Privacy Policy

Last updated January 10, 2019

We would like to providing you with information regarding collection and handling of personal data at Vahterus Oy (“company”, “we”, “us”, or “our”) internet portals. We are committed to protecting your personal information and your right to privacy. If you have any questions or concern about our policy, or our practices with regards to your personal information, please contact us at privacy(at)

Data Controller

The Data Controller of Personal Data collected through this website is Vahterus OY, headquarter in Kalanti, Finland. We are committed to protecting your personal data and complying with applicable data protection and privacy laws

Personal information that we collect and why

We collect and process your information for purposes based on legitimate business interest, the fulfilment of our contract with you, compliance with our legal obligations, and/or your consent.

We use personal information collected via our sites for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interest (“Business Purposes”), in order to enter into or perform a contract with you (“Contractual”), with your consent (“Consent”), and/or for compliance with our legal obligations (“Legal Reason”). 

The elements of your data that we collect may include:

  • Forename and Surname
  • Business Title
  • Company name
  • Company address, phone and/or fax number
  • email address
  • other information specific to the nature of our interaction

  • We also collect anonymous information which is not unique to you such as

  • IP address
  • Browser Type
  • Access times
  • Referring URL
  • Real-time location data
  • Device
  • Screen resolution

  • Cookies, Web Beacons and Other Similar Technology

    We may use cookie, or other similar tracking technologies to access and store information. More specific information can be found in our Cookie Policy. 

    Site visitation tracking

    We uses Google Analytics (GA), a web analysis service provided by Google Inc, to analyse our website visitors. Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this. GA is considered to be a third party data processor. Data which are collected through the analysis service Google Analytics are erased after 26 months.

    The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. 

    Users can prevent the collection of data generated by cookies by downloading and installing the browser plug-in that is available at the following link: Click here.

    If you visit our website using a mobile device, you can deactivate Google Analytics by clicking on the following link: Click here.

    Contact form

    Our website contains a contact form with which you can send us messages. None of the data that you supply will be stored by this website or passed to / be processed by any of the third party data processors. Instead, the data is collected into an email and sent over to us. The legal basis for processing this data is Art. 6 paragraph 1 sentence 1 letter b GDPR. All data fields marked as mandatory are required for processing your request. If they are not provided, your request cannot be carried out. The provision of any additional data is voluntary. Alternatively, you can also send us a message to the contact e-mail address.

    Google marketing services, LinkedIn Conversion/Insight tags & Facebook Remarking Tags

    We use the marketing and remarketing services of Google Inc(Google), LinkedIn and Facebook Inc(Facebook). These services allow us to display advertisements in a more targeted manner in order to present advertisements of interest to users. It could mean that we advertise to you if you haven’t completed a task on our site, for example using the contact form to make an inquiry. This could be in the form of an advertisement on the Google search results page, a site in the Google Display Network or somewhere on Facebook or LinkedIn. Third-party vendors, including Facebook, LinkedIn and Google, use cookies to serve ads based on someone’s past visits on our website.

    The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR.

    We consider these services to be third party data processors.

    You can set preferences/opt-out for how Google advertises to you using the Google Ad Preferences Page., and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a Browser plugin.

    You can opt-out of remarketing on Facebook by visiting Website custom audience.

    You can opt out of cookies from LinkedIn on your LinkedIn settings page

    CRM System

    In our CRM (M-files) system, we handle our existing clients’ data in order to perform the services they have ordered, including follow-ups on these services. Example of personal identifiable information stored:

    • Contact details (forename, surname, e-mail, address, phone, professional title or role), company name
    • Business related history with us
    • Event and meeting information 

    The legal basis is Art. 6 paragraph 1 sentence 1 letter f or Art. 6, Para. 1 S. 1 lit. a of the GDPR (e.g. based on your prior consent if required under the law applicable to you). The data will be removed after 5 years if there is no activity performed. 

    To opt-out from our CRM system, please contact privacy(at)

    Email Marketing

    We use Klaviyo who provide us with email marketing services. We use our email marketing to send you information such as product announcements, newsletters, whitepapers, other relevant offers, and upcoming promotions or events. We consider Klaviyo a third party data processor.

    Our email marketing communication is designed to comply with national and international legislation for electronic communication based on the 2002 European e-privacy Directive. The legal basis is Art. 6 paragraph 1 sentence 1 letter f or Art. 6, Para. 1 S. 1 lit. a of the GDPR (e.g. based on your prior consent if required under the law applicable to you). Where required, dependent on jurisdiction, we will seek and obtain your explicit consent before sending marketing emails

    Klaviyo uses cookies for keeping and informing us about your email usage history, real-time location data and website usuage. This data allows us to communicate in a more targeted manner in order to present communication of interest to you. We may also collect information from other platforms as M-files (See CRM Systems) to communicate more targeted.

    You can opt-out from this marketing activity at any time by clicking on the unsubscribe link provided in each e-mail.

    The information in Klaviyo is saved for as long as you are a subscriber to the newsletter. When we have no ongoing legitimate business need to process your personal information, we will either delete or anoymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

    Storage of data

    We maintain reasonable technical, physical and administrative security safeguards to protect your personal information against loss, theft, and unauthorized access. Any personal information that you provide to us is exchanged on a secured server. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we are committed to protecting your personal information, we cannot ensure or warrant the security of any information you provide to us.

    What are your privacy rights?

    In terms of your personal data, you have the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal data, and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information.

    To make a request, please send an email to privacy(at) We will consider and act upon any request in accordance with applicable data protection laws.

    If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

    Third party data processors

    We use a number of third parties to process personal data on our behalf for commercial or technical reasons. These third parties have been carefully chosen and all of them comply with the Art. 28 GDPR. Below you find the third party data processors and their respective privacy policies.

    The data we gather about you from our website will never be sold on to a third party. In certain circumstances, we may need to disclose your data to appropriate third parties if you breach the terms and conditions of use of this website or our services to you. We may also access or disclose your data if required to do so by law or an authorised governmental body. Further, we may share or transfer your data in connection with, or during negotiations of, any merger, sales of company assets, financing, or acquisition of all or a portion of of our business to another company. 

    Changes to our policy

    We may update this privacy policy from time to time without prior notice. The updated version will be indicated by an updated “Revised” date and the new version will be effective as soon as it is accessible. We encourage you to regular read this privacy policy to be informed of how we are protecting your information.

    Contact Us

    If you have any questions regarding this policy, please contact us at xxx(at) or by post to:

    Vahterus OY
    Pruukintie 7
    23600, Kalanti