Privacy Policy

Last updated: 31 August 2026

This Privacy Policy explains how Eltrea Group Oy (“Eltrea”, “we”, “our”, or “us”) collects, uses and protects personal data when you visit our website at www.eltrea.fi, contact us, or otherwise interact with us.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

1. Data Controller

Eltrea Group Oy
Business ID: 3417295-1

Ruosilantie 14
00390 Helsinki
Finland

Website: https://www.eltrea.fi

Privacy enquiries: info@eltrea.fi

2. Personal Data We Collect

The personal data we process depends on how you interact with us. We may collect the following categories of personal data:

Information you provide

  • Name
  • Email address
  • Telephone number
  • Company name
  • Information included in your enquiries or contact requests
  • Any other information you voluntarily provide to us

Recruitment information

If you apply for a position with Eltrea, we may process:

  • Contact details
  • CV or résumé
  • Cover letter
  • Employment history
  • Education and qualifications
  • References and other information you choose to provide during the recruitment process

Technical information

When you use our website, we may automatically collect technical information such as:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Website usage data
  • Cookie identifiers and similar technologies

3. Why We Process Personal Data

We process personal data for one or more of the following purposes:

  • Responding to enquiries and contact requests
  • Managing customer and business relationships
  • Preparing quotations and providing our services
  • Managing recruitment processes and evaluating job applications
  • Maintaining, securing and improving our website and services
  • Analysing website performance and user experience
  • Sending communications where permitted by law
  • Complying with legal and regulatory obligations
  • Establishing, exercising or defending legal claims where necessary

4. Legal Basis for Processing

We process personal data only where we have a lawful basis under the GDPR.

Depending on the circumstances, processing is based on one or more of the following legal grounds:

  • Consent, for example where required for non-essential cookies or where you have expressly agreed to receive marketing communications.
  • Performance of a contract or taking steps prior to entering into a contract, such as responding to requests for quotations or providing our services.
  • Legitimate interests, including managing customer relationships, responding to enquiries, improving our services, maintaining website security, and conducting normal business operations.
  • Compliance with legal obligations, where processing is required by applicable legislation or regulatory requirements.

For recruitment activities, personal data is processed to assess applications and carry out recruitment procedures, primarily on the basis of taking steps prior to entering into an employment relationship and Eltrea’s legitimate interests.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations. GDPR requires personal data to be kept no longer than necessary for the purposes for which it was collected.

Retention periods may vary depending on the type of data and the purpose of processing.

As a general principle:

  • Contact enquiries are retained for as long as necessary to respond to your request and manage any related customer or business relationship.
  • Recruitment data is retained for the duration of the recruitment process and thereafter only for as long as necessary to comply with legal obligations, resolve disputes, or establish, exercise or defend legal claims.
  • Technical and analytics data is retained in accordance with the retention periods applicable to the relevant service or technology.
  • Personal data is securely deleted or anonymised when it is no longer required.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure the website functions properly, improve the user experience, analyse website traffic, and, where applicable, support marketing activities.

Cookies are small text files stored on your device when you visit our website.

We use:

  • Strictly necessary cookies, which are required for the operation and security of the website.
  • Analytics cookies, which help us understand how visitors use our website so that we can improve its performance.
  • Marketing cookies, where applicable, to provide more relevant communications and advertisements.

Where required by applicable law, non-essential cookies are used only with your consent. You can accept, reject, or change your cookie preferences at any time through our cookie management tool.

For more information about the cookies used on our website, please refer to our Cookie Settings.

7. Sharing Personal Data

We do not sell your personal data.

We may share personal data with carefully selected third parties where necessary for our business operations, including:

  • IT service providers
  • Website hosting providers
  • Cloud service providers
  • Recruitment platforms and service providers
  • Analytics providers
  • Professional advisers, such as legal, accounting or audit firms
  • Public authorities where disclosure is required by law

All third parties processing personal data on our behalf are required to process the data only in accordance with our instructions and applicable data protection legislation.

International Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with the GDPR. These safeguards may include:

  • the European Commission’s Standard Contractual Clauses (SCCs),
  • an adequacy decision issued by the European Commission, or
  • another lawful transfer mechanism recognised under the GDPR.

8. Your Rights

Under the GDPR, you have a number of rights regarding your personal data.

Subject to applicable law, you have the right to:

  • request access to your personal data;
  • request the correction of inaccurate or incomplete personal data;
  • request the deletion of your personal data (“right to be forgotten”);
  • request the restriction of processing;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time where processing is based on consent;
  • request the transfer of your personal data to another controller where applicable (data portability); and
  • lodge a complaint with the competent supervisory authority.

If you wish to exercise any of your rights, please contact us using the details provided at the end of this Privacy Policy.

If you believe that your personal data has been processed in violation of applicable data protection laws, you also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland or with the supervisory authority in your country of residence.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. These measures are designed to ensure a level of security appropriate to the risks associated with the processing of personal data.

Our security measures include, where appropriate:

  • restricting access to personal data on a need-to-know basis;
  • using secure IT systems, networks and communication channels;
  • protecting data through appropriate technical safeguards;
  • requiring our employees and service providers to maintain the confidentiality of personal data; and
  • regularly reviewing our security practices and procedures.

Although we take appropriate steps to safeguard personal data, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, our services, applicable legislation, or regulatory requirements.

The latest version of this Privacy Policy will always be available on our website. We encourage you to review it periodically to stay informed about how we process personal data.

The “Last updated” date at the top of this Privacy Policy indicates when it was most recently revised.

11. Contact Us

If you have any questions about this Privacy Policy or the way we process your personal data, or if you wish to exercise your rights under applicable data protection legislation, please contact us:

Eltrea Group Oy
Ruosilantie 14
00390 Helsinki
Finland

Email: info@eltrea.fi

If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).