Updated: 6 November 2026
1. Data controller
Gewerk Finland Oy (marketing name for housing company services: KattoFIXer.fi)
Business ID: 3631966-2
Tampere
E-mail: kattofixer@gmail.com / gewerkfinland@gmail.com
Phone: +358 45 2017 305
This privacy policy covers the products and services offered by KattoFIXer and the website kattofixer.fi.
2. What personal data do we collect?
We may collect the following data in connection with an enquiry and/or customer relationship:
- Name, e-mail address, phone number
- Delivery and billing address
- Company name and business ID (if purchasing for a company)
- Order and payment details, customer service messages
Through the website we collect the following data:
- Device and browser information
- Traffic source
We do not, however, collect any data that identifies you, and we do not share even this traffic data. Visitor statistics are produced with the Finnish Metrimato service, which sets no cookies and stores no IP addresses or other visitor identifiers. The statistics are kept on servers in Finland for at most 6 months and are then deleted automatically. Browser Do Not Track and Global Privacy Control settings are respected.
The details you send through the contact form (name, phone number, e-mail address, town, property details and message) are delivered to our e-mail via the Web3Forms service. Web3Forms does not store form contents, and its technical logs are deleted roughly every two months.
We therefore collect identifying data directly from you when you place an order, get in touch or use the service.
3. What is the data used for?
Personal data is processed for the following purposes:
- Processing and delivering orders, handling payments
- Customer service and compliance with legal obligations
- Developing the service and ensuring data security
- Marketing (if you have given your consent)
4. Legal basis for processing
Personal data is processed on the basis of:
- Performance of a contract
- Legal obligation (e.g. the Accounting Act)
- Legitimate interest (e.g. service development, data security)
- Consent (e.g. newsletter)
5. Payments and payment service providers
The website does not use any payment services.
6. Disclosure of data
We may disclose personal data to the following parties:
- Authorities where required by law
- Technical service providers that process data on our behalf: Cloudflare (website hosting and security), Web3Forms (contact form delivery), Metrimato (anonymous visitor statistics) and Google (e-mail)
Data is not sold to third parties.
7. Transfers of data outside the EU/EEA
Data may be transferred outside the EU/EEA, for example when international technical services are used. The website host Cloudflare, the form service Web3Forms and the e-mail service Google also operate in the United States. Visitor statistics (Metrimato) are stored in Finland. Transfers are carried out with safeguards under the GDPR, such as the European Commission’s standard contractual clauses.
8. Retention periods
We keep personal data only for as long as necessary:
- Order data: as required by the Accounting Act (6–10 years)
- Marketing data: until consent is withdrawn
- Technical logs: up to 12 months
9. Data security
Personal data is protected by appropriate technical and organisational measures:
- Encrypted connection (HTTPS/TLS)
- Restricted access rights, server environment protection
- Regular backups, log monitoring and security monitoring
10. Your rights as a data subject
You have the right to:
- Access data concerning you and request its rectification
- Request erasure of the data, restrict processing and object to processing
- Transfer the data from one system to another
- Withdraw your consent at any time
You can exercise your rights by contacting: kattofixer@gmail.com
You also have the right to lodge a complaint with the supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).
11. Cookies
The KattoFIXer website uses no tracking or advertising cookies and no cookies that identify you. The site stores only what it needs to work in your browser (in a cookie or the browser’s local storage): that you accepted the cookie notice (30 days), that the campaign notice was shown (3 days) and the language you chose. None of this can identify you, and it is not sent to us.
