Xtend blowers finland ltd.musta
Xtend blowers finland ltd.musta

Datenschutzerklärung / Privacy policy

1. Overview

General information

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the sections below.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Controller” below and in our Impressum.

How do we collect your data?

Some data is collected when you provide it to us, for example data you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website, or only after you have given your consent. This is mainly technical data (e.g. browser, operating system, time of page access).

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse how visitors use the website, to measure our marketing, and to handle enquiries.

What rights do you have?

You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request rectification, erasure or restriction of processing, the right to data portability, the right to object, and the right to lodge a complaint with a supervisory authority. If you have given consent, you can withdraw it at any time with effect for the future. Details are set out in section 5.

2. Controller and Contact Details

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Xtend Blowers Finland ltd

Vehkaojantie 290, 

35600 HALLI

FINLAND

Represented by: CEO, Xtend Blowers Finland ltd, Mr Tapani Huikuri

Phone: +358 40 821 3126

Email: tapani.huikuri@xtendblowers.com

VAT ID: FI35992652

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data Protection Officer

We are not legally required to appoint a Data Protection Officer. For all data protection questions, please contact us using the contact details above.

3. Hosting, Infrastructure and Security

Hosting

This website is hosted by an external service provider (hoster):

Artio Oy, Koskentie 11, 42100 Jämsä, Finland.

Personal data collected on this website (e.g. IP addresses, contact enquiries, metadata, communication data, website access data) is stored on the hoster’s servers located in Finland. The hoster processes your data only to the extent necessary to fulfil its service obligations and in accordance with our instructions.

Legal basis: Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure, fast and efficient provision of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG.

Data processing agreement: We have concluded a data processing agreement (DPA) with our hoster in accordance with Art. 28 GDPR.

Privacy policy of the hoster: https://artio.fi/ota-yhteytta/tutustu-oikeuksiisi-artio-oyn-tietosuojaselosteet/

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser and the lock symbol.

4. General Information on Data Processing

Legal bases

We process personal data on the following legal bases:

    • Consent – Art. 6 (1) lit. a GDPR. Where consent covers the storage of or access to information on your device (e.g. cookies), additionally § 25 (1) TDDDG.

    • Performance of a contract or pre-contractual measures – Art. 6 (1) lit. b GDPR.

    • Legal obligation – Art. 6 (1) lit. c GDPR (e.g. statutory retention obligations).

    • Legitimate interests – Art. 6 (1) lit. f GDPR. The specific interest is stated in each section.

    • Technically necessary storage and access on your device – § 25 (2) no. 2 TDDDG. No consent is required where this is strictly necessary to provide a service you have expressly requested.

The applicable legal basis for each processing operation is stated in the respective section of this privacy policy.

Recipients of personal data

As part of our business activities, we work with external service providers. In some cases, it is necessary to transfer personal data to them. Recipients may include:

    • IT and hosting service providers acting as processors under Art. 28 GDPR

    • Providers of analytics and marketing tools (only with your consent)

    • Email and communication service providers: Microsoft 365

    • Tax advisors, auditors and public authorities, where required by law

We only pass on personal data where this is necessary to fulfil a contract, where we are legally obliged to do so, where we have a legitimate interest, or where you have consented. Where we use processors, we have concluded data processing agreements with them in accordance with Art. 28 GDPR.

Transfers to third countries

Some of the tools we use are provided by companies based in the USA or other countries outside the European Economic Area (EEA), or those companies may access data from such countries. In these cases, personal data may be transferred to and processed in these countries.

Transfers take place only if one of the following safeguards applies: an adequacy decision of the European Commission (Art. 45 GDPR), in particular the EU-U.S. Data Privacy Framework (DPF) for certified US companies; or Standard Contractual Clauses adopted by the European Commission (Art. 46 (2) lit. c GDPR). The applicable safeguard for each tool is stated in the respective section. You can check whether a US company is certified under the DPF at https://www.dataprivacyframework.gov/.

Storage period

Unless a specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of processing no longer applies. If you make a justified request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law). In that case, deletion takes place once these reasons cease to apply.

Obligation to provide data

You are not legally or contractually obliged to provide us with personal data. However, some data is required to use certain functions: without the data marked as mandatory in our contact form, we cannot process your enquiry. Technical data (server log files) is necessary to display the website.

Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

5. Your Rights

You have the following rights regarding your personal data. To exercise them, please contact us using the details in section 2.

    • Right of access (Art. 15 GDPR): You can request information about whether and which personal data we process about you.

    • Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data or the completion of incomplete data.

    • Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided there are no legal grounds for further storage.

    • Right to restriction of processing (Art. 18 GDPR): You can request that we restrict the processing of your data, for example while the accuracy of the data is being verified.

    • Right to data portability (Art. 20 GDPR): You can request to receive data that we process on the basis of your consent or a contract in a structured, commonly used and machine-readable format, or to have it transferred to another controller.

    • Right to withdraw consent (Art. 7 (3) GDPR): You can withdraw consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected. You can change your cookie consent at any time via “Manage Consent” link in the website footer in the left corner.

    • Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for us is: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), P.O. Box 800, 00531 Helsinki, Finland, tietosuoja@om.fi, https://tietosuoja.fi/en

Right to object (Art. 21 GDPR)

INFORMATION ON YOUR RIGHT TO OBJECT

If data processing is based on Art. 6 (1) lit. e or f GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

To object, an informal message to tapani.huikuri@xtendblowers.com is sufficient.

6. Data Collection on This Website

Cookies

Our website uses cookies and similar technologies (e.g. local storage, pixels). Cookies are small text files stored on your device by your browser. Some cookies are deleted when you close your browser (session cookies); others remain on your device until they expire or you delete them (persistent cookies). Cookies may be set by us (first-party cookies) or by third parties (third-party cookies).

Technically necessary cookies are required to operate the website, for example to store your cookie preferences or to provide security functions. We store them on the basis of § 25 (2) no. 2 TDDDG and Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the technically error-free provision of our website.

All other cookies (e.g. analytics and marketing cookies) are stored only with your consent on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time via “Manage consent” link.

A detailed list of the cookies used, including their purpose, provider and storage period, can be found in our cookie banner under “Manage consent”, link in the website footer, left down corner.

Consent management tool

We use the consent management tool Complianz provided by Complianz BV
CoC 717814475
Kalmarweg 14-5
9723 JG, Groningen (NL) to obtain and document your consent to the storage of cookies and the use of third-party services. When you visit the website, the tool stores a cookie in your browser containing your consent choices, as well as a consent record including pseudonymous ID, timestamp, consent version, the choices made, truncated IP address. This data is stored on our hosting  providers server in Finland, EU.

Legal basis: Art. 6 (1) lit. c GDPR in conjunction with Art. 7 (1) GDPR (obligation to demonstrate consent). Storage period: The consent cookie is stored for 12 months. Consent records are stored for 3 years.

Server log files

The hoster of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

    • Browser type and version

    • Operating system used

    • Referrer URL

    • Host name of the accessing computer

    • Time of the server request

    • IP address

This data is not merged with other data sources. Legal basis: Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the technically error-free presentation, security and stability of our website. Storage period: Log files are deleted after 365 days, unless longer storage is required to investigate a specific security incident.

Contact forms

If you send us an enquiry via our contact form, the data you provide in the form (mandatory fields: name, email address, phone number, message, selections; optional fields: file uploads ) will be stored by us for the purpose of processing your enquiry and for possible follow-up questions. The form submissions are also stored in our website’s database. We do not pass on this data without your consent.Uploaded files are stored on our hosting provider’s server in Finland and are deleted together with the enquiry data.

Legal basis: Art. 6 (1) lit. b GDPR if your enquiry is related to a contract or pre-contractual measures; otherwise Art. 6 (1) lit. f GDPR, based on our legitimate interest in effectively processing enquiries addressed to us.

Storage period: We delete your enquiry data once it has been fully processed and is no longer needed, at the latest after 12 months, unless statutory retention obligations apply (e.g. if the enquiry leads to a contract).

Enquiries by email or phone

If you contact us by email or phone, your enquiry, including all resulting personal data (name, contact details, content of the enquiry), will be stored and processed by us for the purpose of handling your request. Legal basis and storage period are the same as for the contact form. Our email service is provided by Microsoft Ireland Operations Ltd. (Microsoft 365) with whom we have concluded a data processing agreement. Data may be transferred to Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework.

Google reCAPTCHA 

To protect our forms against spam and automated misuse, we use Google reCAPTCHA provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). reCAPTCHA analyses the behaviour of website visitors (e.g. IP address, time spent on the page, mouse movements) to determine whether data is entered by a human or an automated program.

Legal basis: Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG (consent via our cookie banner). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy

Newsletter 

If you subscribe to our newsletter, we use your email address to send you information about our products, news and trade fairs. We use the double opt-in procedure: after registering, you receive an email asking you to confirm your subscription. We log the time of registration and confirmation and your IP address to be able to prove your consent. The newsletter is sent via Artio Oy, Koskentie 11, 42100 Jämsä, Finland, with whom we have concluded a data processing agreement.

Legal basis: Art. 6 (1) lit. a GDPR. You can unsubscribe at any time via the link in every newsletter. After unsubscribing, your email address may be stored in a blocklist to prevent future mailings (Art. 6 (1) lit. f GDPR).

7. Analytics and Marketing Tools

Google Tag Manager and Google Consent Mode

We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage the integration of Google Analytics 4 and Google Ads on our website. Google Tag Manager itself does not create user profiles or set cookies, but loading it transmits your IP address and technical browser data to Google.

We use Google Consent Mode v2 in combination with Complianz. When you visit our website, all consent types (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to “denied” by default. Google Analytics 4 and Google Ads tags are only activated after you have consented to the respective category (“Statistics” or “Marketing”) in our cookie banner. Without your consent, these tools are not loaded and no data is transmitted to them. If you change or withdraw your consent, the consent status is updated immediately.

Legal basis for loading Google Tag Manager: Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the efficient management of the tools used on our website and in the technical enforcement of your consent choices. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.

Google Analytics 4 

If you consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 is integrated via Google Tag Manager and is only activated after you have consented to the “Statistics” category in our cookie banner.

Google Analytics enables us to analyse how visitors use our website. For this purpose, we receive usage data such as pages viewed, time spent on pages, device and browser information, approximate location (country/city) and the source of the visit. Google Analytics uses cookies (e.g. _ga, ga_<containerID>) to recognise your device.

IP addresses: Google Analytics 4 does not log or store IP addresses of users in the EU. Google Signals is disabled. 

Legal basis: Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time via the “Manage Consent” link in the website footer.

Data processing agreement: We have concluded a data processing agreement with Google by accepting the Google Ads Data Processing Terms.

Third-country transfer: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Storage period: User-level and event-level data is deleted after 14 months.  The _ga cookie is stored for up to 24 months.

Further information: https://policies.google.com/privacy

Google Ads and conversion tracking

This website uses Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), including Google Ads conversion tracking and remarketing.

Integration and consent: Google Ads is integrated via Google Tag Manager and is only activated after you have consented to the “Marketing” category in our cookie banner (Complianz). Before consent, the tags are not loaded and no data is transmitted to Google. We use Google Consent Mode v2: the consent signals ad_storage, ad_user_data and ad_personalization are set to “denied” by default and are only updated to “granted” once you give your consent.

How it works: When you click on one of our ads on Google and then visit our website, Google sets a cookie (e.g. _gcl_au) on your device. If you then perform a defined action on our website, such as submitting our contact form, Google and we can recognise that the click led to this action (conversion). We only receive aggregated statistics, such as the number of conversions, and cannot identify you personally. Data processed includes the click ID, the pages visited, the time of the visit, device and browser information and your IP address.

Remarketing: Google may also use this data to show you our ads on other websites and in Google services after you have visited our website (remarketing). For this purpose, visitors are added to anonymous audience lists. We cannot identify individual persons from these lists.

Legal basis: Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the “Manage consent” link in the website footer.

Recipients and third-country transfer: Google processes the data on the basis of the Google Ads Data Processing Terms and, where Google acts as an independent controller, the Google Ads Controller-Controller Data Protection Terms. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Storage period: The conversion cookie _gcl_au is stored for up to 90 days. Remarketing audience lists retain users for up to 540 days. Google stores the collected data according to its own retention policies.

Further information: https://policies.google.com/privacy and https://business.safety.google/adsprocessorterms/

 

8. Plugins, Fonts and Embedded Content

Fonts (locally hosted)

This website uses web fonts to display text consistently. The fonts are hosted locally on our own server. No connection to servers of Google or other third parties is established when fonts are loaded.

Links to social media

Our website contains simple links to our profiles on LinkedIn / Instagram, Youtube, X. These are ordinary links, not social media plugins. No data is transmitted to the respective network until you click on a link. After clicking, the privacy policy of the respective network applies.

Our company page on LinkedIn 

We maintain a company page on LinkedIn. When you visit our page, LinkedIn processes your data and provides us with statistics about page visitors (Page Insights). For this processing, we and LinkedIn Ireland Unlimited Company are joint controllers under Art. 26 GDPR. LinkedIn is primarily responsible for this processing and for fulfilling your rights. Legal basis: Art. 6 (1) lit. f GDPR; our legitimate interest lies in communicating with interested parties and presenting our company. Further information: https://legal.linkedin.com/pages-joint-controller-addendum

9. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or in our services, for example when we introduce new tools. The current version is always available on this page. Last updated: 30 September 2026.