Legal
Privacy policy
Draft — pending legal review. This document sets out the required structure only. It has not been reviewed by counsel and must not be relied upon until VANKKA’s legal advisers have approved the final wording.
01
Controller
The data controller for personal data collected through this website is VANKKA. Full legal entity details, registered address and the contact point for data protection enquiries will be published here once confirmed.
02
What we collect
We collect the information you provide through the quote and contact forms, together with any files you choose to attach.
- Contact details: name, company, email address and telephone number
- Project details: building type, location, dimensions, timeline and product requirements
- Attachments: drawings, plans, specifications and photographs you upload
- Technical data: information your browser sends automatically, such as IP address and user agent
03
Why we use it
Enquiry data is used to respond to your request: to prepare a specification and quotation, to answer technical questions, and to arrange samples or documentation. Where you become a customer, the same data is used to fulfil the contract.
We do not sell personal data, and we do not use enquiry data for advertising.
04
Legal basis
Under the EU General Data Protection Regulation, we process enquiry data on the basis of your consent and on the basis of steps taken at your request prior to entering a contract. Where processing is necessary to fulfil an order, the legal basis is performance of a contract.
05
Retention
Enquiry data is retained for as long as needed to respond to the enquiry and, where relevant, for the period required by accounting and product liability obligations. Specific retention periods will be published here once confirmed.
06
Sharing
Enquiry data may be shared between VANKKA locations in Finland and Canada in order to route your enquiry to the correct team. This involves a transfer of personal data outside the European Economic Area, made under the safeguards required by the GDPR.
We use service providers for website hosting and for delivering form submissions. These providers process data on our instructions only.
07
Your rights
Where the GDPR applies, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You may withdraw consent at any time, and you may lodge a complaint with your national supervisory authority.
08
Cookies
This website sets no advertising or third-party tracking cookies. If analytics are introduced, this section will describe what is collected and how to opt out, and a consent mechanism will be added before any non-essential cookie is set.
09
Contact
Data protection enquiries can be raised through the contact form until a dedicated contact address is published here.