Legal

Privacy policy

Last updated: 1 May 2026

This privacy policy describes how SP Intelligent Systems Oy ("we", "us", "our") collects, uses and protects personal data when you visit our website at spintsys.eu or contact us through it. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Finnish law.

1. Data controller

The data controller for personal data collected through this website is:

SP Intelligent Systems Oy
Helsinki, Finland
Email: info@spintsys.eu
For data-protection enquiries please use the email address above.

2. What personal data we collect

We collect personal data only when you actively provide it, primarily through the contact form on this website. The data collected includes:

Name (required) — to address you in our reply.
Email address (required) — to send our reply.
Phone number (optional) — if you prefer to be contacted by phone.
Message content — the information you choose to share with us.
Technical data — when you submit the form, our server logs the submission timestamp and may temporarily log your IP address for security and abuse-prevention purposes.

We do not use third-party advertising trackers, social-media pixels or analytics tools that profile you across other websites.

3. Purposes and legal bases

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

Responding to your enquiry — based on your consent (Article 6(1)(a)) given when you submit the contact form, and on our legitimate interest in conducting our business (Article 6(1)(f)).
Steps prior to entering a contract — where your enquiry concerns a potential commercial relationship, processing is necessary in order to take steps at your request prior to entering into a contract (Article 6(1)(b)).
Security and abuse prevention — based on our legitimate interest in keeping the website and the contact form free from spam, abuse and unauthorised access.
Compliance with legal obligations — to the extent required by applicable law (Article 6(1)(c)).

4. How long we keep the data

We retain personal data only for as long as necessary for the purpose for which it was collected:

Enquiry messages — kept for up to 24 months after the last interaction, then deleted, unless a longer retention is required by law or by an active contractual relationship.
Server access logs — kept for up to 90 days for security purposes.
Customer-relationship data — if a commercial relationship begins, the relevant data is transferred to our customer-relationship records and retained for the duration of that relationship plus statutory retention periods.

5. Sharing and recipients of personal data

We do not sell or rent personal data. We share personal data only with parties who help us operate the website and respond to your enquiry, on the basis of written agreements that include data-protection terms:

Our hosting provider, located in the European Union, who provides server infrastructure for this website and email delivery.
Our email provider, where outbound replies are processed in transit.
Where required by law, competent authorities (for example in response to a lawful order).

We do not transfer personal data to third countries outside the EU/EEA. If a future change requires such a transfer, we will rely on appropriate safeguards under Articles 44–46 GDPR (such as Standard Contractual Clauses) and update this policy.

6. Cookies

This website uses only the technically necessary local storage entry spsm.lang, which records your chosen interface language so that you do not have to choose it again on every visit. We do not place advertising or analytics cookies. Because no non-essential cookies are used, no consent banner is required.

7. Your rights under GDPR

You have the following rights in relation to your personal data:

Right of access — to obtain confirmation of whether we process your data and a copy of it.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure ("right to be forgotten") — to have your data deleted where the legal grounds for processing no longer apply.
Right to restriction — to limit how we process your data.
Right to data portability — to receive the data you provided in a structured, machine-readable format.
Right to object — to processing based on legitimate interest.
Right to withdraw consent — at any time, without affecting the lawfulness of processing prior to withdrawal.
Right to lodge a complaint — with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi.

To exercise any of these rights, please contact info@spintsys.eu. We will respond within one month, as required by Article 12(3) GDPR.

8. Security

We apply technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include encryption of data in transit (TLS), strict access controls, regular software updates, and the principle of least privilege for staff access to data.

9. Changes to this policy

We may update this privacy policy from time to time, for example to reflect changes in our services, in technology, or in legal requirements. The "Last updated" date at the top of this page reflects the date of the latest revision. Where the changes are material, we will take reasonable steps to inform you in advance.

10. Contact

For any question about this policy or about how your personal data is processed, please contact info@spintsys.eu.