Privacy Policy

Last updated: September 2026

1. Controller

Fulvisol Oy (Business ID 2399369-0)
Turkhaudantie 5, 00700 Helsinki, Finland

The website www.fulvisol.com is operated jointly by the companies of the Fulvisol Group (Fulvisol Oy, Finland; Fulvisol GmbH, Austria; Fulvisol Ltd, United Kingdom – see Legal Notice). The contact point for all data protection enquiries is Fulvisol Oy.

2. Contact for data protection matters

Petri Surakka, Fulvisol Oy
Email: gdpr@fulvisol.com

3. What data we process and why

We process contact and company data (name, position, company, email, telephone, address), details of enquiries, contracts and invoices, and technical data when you visit the website (IP address, cookies).

Purposes and legal bases (Art. 6(1) GDPR):

  • Handling enquiries, quotations, contract performance and customer support – point (b)
  • Newsletter and marketing cookies – point (a) (consent, revocable at any time)
  • Maintaining the B2B customer relationship, data security – point (f) (legitimate interest)
  • Retention of invoicing and contract data – point (c) (legal obligation)

Data comes from you (form, email, telephone, meetings) or, for business contact persons, from public sources. No automated decision-making takes place.

4. Retention

We keep data as long as necessary for the respective purpose – for customers, for the duration of the business relationship and thereafter in line with statutory retention periods; for newsletter recipients, until consent is withdrawn.

5. Recipients and third-country transfers

Data is shared within the Fulvisol Group for the purposes stated; an EU Commission adequacy decision is in place for the United Kingdom. Otherwise only processors (Art. 28 GDPR) receive data:

  • Hosting: XetNET (Xetpoint Oy, Finland), servers in the EU
  • Newsletter: Mailchimp (Intuit Inc., USA) via the “Mailchimp for WordPress” plugin, double opt-in
  • Analytics and advertising: Google Tag Manager, Google Analytics 4, Google Ads (Google Ireland Ltd.), Microsoft Advertising UET and Microsoft Clarity (Microsoft Ireland Operations Ltd.). Cookies and user profiles are only set after your consent via the cookie banner; without consent only cookieless, non-personal signals are transmitted.
  • Spam protection: Google reCAPTCHA (Google Ireland Ltd.) to secure our forms, based on our legitimate interest.

Google, Microsoft and Mailchimp may transfer data to the USA; these providers are certified under the EU-US Data Privacy Framework. You can change your cookie consent at any time via the cookie settings in the footer.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests (in particular direct marketing) and withdrawal of consent. Requests to gdpr@fulvisol.com; we usually respond within one month and may ask for proof of identity.

You may lodge a complaint with a data protection supervisory authority, in particular in Finland (Office of the Data Protection Ombudsman, tietosuoja.fi) or Austria (Datenschutzbehörde, dsb.gv.at).