Privacy policy (in Finnish)

1. Data Controller

Sisu Scandi Group Oy Business ID 3553631-5

48400 Kotka, Finland

Email:  info@scandirengas.fi

2. Personal data collected

We collect and process personal data in the following situations:

• when a customer places an order in an online store,
• when a customer contacts you via chat, contact form or footer form,
• when a customer chats with Bitrix24 customer service.

Information collected:

• first name and last name
• delivery and billing address
• telephone number
• e-mail address
• content of messages (if the customer sends voluntarily in chat or via form)
• technical information (IP address, browser type, operating system, time of visit and pages) collected using cookies and analytics tools.

3. Purpose of use of the data

Personal data is processed for the following purposes:

• receiving, processing, confirming payments and delivering orders
• implementing customer service and communication (Bitrix24 chat and forms)
• website development and advertising optimization (Google Analytics, Search Console)
• fulfilling legal obligations (accounting, tax and consumer protection regulations).

4. Disclosure and transfers of information

Information may be disclosed:

• payment services (e.g. banks, card payment intermediaries)
• to transport and logistics partners to deliver orders
• technical service providers (Bitrix24 CRM, web server, Google services).

All partners process data only to the extent necessary to provide the service and comply with EU data protection legislation. Data is not sold or used for third-party marketing.

5. Cookies and analytics

ScandiRengas.fi uses cookies to improve the user experience and monitor the operation of the site. Services in use:

• Google Analytics – tracks visitor numbers, page usage and purchase transactions. IP addresses are anonymized.
• Google Search Console – tracks search results and keywords for website optimization.
• Bitrix24-CRM – records contacts, chat messages, and form responses.

The user can manage cookies in their browser settings. Blocking cookies may limit the functionality of the online store (e.g. shopping cart or login).

6. Retention period

Personal data is retained for as long as necessary:

• order information: in accordance with the Accounting Act, at least 6 years from the end of the financial year
• contacts and chat messages: maximum 12 months, unless the customer relationship continues for longer
• analytics data: stored in Google services for 26 months (anonymized).

7. Information security

Data is processed in secure systems (SSL encryption, firewalls, restricted access rights). Bitrix24 and Google comply with the EU-US Data Privacy Framework and GDPR requirements. Access to personal data is limited to employees who need it to perform their job duties.

8. Rights of the data subject

The customer has the right:

• check information about oneself
• demand the correction or deletion of incorrect information
• restrict data processing
• withdraw consent to marketing
• file a complaint with the Office of the Data Protection Ombudsman ( tietosuoja.fi ).

Requests:  info@scandirengas.fi We will process requests within a month.

9. Changes

This privacy policy may be updated as necessary. The latest version is always available at  scandirengas.fi/tietosuoja . Last updated: 15.10.2025

Privacy Policy (English)

1. Data Controller

Sisu Scandi Group Oy Business ID 3553631-5

48400 Kotka, Finland

Email:  info@scandirengas.fi

2. Personal Data Collected

We collect and process personal information when:

• you place an order on ScandiRengas.fi,

• you contact us via chat, contact form or footer form,
• you interact with our Bitrix24 CRM (live chat, contact requests).

Data collected:

• first and last name
• delivery and billing address
• phone number
• email address
• message content (when voluntarily provided)
• technical data (IP address, browser, device, visit time, pages visited).

3. Purpose of Processing

Your data is used for:

• processing and delivering customer orders
• providing customer support and communication (Bitrix24 CRM chat/forms)
• improving the website and analyzing performance (Google Analytics, Search Console)
• fulfilling legal and accounting obligations.

4. Data Sharing

Personal data may be shared with:

• payment providers (banks, online payment systems)
• shipping partners for order delivery
• technical service providers such as Bitrix24 CRM, Google Analytics, Google Search Console, and hosting providers.

All partners process data only for providing their services and comply with GDPR. No personal data is sold or used for third-party marketing.

5. Cookies and Analytics

ScandiRengas.fi uses cookies to improve user experience and track website performance. Services used:

• Google Analytics – collects visitor statistics, anonymized IP addresses, page usage, conversions.
• Google Search Console – Monitors search visibility and keywords for SEO optimization.
• Bitrix24 CRM – stores chat messages and contact form submissions securely.

You may manage cookies via your browser settings. Disabling cookies may limit website functions (cart, checkout, login).

6. Data Retention

• Orders: retained at least 6 years per Finnish accounting law
• Contact and chat messages: retained up to 12 months unless ongoing service requires longer retention
• Analytics data: retained for 26 months (anonymized).

7. Data Security

All data is transmitted over encrypted SSL connections and stored in secure systems protected by firewalls and access controls. Bitrix24 and Google services comply with the EU-US Data Privacy Framework. Access to data is restricted to authorized personnel only.

8. Your Rights

Under GDPR, you have the right to:

• access your personal data
• request correction or deletion
• restrict processing
• withdraw consent for marketing
• lodge a complaint with the Finnish Data Protection Ombudsman ( https://tietosuoja.fi/en ).

Requests:  info@scandirengas.fi We respond within one month.

9. Updates

This policy may be updated periodically. The latest version is available at  scandirengas.fi/privacy . Last updated: October 15, 2025