Website privacy policy

This policy explains how Alnet Oy processes personal data on its website alnet.fi and in its ordinary business operations. It is based on the EU General Data Protection Regulation (2016/679).
Updated 28 October 2026

Data protection officer

Alnet Oy has not appointed a separate data protection officer. Data protection matters are handled by our office at toimisto@alnet.fi.

Personal data processed and purposes of processing

Enquiries. When you contact us by email or phone, we process your name, contact details and the content of your message. The data is used to respond to your enquiry and handle related matters.

Customer and supplier contacts. In our ordinary business, we process data about contact persons at customers, suppliers and partners, such as name, company, job title, email address and phone number, as well as information related to quotes, orders, contracts and invoicing. The data is used to manage customer and supplier relationships, perform contracts and stay in contact.

Cookies and analytics. The website uses strictly necessary cookies and, with your consent, Google Analytics (see section 10).

Technical logs. The web server stores technical log data, such as IP address, time and requested page, to ensure the operation and security of the website.

We do not collect personal identity numbers on the website, and the website has no user accounts or login.

Legal basis for processing

Responding to enquiries and managing customer and supplier relationships are based on the performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR) and on the controller’s legitimate interest in running its business and responding to enquiries (Article 6(1)(f)). Retention of accounting records is based on a legal obligation (Article 6(1)(c)).

The use of analytics cookies is based on your consent (Article 6(1)(a)). Technical logs are based on our legitimate interest in protecting the website and ensuring its operation (Article 6(1)(f)).

Retention period

Enquiries are kept for as long as necessary to handle them and manage any resulting customer relationship. Data related to customer and supplier relationships is kept for the duration of the relationship and thereafter for as long as required by law, such as the Finnish Accounting Act. Data that is no longer needed is deleted.

Google Analytics data is kept for a maximum of 14 months in line with the service settings. Cookie lifetimes are listed in section 10.

Sources of data

Data is obtained from you directly, for example by email or phone or in the course of a customer or supplier relationship, and from public sources such as the Finnish Business Information System (ytj.fi). Analytics data is collected with cookies if you have given your consent.

Recipients and processors

We do not sell data or disclose it to third parties for marketing. We use the following service providers, who process data on our behalf:

• Seravo Oy: website hosting and maintenance, servers located in the EU
• Microsoft: company email and office software services
• Google: Google Analytics
• the website’s technical administrator, where needed for maintenance tasks

Data may be disclosed to authorities where required by law.

Transfers outside the EU or EEA

Google and Microsoft may also process data outside the EU and EEA, for example in the United States. These transfers are based on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Cookies and analytics

A cookie is a small text file that a website stores in your browser. This website uses a strictly necessary cookie to store your cookie choices. Cookie consent is managed with the website’s own cookie notice, without any third-party services.

Google Analytics cookies are only activated once you have given your consent. Analytics shows how the website is used, such as pages visited and time spent, so that we can improve it. The data is processed in aggregate and is not used to identify individual visitors.

Cookies used on this website:

• gb_consent: strictly necessary. Stores your cookie choices. Expires after 12 months.
• _ga: analytics (Google Analytics), only with consent. Distinguishes visitors for statistics. Expires after 13 months at most.
• _ga_*: analytics (Google Analytics), only with consent. Keeps the state of the visit. Expires after 13 months at most.

You can change or withdraw your consent at any time in the cookie settings. You can also block or delete cookies in your browser settings.

Data security

Traffic to the website is protected with SSL/TLS encryption. Electronic data is protected with user IDs, passwords and other technical measures. Only Alnet Oy employees and service providers who need the data for their work have access to it.

Automated decision-making

We do not make automated individual decisions or use profiling (Article 22 GDPR).

Your rights

You have the right to

• access your personal data
• request the correction of inaccurate data
• request the erasure of your data
• request restriction of processing
• object to processing based on legitimate interest
• transfer the data you have provided from one system to another when processing is based on consent or a contract
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Requests can be sent to toimisto@alnet.fi. We respond to requests within one month.

Right to lodge a complaint

If you believe that the processing of your personal data breaches data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi/en).

Changes to this policy

We update this policy when needed. The current version is always available on this page. This policy was last updated on 28 October 2026.