Data protection

Drafted 8.12.2025

This document is Ellibs’ website privacy policy, which is in accordance with sections 10 and 24 of the Personal Data Act and the EU General Data Protection Regulation (GDPR). 

This document specifies what types of personal data Ellibs may collect on you when you contact Ellibs through its website. By using the website contact request forms, you agree to the processing of your personal data in accordance with this privacy policy.

Ellibs may occasionally make changes to this privacy policy by publishing a new version of it on its website, such as when modifications are made to its online services or information systems or when any applicable legislation has been amended.

1. Data controller

Ellibs Oy (1464614-4)
Kauppiaskatu 5 A
20100 Turku
Finland

2. Contact person

The person responsible for data protection matters can be reached by email at tietosuoja [at] ellibs.com.

3. Name of the personal data file

Customer register for the Ellibs service description website.

4. Legal basis and purpose for processing your personal data

In accordance with the EU General Data Protection Regulation (GDPR), the legal basis for processing personal data is the data subject’s consent given when subscribing to the newsletter or submitting a contact form.

Personal data is used for sending newsletters and direct marketing messages, responding to contact requests, providing information about services and products, sales and customer relationship management, as well as other appropriate communication and marketing activities.

5. Data content of the register

In connection with newsletter subscriptions, the following data is collected: first name, last name, organisation and email address. The contact form collects first name, last name, organisation, email address and, optionally, information about which service the user is interested in. The register may also contain any other information the user has voluntarily provided in the message field.

The data contained in the register is stored in accordance with the requirements of applicable legislation.

6. Regular data sources

The personal data in the register is collected from the data subject personally.

7. Regular data disclosures and the transfer of data outside the EU or EEA

The data is processed only by designated persons, and it is not disclosed to other parties. The controller may disclose data to public authorities within the limits permitted and required by applicable legislation. Data is not transferred outside the EU or EEA. Data may be published to the extent agreed with the customer.

8. Register protection principles

The controller’s data system and files are protected by technical protection mechanisms that are standard to business operations. Filing system access rights require a personal user ID and password, which are granted only to the controller’s staff and which are connected to the employee’s position and tasks. Physical access control is implemented on the controller’s premises.

9. Right to the inspection and correction of data

Each and every data subject in the register has the right to inspect or update their data stored in the register as well as demand the correction of any erroneous information or supplementing of incomplete information. 

If the data subject wants to inspect data concerning them that is stored in Ellibs data register or demand that said data be corrected, they must submit a written request to tietosuoja [at] ellibs.com. If necessary, the data controller may ask the data subject submitting a request to prove their identity. The data controller must respond to the data subject’s request within the time period specified in the EU General Data Protection Regulation (one month).

10. Other rights related to the processing of personal data

Data subjects have the right to request the deletion of their personal data from the register. Data subjects also have other rights afforded to them by the EU General Data Protection Regulation, such as restrictions on the processing of personal data. 

Requests concerning the data register must be submitted in writing to support [at] ellibs.com. If necessary, the data controller may ask the data subject submitting a request to prove their identity. The data controller must respond to the data subject’s request within the time period specified in the EU General Data Protection Regulation (one month).

11. Cookies

This service uses cookies for enabling functionalities of the service. Cookies are also used for development and statistical purposes. The service is utilizing necessary cookies for the page functionalities and optional third party cookies. More information about the cookies currently in use can be read from the cookie policy -page. The page can also be used for altering cookie selection.

Third party cookies can be declined. The acceptance for the cookies is asked the first time the user enters the service. The selection is saved for a month, after which the acceptance is asked again.

It’s possible to alter browser settings so that the browser does not allow storing the cookies at all. By doing this, the user accepts that preventing all cookies might prevent using the service properly.