Privacy Policy

This is how we process your personal information

In order to ensure the operation of our website and service and to maintain its quality, we collect some information from visitors to our website. This Privacy Statement states e.g. what information and why we collect it from you.

We respect your privacy and take your privacy seriously. We therefore ensure that your data is processed only by those who have the right to do so and only for the purposes described in this leaflet.

Because all of the services on our website are aimed at companies, we do not collect the personal information of children or children under the age of 16 as appropriate.

What information we collect

We receive the information mainly from the user himself in connection with the use of the contact form, newsletter or other service on our website or otherwise directly from the customer. In addition, we may collect information from public sources, such as public websites or business registers, and associate it with information provided by the user, such as a company name or telephone number.

In addition to the information provided by the user, we use Google Analytics to collect visitor data on the Website.

Typically, the information provided by a visitor includes a business, name, phone number, email address, or message. With data collected by Google Analytics alone, we are unable to directly identify users.

What we use your information for

We collect a variety of data for a number of different purposes. These include e.g. customer relationship maintenance, communication, marketing and service development and production. We do not perform automated data processing that would result in profiling or decisions based on personal information.

With Google Analytics visitor data, we analyze and develop our website and target relevant marketing to our visitors.

On what basis we process your information

Whenever we process your data as described above, we have a legal basis in Article 6 (1) of the EU Data Protection Regulation (GDPR) (EU) 2016/679:

a) the data subject has consented to the processing of his or her personal data for one or more specific purposes

b) processing is necessary for the performance of a contract to which the data subject is party or in order to take pre-contractual measures at the request of the data subject

c) processing is necessary to comply with a statutory obligation on the controller

f) processing is necessary for the protection of the legitimate interests of the controller or of a third party

One of these may have happened to you, for example, by subscribing to our newsletter, giving us consent for marketing or if you are already our customer.

Who processes your information

Your information will be processed by us by the personnel of our company whose work involves the processing of it or is otherwise necessary for the performance of the work. We also use services, systems and software provided by third parties where the processing of your personal information may be necessary. These can be, for example, customer registry software. In these we use reliable service providers, whose experts, if necessary, process the information for our assignment. Even then, your information will be processed lawfully. This is guaranteed by agreements between the organizations.

How we store your personal information

We store your information on the servers of our service providers, which are protected in accordance with general industry practices. We hold the privacy of your personal information in the highest regard. Your information will not be disclosed to anyone other than those who need it in the course of their work.

Are we releasing data outside the EU?


As a general rule, your data will not be disclosed outside the EU or the EEA. However, in the future, some of our services may operate outside of these areas. Even then, we ensure the lawfulness of data processing through separate agreements if personal data must be transferred to ensure the operation of the service.

How long your data will be stored

We will not retain your personal information for longer than is necessary for its purpose or as required by contract or law. Retention periods may vary depending on a number of factors, including the purpose for which the information will be used and our obligations under applicable law. We strive to keep you up to date.

What rights do you have

  1. Right of access to information
    You have the right to receive a copy of the personal information we process about you in a commonly used and machine-readable form.
  2. Right to rectify data
    You have the right to request that we correct or supplement inaccurate or incorrect personal information about you without undue delay.
  3. The right to delete data, ie the right to be forgotten
    You have the right to ask us to delete personal information about you without undue delay. Please note that you only have the “right to be forgotten” if we have no legal obligation to continue processing your personal information. If we have a legal obligation or right to retain certain information, it cannot be deleted.
  4. Right to restrict processing
    For example, you can ban marketing.
  5. Right to withdraw consent
    For example, you can revoke your previous consent to marketing
  6. The right to transfer data from one system to another
    You may request personal information about you that you have provided to us in a structured, commonly used and machine-readable form and transfer that information to another data controller.
  7. Right of objection
    You also have the right to object to the use of your information for marketing purposes, for example. You may object to a treatment based on your legitimate interests based on the legitimate interests of our company.
  8. Right to be informed of a security breach against the controller
    Despite strong and up-to-date security measures and responsible data processing, a breach of security occur in our personal data register and if it is likely to pose a high risk to the rights and freedoms of natural persons, we as a controller must report the breach without undue delay.
  9. Right to lodge a complaint with the supervisory authority
    If you feel that we have not processed your information lawfully, you can lodge a complaint with the supervisory authority.

You can contact us about privacy issues

ecoIT (Inno Kukko Oy, VAT FI24044630)
Korvenrannantie 15 T, 04320 Tuusula
Puhelinnumero: +358 9 7510 1500
Sähköpostiosoite:

webDesign: Mekanismi