1. Data Controller
Oy Meluton Ab
Vantaanpuistontie 31
01730 Vantaa
Finland
Phone: +358 207 401 360
Email: info@meluton.fi
2. Contact Person for Data Protection Matters
Jussi Niemelä
Email: jussi.niemela@meluton.fi
3. Name of the Register
Oy Meluton Ab website user, contact and analytics register.
4. Purpose of Processing Personal Data
Personal data is processed for the following purposes:
- enabling the operation of the website
- responding to contact requests and inquiries
- managing and developing customer relationships
- analyzing and improving the use of the website
- developing and targeting marketing
- processing leads and inquiries submitted through Gravity Forms
5. Personal Data Processed
The register may contain the following personal data:
- name
- email address
- phone number
- company name
- any other information provided by the user through forms or messages
- IP address
- browser information and device technical details
- website usage data
- analytics and identification data collected through cookies based on user consent
6. Regular Sources of Data
Data is mainly collected from:
- forms submitted by the user, such as Gravity Forms
- direct contact by the user via email or phone
- website usage analytics
- data collected through cookies
7. Legal Basis for Processing Personal Data
The processing of personal data is based on one or more of the following legal grounds:
- the data subject’s consent
- performance of a contract or pre-contractual measures
- the legitimate interest of the data controller, such as website development, analytics and B2B sales
- compliance with legal obligations
8. Regular Disclosures and Data Transfers
Personal data may be processed using the following service providers and systems:
- Google Analytics 4 (GA4) for website usage analytics
- Leadfeeder for identifying company visitors and supporting B2B sales
- Gravity Forms for receiving and processing information submitted through website forms
- Cookiebot for managing cookie consent
Personal data may also be processed by service providers whose servers or subprocessors are located outside the EU or EEA. In such cases, appropriate safeguards are applied in accordance with applicable data protection legislation, such as the European Commission’s Standard Contractual Clauses.
9. Cookies
The website uses cookies and similar technologies to ensure the functionality of the website, improve the user experience, analyze website traffic and develop marketing and sales.
The use of cookies is managed through the Cookiebot consent management platform. Users can give or withdraw consent for non-essential cookies through the cookie banner or cookie settings on the website.
More detailed information about cookies used on the website and their storage periods will be provided on a separate Cookies page.
10. Data Retention Period
Personal data is retained only for as long as necessary to fulfill the purposes described in this privacy policy or as required by applicable legislation.
Information submitted through website forms is retained for as long as necessary to manage the inquiry, customer relationship or potential sales process unless legislation requires a longer retention period.
11. Rights of the Data Subject
Under applicable data protection legislation, the data subject has the right to:
- receive information about the processing of their personal data
- access their personal data
- request correction of inaccurate or incomplete data
- request deletion of their personal data
- request restriction of processing
- object to the processing of their personal data
- transfer their data to another system where applicable
- withdraw consent at any time where processing is based on consent
- lodge a complaint with a supervisory authority
Requests regarding these rights should be submitted in writing to the data controller or the contact person responsible for data protection matters.
12. Supervisory Authority
In Finland, data protection matters are supervised by the Office of the Data Protection Ombudsman.
Website: tietosuoja.fi
13. Data Protection
Personal data is protected by appropriate technical and organizational measures. Access to personal data is restricted to persons who require it for the performance of their duties.
The data controller ensures that the systems, services and storage solutions used are appropriately secured against unauthorized access, loss, alteration or destruction of personal data.
14. Changes to the Privacy Policy
Oy Meluton Ab reserves the right to update this privacy policy when necessary due to changes in legislation, services or operational practices. The latest version of the privacy policy will always be published on the website.