Privacy policy

How we handle personal data.

This Privacy Policy explains how Tracemation Oy processes personal data when you use this website, contact us or interact with us in a business context. It describes what information we collect, why we process it and what rights you have.

Last updated: 5.8.2026

How we handle personal data

We process personal data only where it is needed to operate this website, respond to enquiries and manage our business relationships.

This Privacy Policy explains what personal data Tracemation Oy collects through this website, why the data is processed and what rights you have in relation to your personal data.

Data controller

Tracemation Oy
Business ID: 2372931-2
P.O. Box 280
FI-70101 Kuopio
Finland

Email: info@tracemation.com

What personal data we collect

Information you provide to us

When you contact us through the website, by email or through another communication channel, we may process information such as:

  • your name and contact details
  • the company or organisation you represent
  • your job title or role
  • the subject and content of your message
  • information concerning a potential project, production environment or business relationship
  • your preferred method of contact
  • other information you choose to provide.

Please do not include confidential, sensitive or unnecessary personal information in an initial contact request.

Information collected through the website

When you use the website, certain technical information may be processed automatically. This may include:

  • IP address
  • browser and device information
  • date and time of the visit
  • pages viewed and interactions with the website
  • referral information
  • cookie identifiers and consent preferences
  • technical error and security log data.

The exact information collected depends on your cookie choices and the technologies active on the website.

Why we process personal data

Responding to enquiries

We use the information you provide to respond to your message, understand your needs and continue discussions concerning a potential project or business relationship.

The processing is based on steps taken at your request before entering into a contract or on our legitimate interest in communicating with prospective customers, partners and other business contacts.

Managing business relationships

We may process contact and communication information to manage customer, supplier and partner relationships, deliver agreed services and maintain records related to our business activities.

The processing may be based on a contract, our legitimate interests or a legal obligation.

Operating and protecting the website

Technical information may be processed to provide the website, maintain its functionality, prevent misuse and protect the security of the website and its users.

This processing is based on our legitimate interest in operating a functional and secure website.

Website analytics

Where you have given your consent, we may use analytics technologies to understand how the website is used and how its content and functionality could be improved.

You may withdraw your consent or change your cookie preferences at any time through the cookie settings available on the website.

Consent, contractual necessity, legal obligations and legitimate interests are among the lawful grounds available under the GDPR. The appropriate basis depends on the purpose and context of the processing.

Cookies and similar technologies

The website may use cookies and similar technologies.

Strictly necessary technologies are used to provide functions specifically requested by the user, maintain security and remember privacy preferences. These technologies cannot always be disabled without affecting how the website works.

Optional technologies, such as analytics cookies or third-party embedded content, are activated only where you have given your consent. You can accept, reject or change your choices through the website’s cookie settings.

The cookie settings provide current information about the technologies used, their purposes, providers and retention periods.

In Finland, non-essential technologies such as analytics cookies generally require prior consent, while technologies necessary to provide a function expressly requested by the user may be used without separate consent.

Who may process personal data

Personal data may be processed by Tracemation employees and authorised service providers who need the information for the purposes described in this policy.

These service providers may include providers of:

  • website hosting and technical maintenance
  • contact-form and email services
  • IT infrastructure and data storage
  • analytics and cookie-consent services
  • cybersecurity and spam-prevention services.

Service providers may process personal data only in accordance with our instructions and applicable data-protection requirements.

We do not sell personal data.

Transfers outside the European Economic Area

Some of our technical service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we use an applicable transfer mechanism, such as an adequacy decision adopted by the European Commission or the European Commission’s Standard Contractual Clauses, together with any additional safeguards required in the circumstances.

How long we retain personal data

We retain personal data only for as long as it is needed for the purpose for which it was collected.

As a general rule:

  • contact requests that do not lead to a customer or business relationship are retained for no longer than [24 months] after the last communication
  • information connected to a customer, contractual or partner relationship is retained for the duration of that relationship and thereafter for the period required by law or reasonably necessary to establish, exercise or defend legal claims
  • technical security logs are retained for [30–90 days], unless a longer period is necessary to investigate misuse or a security incident
  • cookie and analytics data is retained according to the periods stated in the website’s cookie settings.

Personal data is deleted or anonymised when it is no longer needed.

How we protect personal data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration and disclosure.

Access to personal data is limited to people and service providers who need it for their work. Our systems and processing practices are reviewed and developed when necessary.

Your rights

Depending on the circumstances, you may have the right to:

  • request access to your personal data
  • request the correction of inaccurate or incomplete information
  • request the deletion of your personal data
  • request restriction of processing
  • object to processing based on legitimate interests
  • receive personal data you have provided in a structured and machine-readable format
  • withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

You may exercise your rights by contacting info@tracemation.com. We may ask for additional information where necessary to verify your identity.

GDPR rights apply subject to their legal conditions and possible exceptions. Individuals also have the right to receive confirmation of whether their data is being processed.

Complaints

Please contact us first if you have questions or concerns about how we process your personal data.

You also have the right to lodge a complaint with the supervisory authority:

Office of the Data Protection Ombudsman

Changes to this policy

We may update this Privacy Policy when our processing activities, website technologies or legal obligations change.

The latest version and its effective date are always available on this page.