Privacy
Privacy Notice
Last updated: 2026-07-09
This notice explains how PKP Solutions Oy processes personal data in connection with the Kärryhuolto.fi website, enquiries, quote requests, project requests and customer relationships.
1. Data Controller
2. Privacy Contact
Requests concerning data protection, access, rectification, erasure or other data subject rights can be sent to pkp@pkpoy.fi.
We may verify the requester's identity before acting on a request.
3. Personal Data Processed
Depending on how you use the website, we may process, among other things:
- name, company name, phone number, email address, city
- enquiry subject, message content and preferred contact method
- trailer, vehicle and project information; dimensions and technical details
- design details for hatches, doors, fixtures, interiors, electrics, lighting and flooring
- photos, sketches, PDFs, equipment data and other attachments you provide
- quote request and quotation information; communication history
- customer relationship and assignment records
- submission timestamp and any unique request reference
- IP address and technical server logs; browser and device information as required for site operation and security
- page requests and technical error information
- your cookie choices and consent settings
- analytics data only with your consent
- marketing / advertising data only with your consent and only if such tools are in use
Please do not send unnecessary sensitive personal data, national identity numbers, payment card details or other information that is not needed to handle your project through forms or attachments.
4. Purposes and Legal Bases
| Purpose | Examples | Legal basis |
|---|---|---|
| Responding to enquiries | Questions, service requests, general contact | Legitimate interests / pre-contractual measures |
| Handling quote and project requests | Assessment, follow-up questions, discussions, preparing a quote | Pre-contractual measures at your request |
| Managing customer relationship & assignments | Planning, delivery, documentation, invoicing | Performance of a contract and legal obligations |
| Security & abuse prevention | Server logs, spam prevention, technical troubleshooting | Legitimate interests |
| Analytics (if enabled) | Measuring and improving website use | Consent |
| Marketing / advertising measurement (if enabled) | Conversion tracking, targeting, remarketing | Consent |
| Legal obligations | Accounting, tax, authority requests | Legal obligation |
Sending an enquiry does not require consent to analytics or marketing. Consent is requested separately and only for optional technologies.
5. Sources of Data
Personal data is obtained primarily from the data subject themselves through website forms, the project request wizard, email, phone or other communication.
Technical data may be collected automatically when the site is used, to the extent required for its operation, security and troubleshooting. Analytics and marketing data are collected only based on user consent.
6. Recipients and Service Providers
Service providers process data on behalf of PKP Solutions Oy under a contract, or in their own separately defined role. The providers in use at the time of publication are:
| Provider | Purpose | Non-EEA transfer | Transfer basis |
|---|---|---|---|
| Lovable (verkkosivuston hosting-alusta) | Website hosting, edge runtime and build pipeline. Handles HTTP requests and server logs. | Yes | To be confirmed: transfer mechanism per platform terms (e.g. Standard Contractual Clauses). |
| Google Fonts | Delivers the site's web font (Manrope). The service receives your browser's IP address when the font is loaded. | Yes | Standard Contractual Clauses (SCC) between Google Ireland Ltd. and Google LLC. |
Personal data may be disclosed to authorities or other parties if required by applicable law or a binding official order.
Personal data is not sold.
7. International Data Transfers
Some of the service providers listed in section 6 may process data outside the EEA. In these cases the transfer is based on a mechanism recognised by the European Commission, such as Standard Contractual Clauses or an adequacy decision.
Beyond these disclosed providers, we do not knowingly transfer personal data outside the EEA in connection with website use.
8. Retention Periods
- Enquiries that do not lead to a customer relationship: up to 24 months from the last contact.
- Project requests and attachments that do not lead to an assignment: up to 24 months from the last contact.
- Quotes that do not lead to an assignment: up to 24 months from the end of the quote's validity.
- Customer relationship and assignment records: for the duration of the relationship and as long as needed to handle contractual liabilities, receivables or legal obligations.
- Accounting records: as required by applicable accounting legislation.
- Server and security logs: as a rule, up to 90 days, longer if needed to investigate a security incident or technical issue.
- Cookie choice: 180 days, or until you change your settings.
- Analytics data (if enabled): per the analytics service's retention settings.
- Marketing data (if enabled): per the service's retention settings and the current consent.
9. Data Security
PKP Solutions Oy uses appropriate technical and organisational measures to protect personal data, taking into account the risk of processing.
- HTTPS encryption across the site
- Server-side form handling, input validation and length limits
- File type and size restrictions for attachments
- Restricted access to systems and storage
- Software updates and technical monitoring
- API keys and secrets kept in server-side configuration, never in browser code
No technical solution offers absolute security. Any notifiable personal data breach will be handled in accordance with applicable law.
10. Data Subject Rights
- right to receive information about the processing of your personal data
- right of access to your personal data
- right to request rectification of inaccurate or incomplete data
- right to request erasure where the right applies
- right to request restriction of processing
- right to object to processing based on legitimate interests on grounds relating to your particular situation
- right to withdraw consent at any time where processing is based on consent
- right to data portability where the right applies
- right to lodge a complaint with a supervisory authority
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests can be sent to pkp@pkpoy.fi.
You have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you consider that the processing of your personal data infringes data protection law.
11. Automated Decision-Making
We do not make fully automated decisions about you that produce legal or similarly significant effects based on the contact form or project request submissions.
13. Changes to This Notice
This notice may be updated if the operation of the website, the service providers used or the processing of personal data changes. The last updated date is shown alongside the notice.