Customer IT security is an important part of our operations and is developed as a continuous process in all areas of our business.

Scope of application

This is the register and data protection policy of Helsinki Valve & Fitting Oy (hereinafter "Swagelok Helsinki") in accordance with Sections 10 and 24 of the Personal Data Act (523/1999) and Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR). Last modified on 3.10.2025.

This Privacy Policy applies exclusively to the following websites operated by Swagelok Helsinki:

• helsinki.swagelok. com

• www.swagelok.fi

• www.swagelok.lt

Limitation of Liability

The above websites provide hyperlinks to Swagelok Company's international online platforms, including swagelok.com and products.swagelok.com. For these external websites, the controller is Swagelok Company, which is responsible for the privacy statements and the processing of personal data on these websites in accordance with its Privacy Policy.

Swagelok Helsinki is not responsible for the privacy practices or the processing of personal data on these external websites.

1. Data Controller

Name: Helsinki Valve & Fitting Oy
Business ID: FI05216695
Address: Koivulehdontie 3 a, 01510 Vantaa
Phone: +358 9 777 1110

2. Contact person responsible for the register

Sami Juntunen, info@swagelok.fi, tel. +358 9 777 1110.

3. Name of the register

Helsinki Valve & Fitting Oy's customer register.

4. Legal basis and purpose of the processing of personal data

The legal basis for the processing of personal data under the EU General Data Protection Regulation is

• the consent of the individual (documented, voluntary, individual, informed and unambiguous )

• a contract to which the data subject is a party

• a legitimate interest of the controller

The purpose of the processing of personal data is to contact customers, maintain customer relations and marketing. We also collect information about the use of our website in order to improve and develop our services. We collect information about visitors to our website so that we can target them with advertising about products, services and offers that may be of interest to them through various communication channels.

5. Targeted marketing and calls

We may process personal data for the purposes of customer profiling, targeting offers, benefits, marketing activities and customer communications that are of interest to the customer. Personal data will also be processed in connection with the sending of newsletters, participation in competitions and prize draws or other marketing activities.

6. Data content of the register

The data stored in the register includes: name, position, company/organisation, contact details (phone number, e-mail address, address), website addresses, IP address of the network connection, social media accounts/profiles, information on ordered services and changes thereto, billing information, other information related to the customer relationship and ordered services. The data is kept for the duration of the customer relationship and for three years thereafter or for the duration of legal obligations.

7. Regular data sources

The information stored in the register is obtained from the customer through, for example, messages sent via online forms, email, telephone, social media services, contracts, customer meetings and other situations where the customer discloses his/her data.

8. Regular disclosures and transfers of data outside the EU or EEA

There is no regular disclosure of data to other parties. Data may be published to the extent agreed with the customer. Data may also be transferred outside the EU or EEA by the controller. Access to personal data will not be granted beyond what is necessary for the provision of the services. Any transfer of personal data outside the European Union or the European Economic Area is always based on and carried out in accordance with the applicable legislation on the processing of personal data.

9. Principles for the protection of the register

Swagelok Helsinki takes technical and administrative measures in accordance with the GDPR to ensure appropriate security of personal data. The safeguards are proportionate to the risks of processing personal data and include, inter alia:

• Access management and access rights limited to the minimum required for the job function

• Encryption and pseudonymisation of personal data where appropriate

• Regular back-up of systems and ensuring data recoverability

• Providing staff with training on data protection and confidentiality

• Installing regular security updates and maintaining systems

For personal data stored on Internet servers, ensuring adequate physical protection of the equipment and appropriate digital security. The processing of personal data and access to systems is limited to those employees whose duties necessarily require it.

10. Rights of the data subject

Right of access to personal data

• The data subject has the right to obtain confirmation of the processing of personal data and access to personal data concerning him or her, and to be informed of the purposes and grounds of the processing.

Right to rectification

• The data subject has the right to request the rectification or integration of inaccurate or incomplete personal data without undue delay.

Right to erasure

• The data subject has the right to request the erasure of personal data ("right to be forgotten"). Requests for erasure will be carried out within the limits set by law and in accordance with the legal obligations of the controller.

Right to object to or restrict processing

• In certain circumstances, the data subject has the right to object to the processing of personal data concerning him or her on grounds relating to his or her particular situation.

• The data subject has the right to request the restriction of the processing of personal data if he or she contests the accuracy of his or her personal data or objects to the processing.

Right to data portability

• The right to receive personal data in a structured form and to transfer them to another controller where the processing is based on consent or a contract.

Right not to be subject to automated decision-making

• The data subject has the right not to be subject to a decision based solely on automated processing which produces legal effects or significantly affects him or her.

Withdrawal of consent

• Where the processing of personal data is based on consent, the data subject may withdraw his or her consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to the withdrawal.

Right to lodge a complaint with a supervisory authority

• The data subject has the right to lodge a complaint with a supervisory authority if he or she considers that the processing of personal data infringes data protection legislation. In Finland, the supervisory authority is the Data Protection Ombudsman(www.tietosuoja.fi). Complaints may also be lodged in the EU Member State where the data subject has his or her habitual residence or place of work.

Exercise of rights Requests concerning the rights of the data subject should be made in writing to: info@swagelok.fi or by post to Helsinki Valve & Fitting Oy, Koivulehdontie 3 A, 01510 Vantaa. The controller will reply to requests within one month and may, if necessary, request proof of identity.

 

11. Cookies

Helsinki.swagelok.com uses different types of cookies to ensure the proper functioning of the website and for statistical purposes such as analysing the use of the website, counting the number of users, improving the website. In addition, we measure the attractiveness of our services and websites. Some cookies on our website are set by third party services, they enable the integration of third party services into our website. Marketing cookies are used to track visitors to our site. The purpose is to display advertisements that are appropriate and of interest to individual users.

User tracking

Hubspot

Our local websites are hosted on the Hubspot marketing platform. HubSpot uses browser-based tracking technologies such as tracking code, cookies, tracking pixels and JavaScript to enhance the user experience and support marketing and analytics.

HubSpot provides privacy tools, such as a cookie banner, that allow visitors to accept or decline tracking. If you do not want to be tracked, you can delete the tracking cookies from your browser, which will prevent HubSpot from continuing to track you.

 

Google Analytics
GoogleAnalytics collects information about visitors. We use this information mainly to track visitor numbers and to find out how visitors have found our website.

Third party websites and links

Our website may contain links to third party websites and platforms. These links may be related to our customer referrals or event marketing, for example. Where we provide links to websites operated by others, we are not responsible for the privacy, security or accuracy of the content on those sites. We recommend that you carefully review the specific terms and policies of each site. Information you share on public or third-party platforms may be visible and accessible to others. The inclusion of links to our service does not imply endorsement of the content or sites unless otherwise stated.

© 2025 Swagelok Helsinki. All rights reserved.