This privacy policy describes how NextIT processes personal data in connection with the website nextit.fi and contacts made via the website. The policy has been prepared taking into account the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.
1. Data controller
NextIT
Business ID: 2626190-3
Address: Kaskövägen 122, 64200 Närpes, Finland
Website: nextit.fi
Email: info@nextit.fi
NextIT is the controller for the processing of personal data described in this policy.
2. What personal data do we process?
Depending on how you use the website, we may process the following data:
- name and, where applicable, company name;
- email address and telephone number;
- information you provide yourself in a contact form or message;
- information needed for quotes, customer matters or support requests;
- IP address, time, requested web address, browser and device information and other technical log data that the server needs for operation and information security;
- cookie and consent data in accordance with our Cookie Policy.
Please do not send sensitive personal data via the website's contact form.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Answering questions and contact requests | Legitimate interest and, where the contact concerns a possible contract, steps taken at your request prior to entering into a contract |
| Preparing quotes, delivering ordered services and managing customer relationships | Contract and, where necessary, legal obligation |
| Protecting the website, preventing misuse and troubleshooting technical problems | Legitimate interest |
| Visitor statistics or other non-essential measurement using cookies or similar technology | Consent |
Where processing is based on legitimate interest, our interest normally consists of being able to communicate with customers and potential customers and maintaining a secure and functioning website.
4. Where does the data come from?
Personal data is primarily obtained directly from you when you contact us or use the website. Technical data may be generated automatically when your browser communicates with the web server.
5. Recipients and data processors
Personal data is not disclosed to third parties for their own marketing purposes. However, data may be processed by service providers that NextIT uses for, for example, web hosting, email, backup, IT operations, form handling or visitor statistics. Such providers may only process the data in accordance with applicable agreements and instructions.
Data may also be disclosed if required by law, a court decision or a competent authority.
6. Transfers outside the EU/EEA
We aim to use services where personal data is processed within the EU/EEA. If a provider transfers personal data outside the EU/EEA, a lawful transfer mechanism under the GDPR is ensured, such as an adequacy decision or the European Commission's standard contractual clauses, together with supplementary safeguards where necessary.
7. Retention period
We keep personal data only for as long as it is needed for the respective purpose or for as long as the law requires.
Contact requests that do not lead to a customer relationship are normally deleted or anonymized no later than 24 months after the matter has been closed, unless there is a justified need to keep them longer.
Data belonging to customer, contract, invoicing and accounting records is kept in accordance with applicable contractual and statutory requirements.
Technical server and security logs are kept only as long as they are needed for operation, troubleshooting and security. The actual retention period may depend on the web host's technical solution.
Cookie and consent data is kept for the validity period stated in the Cookie Policy.
8. Cookies
Information about cookies and similar technologies can be found on the Cookie Policy page. Non-essential cookies or similar technologies are only activated after valid consent. You can change or withdraw your consent at any time via the Cookie settings link at the bottom of every page.
9. Your rights
Depending on the situation, you have the right to:
- receive information about the processing and request access to your personal data;
- request rectification of inaccurate or incomplete data;
- request erasure of data when the conditions under the GDPR are met;
- request restriction of processing;
- object to processing based on legitimate interest;
- receive certain data in a structured, commonly used and machine-readable format where the right to data portability applies;
- where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of earlier processing.
A request can be sent to info@nextit.fi. Where necessary, we may ask for sufficient information to verify the identity of the person making the request.
10. Complaints to a supervisory authority
If you believe that personal data is being processed in breach of data protection legislation, you have the right to lodge a complaint with a competent supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, tietosuoja.fi.
11. Information security
We use appropriate technical and organizational measures to reduce the risk of unauthorized access, loss, alteration or disclosure. The measures are adapted to the nature of the services and may include HTTPS encryption, access control, updates, backups and logging.
12. Automated decision-making
NextIT does not use personal data from the website for decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, unless this is expressly notified separately.
13. Changes to this policy
We may update this policy when the website, our services or applicable requirements change. The date at the top of the page shows when the policy was last updated.
NextIT · Business ID 2626190-3 · nextit.fi · info@nextit.fi