Privacy policy

Privacy Notice

EU General Data Protection Regulation (EU) 2016/679 and the Finnish Data Protection Act (1050/2018)

Updated 17 September 2026

1. Data Controller

Suokone Oy
Lastaajantie 1
88610 VUOKATTI
Finland
+358 8 66 62 011
suokone@suokone.com

2. Contact Person for Matters Concerning the Register

Tuomo Meriläinen
Lastaajantie 1
88610 VUOKATTI
Finland
+358 400 685 390
tuomo.merilainen@suokone.com

3. Name of the Register

SUOKONE – Customer Register

A customer and contact person register based on a customer relationship, potential customer relationship or other relevant connection.

4. Purposes and Legal Bases for Processing Personal Data

Personal data is processed for purposes related to Suokone Oy’s business operations, customer relationship management, customer service, sales, communications, and product and service advice.

The processing of personal data may be based on:

  • a contract or measures taken prior to entering into a contract

  • compliance with a legal obligation

  • the legitimate interests of the data controller, such as managing customer relationships, customer communications and ensuring the security of online services

  • the data subject’s consent where processing requires consent.

Personal data may also be processed when a user contacts Suokone Oy through website contact forms or the chatbot service and voluntarily provides information, for example for product advice, a quotation request or a request to be contacted.

The website uses the CleanTalk Anti-Spam service to ensure website security and to prevent spam, bots and other misuse. The legal basis for processing personal data in connection with CleanTalk is the legitimate interest of the data controller in protecting the website, contact forms and other online services against misuse.

Google Analytics may be used to analyse website usage based on the user’s consent. Users can manage their consent relating to analytics through the website’s cookie settings.

5. Personal Data Processed

The register may contain the following personal data:

SUOKONE customer information

Information concerning organisations:

  • company name

  • address details

  • billing information

  • email address

  • telephone number

  • Business ID

  • website address

  • start and end date of the customer relationship

  • products and services associated with the organisation.

Information concerning contact persons:

  • name

  • email address

  • telephone number

  • job title or position within the organisation.

The website may also process information relating to website visits, choices made by the user and the completion of forms in accordance with applicable legislation and the consents provided by the user.

In the website chatbot service, the user may voluntarily provide information such as:

  • name

  • email address

  • telephone number

  • country

  • information on whether the user is an end customer, dealer or acts in another role

  • information concerning product requirements

  • technical information concerning a tractor, excavator or other machine being used

  • other information voluntarily provided by the user during the conversation.

When protecting the website and detecting spam, the CleanTalk Anti-Spam service may process information such as:

  • IP address

  • email address

  • webpage address

  • information entered into forms

  • timestamps

  • technical information relating to the browser and device

  • technical information relating to website use and user interaction that is necessary for detecting spam, automated traffic and other misuse.

6. Regular Sources of Personal Data

Personal data is primarily obtained directly from the data subject, for example:

  • by email

  • by telephone

  • during meetings and customer visits

  • at trade fairs, exhibitions and seminars

  • through website contact forms

  • in connection with quotation requests

  • through information provided in the chatbot service.

Technical information may also be generated automatically when the website is used, such as IP addresses, browser and device information, and information necessary for website security, functionality and spam detection.

Where necessary, information may also be obtained from public or business-related sources, such as:

  • the Finnish Business Information System (YTJ)

  • Suomen Asiakastieto Oy

  • the Finnish Patent and Registration Office

  • Fonecta Oy.

7. Recipients, Disclosures and Processors of Personal Data

Personal data may be disclosed to Suokone Oy’s cooperation partners within the limits permitted by law where this is necessary, for example, in order to serve the customer or handle a request for contact.

Contact details provided through the website chatbot or contact forms may be forwarded to Suokone Oy’s sales organisation or the relevant dealer or distribution organisation in order to process the user’s enquiry or request.

Suokone Oy uses external service providers in connection with its online services. These service providers may process personal data on behalf of Suokone Oy and in accordance with its instructions.

The CleanTalk Anti-Spam service is used to prevent spam and misuse of the website. CleanTalk acts as a processor of personal data and may process information transmitted from the website to the extent necessary to detect and prevent spam, bots and other misuse.

CleanTalk Privacy Policy:
https://cleantalk.org/privacy

Google Analytics is used to analyse website usage on the basis of the user’s consent.

8. Transfers of Personal Data Outside the EU or EEA

Suokone Oy aims to process personal data received from the EU and EEA primarily within the EU and EEA.

In the CleanTalk Anti-Spam settings, servers located within the EU have been selected as the data storage location.

CleanTalk Inc. is a service provider based in the United States. If the processing of personal data through CleanTalk or another service provider requires personal data to be transferred outside the EU or EEA, such transfers are carried out in accordance with Chapter V of the EU General Data Protection Regulation and using appropriate transfer mechanisms and safeguards.

Depending on the circumstances, these may include an adequacy decision adopted by the European Commission or Standard Contractual Clauses approved by the European Commission.

Customer and contact information received from other countries may, where necessary, be forwarded to Suokone Oy’s distribution or sales organisation in the relevant country for the purpose of handling the enquiry or contact request.

9. Retention Periods for Personal Data

Personal data is retained only for as long as necessary for the purposes for which it is processed or for compliance with legal obligations.

The retention period for customer and contact person information is determined, among other things, by the duration of the customer relationship, the purpose of the contact, possible contractual obligations and statutory retention requirements.

Information relating to quotation requests, enquiries and potential customer relationships is retained for as long as necessary for handling the enquiry, establishing a possible customer relationship or another justified business purpose.

Data processed by the CleanTalk Anti-Spam service is retained in accordance with CleanTalk’s current service settings and privacy practices. CleanTalk states that data relating to spam detection is retained for 7 or 45 days depending on the service and service level, after which the data is automatically deleted. Data may subsequently be used in anonymised and statistical form.

10. Principles of Protecting Personal Data

a) Manual Data

Paper documents containing customer personal data are stored in appropriately secured premises in a manner that prevents unauthorised access.

b) Electronically Processed Data

Networks, systems and devices are protected by appropriate technical and organisational measures, such as firewalls, access controls, passwords and other generally accepted information security measures.

Access to personal data is restricted to persons who require the information in order to perform their duties.

Information provided through the website, including information submitted through contact forms and the chatbot, is transmitted using encrypted connections.

The website is additionally protected by the CleanTalk Anti-Spam service, which is used to detect and prevent spam, automated enquiries, bot activity and other misuse of the website.

11. Right of Access

The data subject has the right to obtain confirmation as to whether personal data concerning them is being processed and to access their personal data in accordance with applicable data protection legislation.

Requests concerning the rights of data subjects should be addressed to the contact person specified in Section 2.

Requests will be answered without undue delay and, as a rule, no later than one month after receipt of the request.

If a request is particularly complex or several requests have been submitted, the time limit may be extended by a maximum of two additional months where permitted by the GDPR. The data subject will be informed of any extension and the reasons for it within one month of receipt of the request.

The data controller may request additional information where necessary to verify the identity of the data subject.

12. Right to Rectification and Erasure

The data subject has the right to request the correction of inaccurate or incomplete personal data concerning them.

The data subject has the right, subject to the conditions laid down in the GDPR, to request the erasure of their personal data.

The right to erasure is not absolute. Personal data may be retained, for example, where processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

13. Right to Restriction of Processing and Right to Object

The data subject has the right, in situations provided for in the GDPR, to request the restriction of the processing of their personal data.

The data subject also has the right, on grounds relating to their particular situation, to object to the processing of their personal data where the processing is based on the legitimate interests of Suokone Oy.

14. Withdrawal of Consent

Where the processing of personal data is based on the data subject’s consent, the data subject has the right to withdraw their consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Consent relating to cookies and analytics on the website can be managed through the website’s cookie settings.

15. Right to Lodge a Complaint with a Supervisory Authority

If the data subject considers that their personal data has been processed in violation of data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman

Further information on data subject rights and lodging a complaint:
https://tietosuoja.fi/en

16. Further Information on the Processing of Personal Data

The data subject may request further information concerning the processing of their personal data by contacting the person specified in Section 2.

Suokone Oy may update this Privacy Notice if its personal data processing practices, services used or applicable legislation change.