Tallikuntoon – Privacy Policy

Effective Date: July 22, 2026
Version: 2026-07-22-v2

1. Controller Identity

Fieri Oy (Business ID: 3638345-3)
Address: Siljotie 3 A 38, 96100 Rovaniemi
Privacy matters: privacy@tallikuntoon.fi
Public Brand: Tallikuntoon

2. Scope

This privacy policy describes how Fieri Oy collects and processes your personal data when you use the Tallikuntoon service and its website. We do not collect or purchase data from third parties; all data we process is provided by you or generated in connection with your use of the service.

3. Categories of Personal Data Collected

We collect only the data necessary to provide the service:

• Contact Data: First name, last name, email address, phone number.
• Worksite Data: Free-text worksite address (we do not use automated geocoding or Google Places).
• Assessment Data: Space size, clutter level, recycling needs, the customer's free-text message, service path, and the generated price and work-time estimate.
• Booking Data: Selected service time (date, start and end time, duration) or contact request.
• Billing Data: Name, street address, postal code, city, optional apartment number.
• Technical and Security Data: IP address, browser and device data, email-delivery metadata, request timestamps, and log data for security and abuse prevention.
• Privacy Notice Verification Data: Timestamp of reviewing or receiving the privacy policy and the policy version.

4. Purposes and Lawful Bases for Processing

We process your data for the following purposes based on the GDPR:

• Providing the Service and Price Estimate (Performance of a Contract / Pre-contractual Steps): Calculating the estimate, managing the booking, and performing the service.
• Invoicing and Accounting (Legal Obligation): Fulfilling obligations under the Finnish Accounting Act.
• Responding to Contacts and Communication (Performance of a Contract / Legitimate Interest): Necessary communication related to the service and booking, and responding to customers' general enquiries. We do not use your data for direct marketing without separate consent.
• Service Security and Abuse Prevention (Legitimate Interest): Ensuring the technical integrity of the service, preventing duplicate bookings or harassment, and troubleshooting.

5. Required and Optional Information

The worksite address and free-text fields are optional. Contact and billing details are required to make and confirm an actual booking. In special cases, a preliminary, non-binding request may be submitted without these details. Without contact details, however, we cannot contact you or confirm a booking.

Note: Do not include health information, personal identity numbers, payment-card details, or other sensitive personal data in the free-text fields.

6. Assessment Logic and Automated Decision-Making

Our website calculates a price and work-time estimate based on the information you provide. This estimate is not a binding offer. We do not make automated decisions under Article 22 of the GDPR that would have legal effects on you.

A possible €40 travel charge (outside a 10 km radius of Rovaniemi) and final acceptance of the work are always confirmed manually by a person. The 10 km radius map shown on the website is an indicative image only and does not locate your address automatically.

7. Recipients and Processors

We use reliable service providers (data processors) to operate the service:

• UpCloud: Server and database hosting. The production server is located in Helsinki, Finland.
• Google (Google Calendar & Google Drive): We use Google Calendar to manage bookings and check availability. We also use Google Drive to store database backups.
• Brevo: Delivering service-related transactional emails, such as receipt, booking, and contact confirmations, as well as administrative notifications.

8. International Transfers

We aim to process data within the EU/EEA. If personal data is transferred outside the EU or EEA (for example, by Google or Brevo), the transfer is based, as applicable, on a European Commission adequacy decision or the European Commission's approved Standard Contractual Clauses (SCCs) and any necessary supplementary safeguards. You can request further information about the transfer mechanisms used and a copy of the applicable safeguards at privacy@tallikuntoon.fi.

9. Retention Periods

We keep your data only for as long as necessary:

• Unsubmitted Assessments: The data is stored only in the user's browser's local storage and is deleted when the browser is closed.
• Submitted, Unbooked or Rejected Requests: 6 months after the last contact.
• Completed Services and Bookings: 3 years after completion of the work to handle possible complaints and liabilities.
• Accounting and Invoicing Material (Invoices, Vouchers and Related Correspondence): 6 years from the end of the financial year in accordance with the Finnish Accounting Act.
• Backups and Log Data: 30 days (rolling retention).

10. Security

We protect your data with appropriate technical and organizational measures. Our service uses HTTPS encryption, databases are protected by access controls, and access to personal data is limited to authorized persons according to their work duties.

11. Cookies and Browser Storage

The service's assessment form uses your browser's "sessionStorage" storage (for example, with the key "garagefix.assessment.v4") to retain your selections between form stages. This is technically necessary to provide the assessment service you requested. The data is deleted when you successfully submit the form, close the browser tab, or clear the site's data from your browser. We do not use tracking, analytics, or advertising cookies.

12. Your Rights

Under data protection law, you have the right to:

• Access your personal data.
• Request rectification of incorrect data.
• Request erasure ("right to be forgotten"), unless we have a legal obligation to retain it.
• Restrict or object to processing (particularly where processing is based on legitimate interest).
• Data portability, where the statutory requirements are met.

To exercise your rights, send a request to privacy@tallikuntoon.fi. We generally respond to requests within one month. For security reasons, we need to verify your identity before fulfilling the request.

Right to Complain: If you believe our processing violates data protection laws, you have the right to lodge a complaint with the supervisory authority:
Office of the Data Protection Ombudsman, Finland (https://tietosuoja.fi/en)

13. Changes to this Policy

We reserve the right to update this policy as the service evolves. Material changes will be published on our website.