Privacy Policy & Data Protection Statement

Last updated: January 1, 2026.

1. Data Controller Identification

The legal entity responsible for the collection, retention, and processing of personal data gathered via this domain is:

Scenesgarclipcompass Oy
Business ID (Y-tunnus): FI 3189472-8
Registered Address: Pohjoinen Rautatiekatu 21 B, 00100 Helsinki, Finland
Designated Data Protection Contact: [email protected]

2. Categories of Personal Data Collected

We adhere strictly to the principle of data minimization (GDPR Art. 5(1)(c)). We only gather data necessary to respond to architectural inquiries or deliver requested technical whitepapers:

• Directly Supplied Communications Data: Your name, email address, municipal plot location, and technical project narrative submitted via our contact and configuration forms.
• Technical Network Logs: Truncated IP addresses (anonymized at ingress), browser agent types, referring URLs, and access timestamps stored in temporary server diagnostic logs for up to 30 days to mitigate denial-of-service attempts.
• Configurator State: Client-side preferences (such as selected roof pitches, insulation parameters, and floor footprints) stored locally in your browser’s localStorage engine without transmitting identifiable profiles to remote third parties.

3. Legal Bases for Processing (GDPR Art. 6)

We process your personal data under the following legitimate grounds:

• Contractual Pre-steps (Art. 6(1)(b)): To prepare architectural project estimates, site feasibility summaries, or engineering documentation requested by you.
• Legitimate Interests (Art. 6(1)(f)): Maintaining server perimeter security, diagnosing software bugs, and optimizing the readability of our building guides.
• Explicit Consent (Art. 6(1)(a)): For non-essential analytical cookies and optional telemetry, which you can toggle or revoke at any moment via our Cookie Preferences modal.

4. Third-Party Processors & Cross-Border Transfers

We do not sell, rent, or trade your personal data. Where external cloud providers are contracted (such as certified Helsinki or Frankfurt-based server hosting facilities and encrypted transactional email relays), they operate strictly as Data Processors bound by Article 28 Data Processing Agreements (DPAs). All data remains housed within the European Economic Area (EEA).

5. Data Retention Periods

Contact inquiries and technical consultation records are retained for a maximum of 24 months following the last active communication, after which they are securely purged, unless ongoing contractual obligations or statutory Finnish accounting laws (Kirjanpitolaki) mandate retention of tax-related receipts for 6 years.

6. Your Statutory Rights Under GDPR & CCPA

As a data subject, you hold comprehensive rights regarding your personal information:

• Right of Access (Art. 15): You may request a machine-readable copy of all personal records held in association with your identity.
• Right to Rectification (Art. 16): You may correct inaccurate or obsolete contact details.
• Right to Erasure ('Right to be Forgotten' - Art. 17): You may request the irreversible deletion of your data when retention is no longer necessary.
• Right to Restriction & Objection (Arts. 18 & 21): You may object to data processing grounded in legitimate interest.
• Right to Lodge a Complaint: If you believe our processing violates European privacy statutes, you have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, Lintulahdenkuja 4, 00530 Helsinki, www.tietosuoja.fi).

7. Contacting the Data Protection Officer (DPO)

To exercise any of your statutory rights, transmit your signed written request to our dedicated privacy desk at [email protected]. We fulfill verified requests within thirty calendar days free of charge.