Privacy Policy

1. Data Controller

Salhydro Oy
Business ID: 0786606-9
VAT ID: FI07866069
Ilvesvuorenkatu 10
01900 Nurmijärvi, Finland
Phone: +358 9 879 1800
Email: salhydro@salhydro.fi

2. What Personal Data We Collect

We collect the following personal data:

Customer Data

• Name and contact details (email, phone number, address)
• Company information (company name, business ID)
• Order and purchase history
• Customer communications and inquiries

Website Usage Data

• IP address and browser information
• Website usage data (through cookies)
• Search terms and browsed products

3. Purpose and Legal Basis for Processing

We process personal data for the following purposes:

Purpose	Legal Basis
Order processing and delivery	Performance of contract
Customer service and communication	Contract / Legitimate interest
Invoicing and accounting	Legal obligation
Marketing (with consent)	Consent
Website development	Legitimate interest
Statistics and analytics	Legitimate interest

4. Cookies and Tracking Technologies

We use cookies on our website. Cookies are divided into the following categories:

Necessary Cookies

These are essential for the website to function, such as login and shopping cart functionality.

Functional Cookies

These help the website remember your choices and provide enhanced features (e.g., HubSpot customer service).

Analytics Cookies

We use Google Analytics 4 to understand how visitors use our website. Data is anonymized.

Marketing Cookies

Marketing cookies (e.g., Meta Pixel) allow us to show you targeted advertising with your consent.

You can manage your cookie preferences from the "Cookie Settings" link at the bottom of the page.

5. Data Retention Period

We retain personal data as follows:

• Customer data: Duration of customer relationship and 10 years after (accounting law)
• Order history: 10 years (accounting law)
• Marketing consents: Until consent is withdrawn
• Analytics data: 26 months (Google Analytics)
• Cookie data: According to cookie validity period

6. Data Disclosure and Transfer

We may disclose personal data to the following parties:

• Shipping companies: For order delivery
• Payment processors: For payment processing
• IT service providers: For system maintenance
• Authorities: To fulfill legal obligations

Data Transfers Outside EU/EEA

Some of our service providers (e.g., Google, Meta) are located outside the EU/EEA. In such cases, data transfers use EU-approved safeguards (standard contractual clauses or adequacy decision).

7. Data Subject Rights

You have the following rights under GDPR:

• Right of access: Right to know what data we have stored about you
• Right to rectification: Right to request correction of inaccurate data
• Right to erasure: Right to request deletion of your data ("right to be forgotten")
• Right to restriction: Right to restrict the processing of your data
• Right to data portability: Right to receive your data in a portable format
• Right to object: Right to object to processing for direct marketing
• Right to withdraw consent: Right to withdraw your consent at any time

You can exercise your rights by contacting salhydro@salhydro.fi. We will respond to your request within one month.

8. Data Security

We protect personal data with appropriate technical and organizational measures:

• SSL/TLS encryption for all data transmission
• Access control and permission restrictions
• Regular security updates
• Staff training on data protection

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes on our website. We recommend checking this policy regularly.

10. Supervisory Authority

If you believe that the processing of your personal data violates data protection legislation, you have the right to file a complaint with the supervisory authority:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4
00530 Helsinki, Finland
Phone: +358 29 566 6700
Email: tietosuoja@om.fi
Website: tietosuoja.fi/en