Privacy Policy

1. Introduction

QYP Rakennus Oy ("QYP", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website qyp.fi and use our services. We comply with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We may collect the following types of personal data:

• Contact Information: Name, email address, phone number, company name, and tax number when you fill out contact or order forms.
• Account Information: Email, name, and password when you create a user account.
• Order Information: Billing address, shipping address, and product selections when you place an order.
• Technical Data: IP address, browser type, operating system, and browsing patterns collected automatically via cookies and server logs.
• Communication Data: Messages, applications, and resumes you submit through our forms.

4. How We Use Your Data

We process your personal data for the following purposes:

• To provide and manage our services and products
• To process and fulfill orders
• To respond to your inquiries and contact requests
• To process course and internship applications
• To improve our website and user experience
• To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds under GDPR Article 6:

• Consent: When you accept cookies or subscribe to communications.
• Contract: When processing is necessary for fulfilling an order or providing a service you requested.
• Legitimate Interest: When we process data to improve our services and website functionality.
• Legal Obligation: When we are required by law to process certain data (e.g., accounting records).

6. Cookies

Our website uses cookies to ensure basic functionality and improve your experience. We use the following types of cookies:

• Essential Cookies: Required for the website to function properly (e.g., session management, language preferences, shopping cart). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website. These are only set if you give consent.

You can manage your cookie preferences at any time by clicking the cookie settings button at the bottom of the page, or by adjusting your browser settings.

7. Data Sharing and Transfers

We do not sell your personal data. We may share your information with:

• Service providers who assist in website hosting and email delivery
• Payment processors for order transactions
• Authorities when required by Finnish or EU law

Your data is primarily processed within the EU/EEA. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place as required by GDPR.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account data is kept until you request deletion. Order data is retained for the legally required accounting period (6 years in Finland). Contact form submissions are kept for up to 2 years.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of your personal data.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
• Right to Restriction: You can request limited processing of your data.
• Right to Data Portability: You can request your data in a machine-readable format.
• Right to Object: You can object to data processing based on legitimate interest.
• Right to Withdraw Consent: You can withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@qyp.fi. We will respond within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (SSL/TLS), secure password hashing, and access controls.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: