications.
Restriction of Processing
You may have the right to request a restriction of how we process your personal data. If granted, we will only retain your data and will not process it further, except in limited circumstances.
Withdrawal of Consent
If you have given consent for certain processing activities, you can withdraw this consent at any time with effect for the future. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the details provided at the start of this privacy notice. We may refuse to act on a request if we can demonstrate that it is manifestly unfounded. If you request multiple copies of your personal data under your right of access, or if you submit more than one request per year, we may charge a reasonable fee reflecting our administrative costs.
Complaints
If you believe our processing of your personal data breaches applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Finland, the competent supervisory authority is Office of the Data Protection Ombudsman (https://tietosuoja.fi/en/contact-information). However, we hope that you will contact us first.
Changes to the privacy notice
We reserve the right to amend or update this privacy notice as necessary.