Last updated: 14.6.2026
1. Data Controller
Validator Oy (hereinafter “Validator”)
Business ID: 2346815-9
Address: PL 79, 20521 Turku, Finland
Email: info@validator.fi
Phone: +358 400 522 004
2. Privacy Contact
For any questions about how we handle personal data, please contact:
Tuukka Koskenrouta
Email: info@validator.fi
3. Why We Process Personal Data
We process personal data to:
- respond to inquiries sent through the contact form, email or phone
- handle course and training registrations
- maintain our customer relationships.
The legal basis depends on the situation: performance of a contract and pre-contractual steps (GDPR Art. 6(1)(b)), our legitimate interest in responding to inquiries (Art. 6(1)(f)), and legal obligations relating to accounting and training records (Art. 6(1)(c)).
4. What We Collect
- contact details: name, email address and phone number
- the content of your message
- for course participants, attendance records and certification data.
5. Where the Data Comes From
We collect data directly from you, through the contact form, email or in conversation.
6. Sharing and Transfers Outside the EU
We do not share your personal data with outside parties except where required by law. The following processors handle data on our behalf:
- website hosting and technical service provider
- email service provider
- Google Ireland Ltd and Google LLC, if you have consented to statistics cookies (Google Analytics 4).
Google Analytics involves transferring pseudonymised data, such as cookie identifier, truncated IP address, browser and device information, to Google LLC in the United States. The transfer relies on the EU–US Data Privacy Framework adequacy decision and Google’s Standard Contractual Clauses. IP anonymisation is enabled, and no data is transferred to Google before you have actively given consent.
7. How Long We Keep It
Contact-form data is kept for 12 months by default, longer if an ongoing customer relationship requires it. Course records and related documents are retained for as long as the law requires, for instance for occupational safety card training, and for the 6 years required by the Finnish Accounting Act. We delete data we no longer need on a regular basis.
8. Your Rights
You have the right to access your personal data, correct inaccuracies, request erasure or restriction, object to processing, receive your data in a portable format, and withdraw any consent you have given.
To exercise these rights, please contact us in writing at the address above.
9. Right to Lodge a Complaint
If you believe we are handling your personal data unlawfully, you can lodge a complaint with the Finnish Office of the Data Protection Ombudsman: tietosuoja.fi.
10. Automated Decision-Making
We do not use personal data for automated decision-making or profiling.
11. Security
Personal data is protected with appropriate technical and organisational measures. We treat it as confidential, and only those who need it for their work can access it.
12. Updates to This Policy
We update this policy when needed. The current version is always available on this page.