Privacy notice

Kampek Invest Oy (Business ID 1581524-5), kampek@kampek.fi, +358 40 502 9474. Privacy contact: kampek@kampek.fi.

We process contact details submitted through contact and quote-request forms: name, email, phone, organisation, and message content. Email submissions include the sender's name, address, and message content. Server request logs are retained briefly for security and technical operations.

Processing is based on consent (contact and quote-request forms, GDPR Article 6(1)(a)) and legitimate interest (technical operation and security of the site, GDPR Article 6(1)(f)). Data is not used for marketing and is not disclosed for marketing purposes.

The site uses one cookie, NEXT_LOCALE, which stores the visitor's chosen language (fi or en). The cookie is strictly necessary for the operation of the service under the Finnish Act on Electronic Communications Services §205 and does not require separate consent. It contains no personal data and does not track visitor behaviour. No analytics or advertising cookies are used at all.

The site loads nothing from a third party: no mapping services, fonts, video services, social media embeds, ad networks or tracking pixels. Typefaces are served from the site's own server, and the maps on the contact page are local image files, so no mapping provider learns about your visit. In practice your browser contacts only this site unless you click an external link yourself.

The site contains no AI system: no chatbot, no AI assistant, and no automatically generated image or video content. Messages sent through the forms are handled by a person. No automated decisions and no profiling within the meaning of Article 22 of the GDPR are carried out on the basis of personal data. If an AI feature is added later, this notice will be updated before it goes live and the feature will be labelled as required by Article 50 of the EU AI Act (2024/1689).

Contact and quote-request data is kept until the customer relationship is concluded, or up to 24 months, whichever is shorter. Server request logs are kept for 30 days.

Data is not disclosed to third parties for marketing purposes. Data is processed only by personnel authorised by the controller and by the processors listed below within the bounds of service agreements.

Hostinger International Ltd (site hosting and server request logs; the server is located in Germany, within the EU). Resend (transmission of contact and quote-request form messages by email). A data processing agreement under Article 28 of the GDPR is in place with both.

Site hosting and server logs remain within the EU/EEA. Resend is a US-based provider and may handle the transmission of form messages outside the EU/EEA; those transfers rely on the European Commission's Standard Contractual Clauses (2021/914). No other transfers outside the EU/EEA take place.

The data subject has the right to access, rectify, and erase data concerning them, and to restrict and object to processing, and to data portability. Consent-based processing may be withdrawn at any time. Requests: kampek@kampek.fi.

If the data subject considers that their data has been processed in violation of data protection law, they have the right to lodge a complaint with the supervisory authority. Office of the Data Protection Ombudsman, Lintulahdenkuja 4, 00530 Helsinki, tietosuoja.fi.

This privacy notice may be updated as needed, for example when processing methods or processors change. Last updated: August 2026.