Privacy Policy


Last updated Nov 29, 2024

We would like to provide you with information regarding collection and handling of personal data at Vahterus Oy (“company”, “we”, “us”, or “our”) and how we use it. We are committed to protecting your personal information and your right to privacy. If you have any questions or concern about our policy, or our practices with regards to your personal information, please contact us at privacy(at)vahterus.com.

Data Controller

The Data Controller of Personal Data collected through this website is Vahterus OY, headquarter in Kalanti, Finland. We are committed to protecting your personal data and complying with applicable data protection and privacy laws.

Personal information that we collect and why

We collect and process your information for purposes based on legitimate business interest, the fulfilment of our contract with you, compliance with our legal obligations, and/or your consent.

We use personal information collected via our sites for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interest (“Business Purposes”), in order to enter into or perform a contract with you (“Contractual”), with your consent (“Consent”), and/or for compliance with our legal obligations (“Legal Reason”).

The elements of your data that we collect may include:

Forename and Surname, Job Title, Company name, Company address, work email, phone and/or fax number, and other information specific to the nature of our interaction.

With your consent, we can also collect personal data for marketing purposes to directly advertise by mail. If you are under 16-years old, this consent must be given by your legal guardian.

We also collect anonymous information which is not unique to you such as

IP address, Browser Type, Access times, Referring URL, Real-time location data, Device and Screen resolution.

Cookies, Web Beacons and Other Similar Technology

We may use cookie, or other similar tracking technologies to access and store information. More specific information can be found in our Cookie Policy.

Site visitation tracking

We use Google Analytics (GA), a web analysis service provided by Google Inc, to analyse our website visitors. Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this. GA is considered to be a third party data processor. Data which are collected through the analysis service Google Analytics are erased after 26 months.

The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR.

Users can prevent the collection of data generated by cookies by downloading and installing the browser plug-in that is available at the following link: Click here.

If you visit our website using a mobile device, you can deactivate Google Analytics by clicking on the following link: Click here.

Contact form

Our website contains a contact form with which you can send us messages. The data that you supply will be stored by this website and may be passed to our CRM systems HubSpot and M-Files for pipeline management purposes where we (Vahterus Oy) act as controller of the data sent. The legal basis for processing this data is Art. 6 paragraph 1 sentence 1 letter b GDPR. All data fields marked as mandatory are required for processing your request. If they are not provided, your request cannot be carried out. The provision of any additional data is voluntary. Alternatively, you can also send us a message to the contact e-mail address.

The contact form also uses cookies for keeping and informing us about your website usage. This data allows us to communicate in a more targeted manner in order to present communication of interest to you. We may also collect information from other platforms as M-files and HubSpot (See CRM Systems) to communicate more targeted.

Google- & Microsoft marketing services, LinkedIn Conversion/Insight tags & Facebook Remarking Tags

We use the marketing and remarketing services of Google Inc(Google), Microsoft, LinkedIn and Meta (Facebook). These services allow us to display advertisements in a more targeted manner in order to present advertisements of interest to users. It could mean that we advertise to you if you haven’t completed a task on our site, for example using the contact form to make an inquiry. This could be in the form of an advertisement on the Google search results page, a site in the Microsoft Audience Network or somewhere on Meta or LinkedIn. Third-party vendors, including Meta, LinkedIn, Microsoft and Google, use cookies to serve ads based on someone’s past visits on our website.

The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR.

We consider these services to be third party data processors.

You can set preferences/opt-out for how Google advertises to you using the Google Ad Preferences Page., and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a Browser plugin.

You can set preferences/opt-out for how Microsoft advertises to you in Microsoft Privacy Settings page.

You can opt-out of remarketing on Facebook by visiting Website custom audience.

You can opt out of cookies from LinkedIn on your LinkedIn settings page

CRM Systems

In our CRM system (M-files), we handle our potential and existing clients’ data in order to manage our pipeline, perform the services clients have requested, including follow-ups on these services. Vahterus collects and processes personal data either to fulfil an agreement between Vahterus and the data subject (or his or her company) as well as in connection with and to enable contacting, communication, marketing, enrolments and other actions related to customer relationship or other cooperation based on the data subject’s consent. We collect the contact data of clients and potential clients, suppliers and subcontractors, press and other media for sales and marketing purposes.

Example of personal identifiable information stored:

  • Contact details (forename, surname, e-mail, address, phone, job title, company name)
  • Business related history with us
  • Event and meeting information
  • Form fill information

The legal basis is Art. 6 paragraph 1 sentence 1 letter f or Art. 6, Para. 1 S. 1 lit. a of the GDPR (e.g. based on your prior consent if required under the law applicable to you). The data will be removed after 5 years if there is no activity performed.

To opt-out from our CRM system, please contact privacy(at)vahterus.com.

Email Marketing

We use Sinch Email who provide us with email marketing services. We use our email marketing to send you information such as product announcements, newsletters, whitepapers, other relevant offers, and upcoming promotions or events. We consider Sinch Email a third party data processor where we (Vahterus) act as the controller.

Our email marketing communication is designed to comply with national and international legislation for electronic communication based on the 2002 European e-privacy Directive. The legal basis is Art. 6 paragraph 1 sentence 1 letter f or Art. 6, Para. 1 S. 1 lit. a of the GDPR (e.g. based on your prior consent if required under the law applicable to you). Where required, dependent on jurisdiction, we will seek and obtain your explicit consent before sending marketing emails.

Sinch Email uses cookies for keeping and informing us about your email usage history, real-time location data and website usage. This data allows us to communicate in a more targeted manner in order to present communication of interest to you. We may also collect information from other platforms as M-files (See CRM System) to communicate more targeted.

You can opt-out from this marketing activity at any time by clicking on the unsubscribe link provided in each e-mail.

The information in Mail is saved for as long as you are a subscriber to the newsletter. When we have no ongoing legitimate business need to process your personal information, we will either delete or anoymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Storage of data

We maintain reasonable technical, physical and administrative security safeguards to protect your personal information against loss, theft, and unauthorized access. Any personal information that you provide to us is exchanged on a secured server. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we are committed to protecting your personal information, we cannot ensure or warrant the security of any information you provide to us.

What are your privacy rights?

In terms of your personal data, you have the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal data, and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information.

To make a request, please send an email to privacy(at)vahterus.com. We will consider and act upon any request in accordance with applicable data protection laws.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

Third party data processors

We use a number of third parties to process personal data on our behalf for commercial or technical reasons. These third parties have been carefully chosen and all of them comply with the Art. 28 GDPR. Below you find the third party data processors and their respective privacy policies.

The data we gather about you from our website will never be sold on to a third party. In certain circumstances, we may need to disclose your data to appropriate third parties if you breach the terms and conditions of use of this website or our services to you. We may also access or disclose your data if required to do so by law or an authorised governmental body. Further, we may share or transfer your data in connection with, or during negotiations of, any merger, sales of company assets, financing, or acquisition of all or a portion of of our business to another company.

Changes to our policy

We may update this privacy policy from time to time without prior notice. The updated version will be indicated by an updated “Revised” date and the new version will be effective as soon as it is accessible. We encourage you to regular read this privacy policy to be informed of how we are protecting your information.

Contact Us

If you have any questions regarding this policy, please contact us at privacy(at)vahterus.com or by post to:

Vahterus OY
Pruukintie 7
23600, Kalanti
Finland