Skip to content

Privacy

Privacy notice

This notice explains how we process information received through the website contact form and the feedback and observation form.

Updated 21 September 2026

1. Data controller

Kohmansalon Metsäkuljetus Oy
Business ID: 3579323-1
Savonkatu 30
79100 Leppävirta, Finland
Email: kohmansalo(at)gmail.com

2. Data we process

We may process information provided through the forms, including the person's name, email address, phone number, the subject and content of the message, and the site or location connected with feedback or an observation.

The feedback and observation form can be submitted without a name or contact details. Technical server logs may nevertheless contain information such as an IP address, time and technical browser information.

3. Purposes and legal bases

We use the information to respond to enquiries, manage customer and partner matters, process feedback and development suggestions, investigate safety and environmental observations, and develop our operations.

Processing is based on our legitimate interest in managing enquiries and developing our operations (Article 6(1)(f) of the General Data Protection Regulation). Information connected with a contract or steps taken before entering into a contract may also be processed for the performance of that contract (Article 6(1)(b)). Information required by law is processed to comply with the applicable legal obligation (Article 6(1)(c)).

4. Sources of data

Information is received from the person through the website forms, by email or in another contact. Technical log information is generated when the website is used.

5. Recipients and service providers

Information is processed only by persons at Kohmansalon Metsäkuljetus Oy whose duties include handling the matter. Website hosting and email service providers may process information when providing the technical services. Messages sent through the website are delivered to the Google email service used by the company.

Information is not routinely disclosed to other parties. It may be disclosed to an authority where required by law or necessary for investigating the matter.

6. Transfers outside the EU or EEA

Service providers may also process information outside the European Union or the European Economic Area. Such transfers use safeguards required by applicable data protection law, such as standard contractual clauses approved by the European Commission or an adequacy decision. Further information about the applicable transfer mechanism and safeguards, including a copy of the applicable safeguards, can be requested from the email address given in section 1.

7. Retention periods

  • Ordinary enquiries are deleted no later than 12 months after the matter has ended.
  • Feedback and development suggestions are deleted no later than 24 months after the matter has ended.
  • Safety and environmental observations are deleted no later than 24 months after their handling, unless a longer period is necessary for an investigation, legal claim or legal obligation.
  • Information connected with contracts, accounting or other statutory duties is retained for the period required by law.

8. Whether providing the information is voluntary

Your name, email address and message are necessary for handling an enquiry submitted through the contact form. Providing a phone number is voluntary. If the necessary information is not provided, the contact form cannot be submitted and we cannot respond to the enquiry.

The feedback type and message are necessary for handling feedback or an observation. Providing a location and an email address for a reply is voluntary. We cannot provide a personal response without an email address. Providing personal data is generally not a statutory requirement. Information connected with a contract may, however, be necessary for entering into or performing that contract.

9. Protecting the information

Information is protected with appropriate technical and organisational measures. Access is restricted to persons who need the information for their duties. The website forms use technical safeguards to prevent misuse.

10. Your rights

Depending on the circumstances, you have the right to access your personal data, request correction or deletion, restrict processing and object to processing based on legitimate interests. Where processing is based on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller. The processing is not based on consent.

You can exercise your rights by contacting the email address in section 1. We will respond without undue delay and generally within one month. We may verify your identity before fulfilling a request where necessary.

You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman if you believe your personal data has been processed contrary to data protection law.

11. Cookies and technical logs

The contact page uses an essential session cookie to secure the forms and prevent misuse. The cookie is removed when the session ends. The website does not use analytics, advertising or profiling cookies.

Technical server logs may be processed to maintain the website, protect its security and investigate faults. They are retained only for as long as these purposes require, in accordance with the service provider's practices.

12. Automated decision-making

The information is not used for automated decision-making or profiling.