PRIVACY POLICY & DATA PROTECTION

1. Data Controller Identification

The entity responsible for the collection, storage, and processing of personal data collected through spotbridgematrxx.pics is:

Spotbridge Matrxx Nordic Oy
Business ID (Y-tunnus): FI-3398124-7
Registered Address: Mannerheimintie 142 B, 00270 Helsinki, Finland
Data Protection Officer Email: [email protected]

2. Categories of Personal Data We Collect

We only collect information strictly required to provide on-site gutter engineering evaluations, generate accurate quotes, and fulfill installation contracts across Finland:

• Contact Information: First and last name, residential address, postal code, city, telephone number, and email address.
• Property & Technical Specs: Roof perimeter measurements, house type, roof tile/sheet metal profiles, tree density notes, and submitted photos of existing gutter installations.
• Tax Deduction Information: For customers utilizing Finnish Kotitalousvähennys, we process personal identification numbers (henkilötunnus) or company Business IDs solely for mandatory reporting to the Finnish Tax Administration (Verohallinto).
• Automated Device & Usage Data: IP addresses, browser types, referrer URLs, and interaction with interactive calculation sliders via privacy-respecting server logs.

3. Legal Grounds for Data Processing (GDPR Article 6)

We process your personal information under the following legal bases:

• Performance of a Contract (Art. 6(1)(b)): To calculate estimates, dispatch mobile installation rigs, perform on-site work, and deliver 25-year structural warranty documentation.
• Legal Obligation (Art. 6(1)(c)): Compliance with Finnish accounting laws (Kirjanpitolaki) and tax deduction reporting regulations.
• Legitimate Interests (Art. 6(1)(f)): Protecting our digital infrastructure against fraudulent quote requests and optimizing our regional service dispatch routes.
• Consent (Art. 6(1)(a)): For optional digital service updates or non-essential browser analytics cookies.

4. Third-Party Data Processors & Subcontractors

We never sell, rent, or lease your personal information. Data is only shared with verified technical service providers bound by strict Data Processing Agreements (DPAs):

• Secure EU-based cloud server hosts and database infrastructure within the European Economic Area (EEA).
• Certified Finnish crane and scaffolding logistics partners when required for 3-story residential installations.
• Electronic billing and OmaVero accounting software providers operating under Finnish banking-grade encryption.

5. Data Retention Schedules

We retain personal records only for as long as necessary to fulfill the intended purpose:

• Unconfirmed Quote Inquiries: Deleted automatically after 90 days if no service contract is executed.
• Warranty & Structural Work Logs: Retained for 25 years to support active structural gutter and leak-proof guarantees.
• Accounting & Tax Invoices: Retained for 6 years in strict adherence to Finnish statutory accounting legislation.

6. Your Rights Under GDPR

As a resident of the European Union, you maintain extensive rights concerning your personal data:

• Right of Access (Art. 15): Request a copy of all personal records we hold regarding you.
• Right to Rectification (Art. 16): Correct any inaccurate or outdated information.
• Right to Erasure ('Right to be Forgotten' - Art. 17): Request deletion of your data where statutory retention obligations do not apply.
• Right to Restrict Processing (Art. 18) & Right to Data Portability (Art. 20): Receive your technical building records in a structured, machine-readable format.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. You also have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto - tietosuoja.fi).