Vankka

Legal

Privacy policy

How VANKKA collects, uses, stores and shares the personal data submitted through this website.

Draft — pending legal review. This document sets out the required structure only. It has not been reviewed by counsel and must not be relied upon until VANKKA’s legal advisers have approved the final wording.

01

Controller

The data controller for personal data collected through this website is VANKKA. Data protection enquiries can be raised through the contact form on this website.

02

What we collect

We collect the information you provide through the quote and contact forms, together with any files you choose to attach.

  • Contact details: name, company, email address and telephone number
  • Project details: building type, location, dimensions, timeline and product requirements
  • Attachments: drawings, plans, specifications and photographs you upload
  • Technical data: information your browser sends automatically, such as IP address and user agent

03

Why we use it

Enquiry data is used to respond to your request: to prepare a specification and quotation, to answer technical questions, and to arrange samples or documentation. Where you become a customer, the same data is used to fulfil the contract.

We do not sell personal data, and we do not use enquiry data for advertising.

04

Legal basis

Under the EU General Data Protection Regulation, enquiry data is processed on the basis of the consent you give when submitting the form, and on the basis of steps taken at your request before entering into a contract. Where processing is necessary to fulfil an order, the legal basis is performance of a contract. Server logs are processed on the basis of legitimate interests in operating and securing the site.

05

Retention

Enquiry data is kept for as long as it is needed to answer the enquiry and, where it leads to an order, for as long as the resulting business records must be kept. A specific retention schedule has not yet been set and will be published here once it has been.

06

Sharing

Where an enquiry concerns a project in Canada, the details needed to answer it may be shared with WB Construction Inc., VANKKA's distribution and installation partner in Halifax, Nova Scotia. That is a transfer of personal data outside the European Economic Area. The transfer mechanism for this route is being documented and will be described here once it is settled.

The site is hosted on Vercel, and form submissions are delivered by the email provider Resend. Loading a page also retrieves assets from two other providers: map tiles from CARTO on pages that show the locations map, and the three-dimensional scene on the home page from Spline. Retrieving those assets sends your IP address and browser details to those providers, which is unavoidable for any externally hosted asset. None of them is used to track you across sites.

07

Your rights

Where the GDPR applies, you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time, which does not affect processing already carried out. You may also lodge a complaint with your national supervisory authority — in Finland, the Office of the Data Protection Ombudsman.

08

Cookies and local storage

This website sets one cookie, and only when you use it. There are no analytics, advertising or cross-site tracking cookies, no tracking pixels, and nothing is written to local or session storage.

  • vankka-locale — set only when you switch the site between English and Finnish, so the choice survives navigation. First-party, stored for one year, and used for nothing else.

09

Why there is no cookie banner

Consent is required for cookies that are not strictly necessary. The language cookie is set only in response to an action you take, and it is the only one, so no consent banner is shown. Clearing your browser's site data removes it.

If analytics or any other non-essential cookie is introduced later, a consent mechanism will be added first, and no such cookie will be set before consent is given.

10

Security

The site is served over HTTPS. Form submissions are validated on the server, attachments are restricted by file type and size, and submissions are rate limited. No security measure is perfect, and no method of transmission over the internet can be guaranteed.

11

Children

This is a business-to-business website. It is not directed at children, and we do not knowingly collect personal data from them.

12

Canada

For visitors in Canada, including Nova Scotia, VANKKA handles enquiry data in line with Canadian federal private-sector privacy principles. You may ask for access to the personal information held about you and ask for corrections, using the contact form. If you are not satisfied with the response, you may complain to the Office of the Privacy Commissioner of Canada.

13

Changes to this policy

This policy will be updated as the site changes. The date below records the last substantive change.

14

Contact

Data protection enquiries can be raised through the contact form on this website.

Last updated:

Privacy policy | VANKKA