Privacy policy

1. Data controller

NinjaTech Oy (Business ID 3652975-8), c/o Osmo Makkonen, Kalliopääntie 4, 10300 Karjaa, Finland.

For privacy matters, contact us at info@ninjatech.fi.

2. What data we collect

We collect only what we need to prepare a quote and fulfil a rental agreement.

• Contact details: name, organisation, email address and phone number.
• Event details: date, venue, attendee count and whatever you describe in your message.
• Customer relationship data: quotes, orders, invoicing details and correspondence history.
• Technical server logs such as IP address and browser identifier, to keep the service running and secure.

3. Purpose and legal basis

We process data to prepare quotes, fulfil agreements, invoice and communicate with customers.

The legal bases are the preparation and performance of a contract (GDPR Article 6(1)(b)), legal obligations such as accounting (Article 6(1)(c)), and our legitimate interest in managing the customer relationship and securing the service (Article 6(1)(f)).

4. Retention

Quote request data is kept for 24 months from the last contact if it doesn't lead to a customer relationship.

Customer data is kept for the duration of the agreement and afterwards for as long as the law requires. Accounting records are kept for six years from the end of the financial year, as required by the Finnish Accounting Act.

5. Who receives the data

We do not sell or rent personal data to third parties.

We use trusted service providers who process data on our behalf under a data processing agreement.

• The technical platform hosting the website and processing form submissions.
• The email and messaging delivery service.
• The accounting and invoicing service.

6. Transfers outside the EU

Data is processed within the EU or EEA wherever possible. If a provider processes data outside that area, the transfer relies on a European Commission adequacy decision or on standard contractual clauses.

7. Cookies

This site uses no tracking or advertising cookies and does not profile visitors.

We use only cookies strictly necessary for the site to function, such as form abuse prevention. Those do not require consent. If we add analytics later, we will ask for consent separately and update this policy.

8. Your rights

Under the GDPR you have the following rights:

• The right to access your data and request a copy.
• The right to have incorrect or incomplete data corrected.
• The right to erasure once there is no longer a basis for processing.
• The right to restrict processing and to object to processing based on legitimate interest.
• The right to data portability for the data you provided.
• The right to withdraw consent at any time where processing is based on consent.

9. How to exercise your rights

Send your request to info@ninjatech.fi. We respond within one month. We may ask you to verify your identity before releasing data.

10. Right to complain

If you believe we process your data unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

11. Changes to this policy

We update this policy when our service or our data processing changes. The current version is always on this page, and the update date is shown at the top.