1. Identity of the Data Controller
The entity responsible for processing personal data collected via this website and through our dispatch communications is:
Gridsbrowselb Oy
Business Identity Code (Y-tunnus): FI-3289190-4
Registered Office: Mannerheimintie 142 B, 00270 Helsinki, Finland
Official Contact Email: [email protected]
Data Protection Officer: [email protected]
2. Categories of Personal Data We Collect
In providing emergency plumbing, LVI diagnostics, and heating substation repairs, we collect and process the following categories of data:
- Direct Identification Data: Full name, telephone number, physical residential or commercial service address, apartment number, entry door access codes, and email address.
- Technical Property Data: Building blueprint diagrams, piping schematics, pipe material specifications, CCTV video recordings of private wastewater stacks, and photographs of heating substations.
- Financial & Billing Information: Bank account numbers for direct debit, Finnish personal identity codes (henkilötunnus) strictly when required for filing Kotitalousvähennys (Household Expense Tax Deductions) with the Finnish Tax Administration (Verohallinto), and company invoicing references (Verkkolaskuosoite).
- Digital Telemetry & Technical Identifiers: IP address, browser user-agent string, operating system version, referral headers, session timestamps, and interaction logs with our dispatch simulator.
3. Lawful Legal Bases for Processing (GDPR Article 6)
We process personal data strictly under valid legal grounds as specified by the GDPR:
- Performance of a Contract (Art. 6(1)(b)): Necessary to dispatch technical squads to your premises, execute plumbing interventions, and bill for services rendered.
- Compliance with Legal Obligations (Art. 6(1)(c)): Mandatory accounting retention under the Finnish Accounting Act (Kirjanpitolaki 1336/1997) and reporting to tax authorities.
- Legitimate Interests (Art. 6(1)(f)): Protecting our digital infrastructure from malicious attacks, preventing fraud, and optimizing regional dispatch logistics.
- Explicit Consent (Art. 6(1)(a)): For non-essential analytical cookies and direct marketing communications, which can be withdrawn at any time.
4. Data Retention & Erasure Periods
Personal data is not stored longer than necessary for the fulfillment of the specific processing purpose:
- Dispatch Contact Logs: Retained for 90 days following completion of emergency intervention to address warranty callbacks, after which records are anonymized.
- CCTV Pipe Inspection Video Archives: Retained for 3 years in encrypted cloud storage to assist property managers and insurance adjusters with structural defect claims.
- Accounting & Invoicing Ledgers: Maintained for 6 to 10 years in strict compliance with Chapter 2, Section 10 of the Finnish Accounting Act.
5. Third-Party Processors & International Transfers
Gridsbrowselb does not sell, lease, or monetize personal data to third-party data brokers. We engage carefully audited data processors under binding Data Processing Agreements (DPAs compliant with GDPR Art. 28), including:
- Finnish and EU-based secure cloud hosting providers (e.g., Hetzner Online GmbH, UpCloud Oy).
- Telecommunication SMS dispatch gateways for notifying on-duty technicians.
- Electronic invoicing operators adhering to Finvoice standards.
All data is maintained within the European Economic Area (EEA). If any incidental routing occurs outside the EEA, standard contractual clauses (SCCs) approved by the European Commission are strictly implemented.
6. Your Statutory Rights Under GDPR
As a data subject located in Finland or the European Union, you maintain the following enforceable rights:
- Right of Access (Art. 15): Request a copy of all personal data held about you in a structured, machine-readable format.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete property or billing data.
- Right to Erasure / 'Right to be Forgotten' (Art. 17): Request deletion of data no longer required for contractual or legal compliance.
- Right to Restriction of Processing (Art. 18): Suspend active processing during dispute resolution.
- Right to Data Portability (Art. 20): Transmit your diagnostic files to another service provider.
- Right to Lodge a Complaint: If you believe your data has been handled unlawfully, you have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, Lintulahdenkuja 4, 00530 Helsinki, www.tietosuoja.fi).
7. Contact the Data Protection Officer
To exercise any of your statutory rights, submit a signed written request accompanied by verification of identity to:
Data Protection Officer
Gridsbrowselb Oy
Mannerheimintie 142 B, 00270 Helsinki, Finland
Email: [email protected]