Updated 2.10.2026
In this statement, we explain what personal data Pensla Oy collects, for what purposes it is used, and what rights you have. This statement applies to the website pensla.fi, quote requests, Facebook and Instagram contact forms, and our customer relationships.
1. Controller
Pensla Oy (Business ID 3513025-1)
Topeliuksenkatu 41a, 00250 Helsinki
2. Contact person in data protection matters
Nuutti Paloranta
nuutti.paloranta@pensla.fi
040 483 4142
3. What information do we collect
- Contact information: name, phone number, email address.
- Information about the destination: address and postal code, the desired service, message, and the photos you sent from the location.
- Account details: offers, contracts, work execution, invoicing and information related to the warranty.
- Technical details: IP address, browser and device information, visits to the site, how the site is used (e.g., clicks and scrolling), and ad display and click data. These are collected using cookies only with your consent, except for cookies necessary for the site's operation.
4. Where the information is obtained
We receive information from you: from website forms, price calculators, Facebook and Instagram contact forms, and by phone, email, or in person. Technical information is collected through cookies when you use the site.
5. Purposes of use and grounds for processing
- Processing of requests for quotations, feasibility study and preparation of the offer – pre-contractual measures at your request.
- Implementation, billing, and warranty of the project – implementation of the agreement.
- Accounting and other statutory obligations – a statutory obligation.
- Contacting customers and developing the service – legitimate interest. You can object to this at any time.
- Website visitor tracking, improving usability, and targeting and measuring advertising – consent that you give in the cookie banner.
- Website security – legitimate interest.
We do not make decisions regarding you automatically.
6. To whom the information is disclosed
We do not sell your information. We use the following service providers who process data on our behalf and in accordance with our instructions:
- Zoner Oy – the website’s server (Finland).
- Google – email, spreadsheets (Google Workspace) and visitor tracking (Google Analytics).
- Easoft – management of customer relationships and tenders.
- Mailjet – relaying emails sent by the site.
- Meta Platforms Ireland – Contact forms on Facebook and Instagram, as well as ad measurement (Meta pixel).
- Microsoft – analysis of site usage (Microsoft Clarity: heat maps and session recordings). Text entered in the form field is hidden from the recordings.
- Groweo – website marketing tools.
- CookieYes – control of consent forms.
We may also disclose information to authorities if the law requires it.
7. Transfer of data outside the EU
Some service providers (Google, Meta and Microsoft) may also process data in the United States. Transfers are based on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
8. How long the data is stored
- Requests for quotations that do not result in a sale: 2 years since the last contact.
- Account details: During the warranty period and for 3 years thereafter, for the event of possible claims.
- Accounting data: According to the accounting act, 6–10 years.
- Cookie information: The cookie's validity period is up to 2 years. You can delete the cookies at any time in your browser settings.
9. Cookies
The website uses essential cookies as well as, with your consent, analytics and marketing cookies. You can change your preferences at any time: Cookie settings.
10. Your rights
You have the right to:
- check what information about you has been stored
- require the rectification of incorrect data
- require the deletion of the data unless the law requires that it be retained
- limits or opposes the processing of data
- obtain the information you provide in a machine-readable format
- revoke the consent you have given
Send your request to the contact person mentioned above. We will respond within one month at the latest. If you believe that your data is being processed unlawfully, you can file a complaint with the Data Protection Commissioner (tietosuoja.fi).
11. Information security
Only those Pensla employees who need the information for their work process process it. The systems are protected with user IDs and passwords, and the site connection is encrypted (HTTPS).
12. Changes
We will update the description when our operations or legislation change. The current version is always on this page.