Privacy

Website privacy policy

Updated: 27.07.2026

This policy describes how Oy Söbe Group Ab processes the personal data of this website's users. The policy is limited to this website and does not cover the company's other business operations.

1. Data controller

Oy Söbe Group Ab (hereinafter “the Company”)
Business ID: 3318370-4
Boxvägen 111
04130 Sipoo
Email: oysobegroupab@gmail.com
Phone: +358 44 243 2404

2. Contact person for data protection matters

For questions concerning data protection, you can contact:

Email: oysobegroupab@gmail.com
Phone: +358 44 243 2404

3. What personal data do we process?

Information provided via the contact form

When you send a message using the website's contact form, we process the information you yourself provide in the form. Such information may include:

  • name
  • email address
  • phone number, if the form asks for it
  • the content of the message
  • other information you yourself provide in the form

Technical data for preventing misuse of the form

To safeguard the operation of the form and prevent spam, technical data is stored when the form is submitted, such as:

  • IP address
  • the time of submission
  • the form's technical verification data

This data is used solely to safeguard the operation of the form, prevent misuse and investigate possible incidents. The data is not used for profiling users or for marketing.

Website visitor statistics

The website uses the privacy-respecting, cookie-free visitor analytics service Plausible Analytics. The Plausible instance is hosted on the same server, located in the EU/EEA, as the website, and the data is not disclosed to external analytics services.

The analytics is used only to monitor general statistics, such as the website's visitor numbers, the most popular pages and traffic sources. Plausible Analytics does not use cookies, and its purpose is not to identify individual visitors or profile them.

4. For what purposes is personal data used?

Personal data is processed for the following purposes:

  • responding to enquiries
  • sending a confirmation message to the person who submitted the form
  • managing a customer relationship or a potential customer relationship
  • ensuring the operation, security and usability of the website
  • preventing spam, bots and misuse
  • compiling statistics on and developing the general use of the website
  • complying with statutory obligations, should any arise

5. Legal basis for processing

Depending on the situation, the processing of personal data is based on:

  • Legitimate interest: we process personal data in order to respond to enquiries, protect the website against misuse and obtain a general picture of how the website is used.
  • Preparation or performance of a contract: if the enquiry relates to a quotation request, an order or a customer relationship, the data may be processed for the preparation or performance of a contract.
  • Legal obligation: in some situations, data may be processed in order to comply with statutory obligations, such as obligations relating to accounting.

6. How is the form data transmitted?

When the contact form is submitted, the content of the message is sent by email to the Company's contact email address. In addition, an automatic confirmation message is sent to the person who submitted the form, informing them that the message has been received.

7. How long is data retained?

Personal data is retained only for as long as necessary for the purposes described in this policy.

Enquiries received by email are retained for as long as the handling of the matter, the customer relationship or any statutory obligations require.

Enquiries stored via the form are retained for no longer than the current and the preceding calendar year, after which they are deleted on a regular basis, unless longer retention is necessary due to the handling of the enquiry, the customer relationship or a statutory obligation.

The form's technical log and anti-spam data, such as the IP address and submission time, are retained only for as long as necessary to prevent and investigate misuse.

8. To whom is data disclosed?

Personal data is not sold or disclosed to outside parties for marketing purposes.

The technical implementation and maintenance of the website and its contact form are handled by Mainostoimisto Kompassi (mainostoimistokompassi.fi), which acts as the data processor for this website. Mainostoimisto Kompassi processes the data solely on behalf of the data controller and in accordance with its instructions, and the data is accessible only to persons authorised by it.

9. Is data transferred outside the EU or the EEA?

The data from this website's contact form, the visitor statistics and the technical data are stored on a server located in the EU/EEA. As a rule, data is not transferred outside the EU or the EEA.

For messages sent by email, the location of the data is determined by the recipient's own email service.

10. Cookies and tracking technologies

This website does not use cookies or other tracking technologies stored on the user's device.

11. Form spam prevention

The contact form uses technical methods to distinguish genuine enquiries from automated bot and spam submissions. Data related to spam prevention is not used for profiling users or for marketing.

12. Data security

Personal data is protected by appropriate technical and organisational measures. These include, for example:

  • access control and restricted access rights in the server environment
  • secured maintenance connections
  • HTTPS encryption of website traffic
  • up-to-date server and software updates
  • technical spam prevention on forms
  • regular deletion of unnecessary data

13. Rights of the data subject

Under data protection legislation, you have the right to:

  • receive information about the processing of your personal data
  • request access to the data concerning you
  • request the rectification of inaccurate data
  • request the erasure of data
  • request the restriction of processing
  • object to the processing of personal data in certain situations
  • have the data you have provided yourself transferred from one system to another, where applicable
  • withdraw your consent, if the processing is based on consent

You can exercise your rights by contacting the contact person mentioned in section 2 of this policy.

14. Right to lodge a complaint with the supervisory authority

If you consider that your personal data is being processed in violation of data protection legislation, you have the right to lodge a complaint with the supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).

15. Changes to this privacy policy

This privacy policy may be updated if the operation of the website, the services used or the processing of data changes. The current version is always available on this website.