Privacy policy
how we handle your data

Vibrol Oy (Business ID: 2699985-2)

Tuotantotie 4, 04300 Tuusula, Finland

For any privacy-related questions or data requests, contact us at: support@vibrol.fi

• Contact enquiries and correspondence: When you reach out via our contact form or direct email, we collect your name, company, email address, phone number, and message content.
• Legal basis: Our legitimate interest in responding to business enquiries, and taking steps at your request prior to entering into a contract.
• Technical and log data: Your IP address, browser type, device details, and requested pages are automatically logged by our web hosting provider to ensure network security, maintain system stability, and defend against malicious attacks.
• Legal basis: Our legitimate interest in operating a secure and functional website.
• Analytics and marketing cookies: We measure site traffic and campaign performance only if you actively opt in.
• Legal basis: Your explicit consent.

• Essential: Required for the basic technical operation of the website, security (such as bot protection), and remembering your cookie preferences. Always active.
• Analytics (Google Analytics): Helps us understand how visitors interact with the site so we can improve content and usability. Loaded only if you consent.
• Marketing (Google Ads): Measures the effectiveness of our advertising campaigns. Loaded only if you consent.

You can change or withdraw your consent at any time using the cookie settings icon in the bottom-left corner of the screen.
Rejecting non-essential cookies does not restrict your access to any part of our site.

We rely on trusted third-party service providers (data processors) to deliver our web infrastructure and business services:

• Web hosting: Webbikettu (servers located within the EU/EEA).
• Security & delivery: Cloudflare (spam mitigation and bot protection on web forms) and jsDelivr (cookie consent delivery).
• Email & communications: Microsoft 365.
• Analytics, advertising & maps: Google (Google Analytics, Google Ads, and embedded location maps).

Where service providers (such as Google, Microsoft, or Cloudflare) transfer or access personal data outside the European Economic Area (EEA), transfers are governed by appropriate legal safeguards, including the EU–U.S. Data Privacy Framework (DPF) and standard contractual clauses (SCCs) approved by the European Commission.

We do not sell, rent, or trade your personal data.

• Enquiries and business communications: Retained for the duration necessary to handle your request and manage any subsequent business relationship, or as required by applicable statutory and accounting regulations.
• Server logs: Technical access and security logs are routinely purged after a standard rolling retention period (up to 90 days).
• Analytics data: Retained in aggregated or pseudonymized form per our Google Analytics retention configuration (up to 14 months) or until you clear your cookies.

Under the General Data Protection Regulation (GDPR), you have the right to:

• Request access to the personal data we hold about you.
• Request the correction of inaccurate data or the deletion of your data.
• Restrict or object to the processing of your personal data.
• Request data portability to another provider.
• Withdraw your consent at any time (applying to future processing).

To exercise any of these rights, email us at support@vibrol.fi.

If you believe our handling of your data infringes data protection regulations, you have the right to lodge a complaint with the supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) — tietosuoja.fi.