EN FI
Privacy

Privacy & GDPR

This page describes how Vektre processes personal data and complies with GDPR.

PRIVACY NOTICE

Last updated: 2026-09-10

1. Data controller

Name / Company: Centriqal Oy (Vektre)
Business ID: 3020780-3
Address: Valkolantie 4C, 50700 Mikkeli, Finland
Email: [email protected]
Website: https://vektre.fi

2. Name of the register

Website user and contact register.

3. Purpose and legal basis of processing

Personal data is processed for the following purposes:

  1. Technical operation and security of the site: Collecting log files to prevent abuse and ensure system functionality. (Legitimate interest)
  2. Responding to contact requests: Handling messages or inquiries sent by visitors. (Preparation of a contract or legitimate interest)
  3. Visitor statistics and analytics: Monitoring and improving site usage. (Legitimate interest or consent if tracking cookies are used)

4. Personal data collected

The site may process the following information:

  • Technical identifiers: IP address, browser type and version, operating system, and referrer/exit pages (server log data collected automatically).
  • Contact form data (if used): Name, email address, phone number and message content.
  • Analytics data: Anonymized or pseudonymized information about visits (e.g., pages viewed, time on site).

5. Regular sources of data

Data is mainly collected directly from the user when they visit the site or fill in a contact form. Technical log data is collected automatically by the server during site use.

6. Disclosures and transfers

Data is not disclosed to third parties for marketing purposes. Data may be processed by trusted service providers used for the technical operation of the site:

  • Hosting provider: Tietokettu Ky (Hosts and serves the static site).
  • Form service (if used): N/A (Receives form submissions and forwards them by email).
  • Analytics provider (if used): N/A (Collects visitor statistics).

7. Transfers outside the EU/EEA

Data is primarily stored within the EU/EEA. If a hosting or other technical provider is located outside the EU/EEA (for example, in the United States), transfers are made using Standard Contractual Clauses (SCC) or another GDPR-compliant transfer mechanism (such as the EU–US Data Privacy Framework).

8. Retention period

Data is retained only as long as necessary for the purposes described in this notice:

  • Server logs are typically retained for [e.g. 30–90 days] and then deleted automatically.
  • Contact form submissions are retained as long as required to handle the inquiry, or until the user requests deletion, unless longer retention is required by law (e.g. accounting obligations).

9. Cookies

The Astro framework itself does not set tracking cookies or store visitor data on the device.

The site uses cookies to save user specific options like localization language.

10. Data subject rights

Under the EU General Data Protection Regulation, the data subject has the right to:

  • Access their personal data and inspect it.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of their data ("right to be forgotten").
  • Request restriction of processing or object to processing.
  • Lodge a complaint with a supervisory authority (in Finland: The Data Protection Ombudsman, tietosuoja.fi) if they believe data processing violates the law.

All requests to exercise rights should be sent by email to: [email protected].

11. Changes to this privacy notice

This privacy notice may be updated as operations or legislation change. The current version will always be available on this website.