Legal
Privacy policy
This policy explains how personal data is processed when you use this website or contact us. Last updated 28 October 2026.
1. Controller
CD-Yhtiöt Oy, Business ID 0410329-3, c/o Opus 2, Hitsaajankatu 22, 00810 Helsinki, Finland. Phone +358 20 4746 947, email info@cd-yhtioet.com. Questions about this policy or your data can be sent to the same email address.
2. Personal data we process
- Enquiries: name, email address, phone number (optional) and the content of your message, when you use the contact form or contact us by email or phone.
- Technical data: IP address, browser type and request time, recorded in server logs by our hosting provider to deliver the site and keep it secure.
- Cookie choice: your consent choice, stored in your own browser.
- Advertising measurement (only with consent): cookie identifiers and information about visits and actions on the site after you arrive from a Microsoft Advertising ad.
We do not ask for special categories of personal data through the website. Please do not send personal identity codes or detailed financial information through the form; we will agree a secure way to exchange such material if you become a client.
3. Purposes and legal bases
- Replying to enquiries and preparing a proposal – steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)). You also confirm your consent in the form.
- Operating and securing the website – legitimate interest (Art. 6(1)(f)).
- Storing your cookie choice – legal obligation to obtain and record consent (Art. 6(1)(c)) and legitimate interest.
- Measuring advertising campaigns with Microsoft Advertising – your consent (Art. 6(1)(a)). You can withdraw it at any time through the "Cookie settings" link in the footer.
4. Retention
- Enquiries that do not lead to a client relationship are deleted no later than 24 months after the last contact.
- If you become a client, your data is kept for the duration of the agreement and afterwards for as long as required by law, including the retention periods of the Finnish Accounting Act.
- Server logs are kept by the hosting provider for a limited period, normally no more than 90 days.
- Your cookie choice is stored in your browser for 12 months. Advertising cookie lifetimes are listed in the Cookie policy.
5. Recipients and processors
We do not sell personal data. Data may be processed on our behalf by the following categories of service providers, under data processing agreements:
- website hosting provider;
- email and office software provider;
- form handling service that delivers contact form messages to us.
Microsoft: if you consent to advertising cookies, Microsoft Corporation and Microsoft Ireland Operations Limited receive data about your visit through the Microsoft Advertising Universal Event Tracking (UET) tag. Microsoft uses this data to measure ad performance and, in accordance with its own privacy statement, may act as an independent controller. See the Microsoft Privacy Statement at privacy.microsoft.com.
6. Transfers outside the EU/EEA
Advertising data processed by Microsoft may be transferred to the United States. Microsoft is certified under the EU-US Data Privacy Framework, and transfers are based on the European Commission's adequacy decision for that framework, supplemented where relevant by Standard Contractual Clauses. If another service provider transfers data outside the EU/EEA, we make sure an appropriate safeguard under Chapter V of the GDPR is in place.
7. Your rights
You have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Send requests to info@cd-yhtioet.com.
8. Supervisory authority
You have the right to lodge a complaint with the Finnish supervisory authority: the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.
9. Security
The website is served over an encrypted connection (HTTPS), and access to enquiries is limited to people who need it to handle your request.
10. Changes
We may update this policy when our practices or the law change. The date at the top of the page shows when it was last updated.