Version 1.0 · Updated 22 May 2026
This Privacy Policy describes how Piikkio Works Oy (hereinafter referred to as the “Controller”) processes personal data on its website. This policy fulfills the information obligations under the EU General Data Protection Regulation (GDPR 2016/679) and the Finnish Data Protection Act (1050/2018).
Piikkio Works Oy | Business ID: 1736847-7 | Address: Kolamäentie 2, 21500 Piikkiö, Finland | Email: hr@piikkioworks.fi | Phone: +358 10 67010 (switch)
Tarja Laiho, tarja.laiho@piikkioworks.fi, tel. +358 40 534 7980
The Controller collects personal data on its website as follows:
The following information is collected through the form:
In connection with unsolicited job applications received by email, the Controller processes information provided by the applicant, which may include:
The website also automatically collects technical data, such as:
Source of data: All personal data is collected directly from the data subject or automatically when the user visits the website. Data is not collected from other sources.
Personal data is processed for the following purposes and based on the following legal grounds under Article 6 of the GDPR:
Legal basis: Legitimate interest of the Controller (GDPR 6 art. 1 f) and preparation and performance of a contract (GDPR 6 art. 1 b) when the inquiry leads to cooperation.
Legal basis: Taking steps at the request of the data subject prior to entering into a contract (GDPR 6 art. 1 b) and the legitimate interest of the Controller in carrying out recruitment processes (GDPR 6 art. 1 f).
Legal basis: Legitimate interest of the Controller (GDPR 6 art. 1 f) in ensuring website functionality, security, and usability. For strictly necessary cookies, processing is based on Section 205 of the Finnish Act on Electronic Communications Services (917/2014).
Legal basis: User consent (GDPR 6 art. 1 a), which is requested through the cookie consent tool before analytics cookies are placed.
Personal data is retained only for as long as necessary to fulfill the purpose of processing or as required by law. After the retention period, the data will be deleted or anonymized.
Personal data is processed on behalf of the Controller by the following parties acting as data processors under the GDPR based on appropriate data processing agreements:
Perjantai Markkinointiviestintä Oy (Finland) is responsible for website hosting and technical maintenance.
Google Ireland Limited / Google LLC (Google Analytics 4) collects information about website usage. Processing is based on user consent (see section 10).
Personal data is not disclosed to third parties for marketing purposes and is not sold. Data may be disclosed to authorities where required by law.
In connection with the use of the website analytics service (Google Analytics 4), personal data may be transferred to the United States.
Transfer mechanism: The transfer is based on the adequacy decision adopted by the European Commission on 10 July 2023 regarding the EU–U.S. Data Privacy Framework. Google LLC is certified under the framework, ensuring an adequate level of data protection as required by the GDPR.
The data subject has the right to receive additional information about the safeguards used by contacting the Controller (see section 1).
The Controller protects personal data through appropriate technical and organizational measures, including:
Under the GDPR, the data subject has the following rights regarding the processing of personal data:
Right of Access (Art. 15) The right to obtain confirmation as to whether personal data concerning the data subject is being processed and to receive a copy of the processed data.
Right to Rectification (Art. 16) The right to request correction of inaccurate or incomplete data.
Right to Erasure (Art. 17) The right to request deletion of personal data when there is no longer a legal basis for processing.
Right to Restriction of Processing (Art. 18) The right to request restriction of processing in certain situations.
Right to Object (Art. 21) The right to object to processing based on legitimate interest.
Right to Data Portability (Art. 20) The right to receive personal data provided by the data subject in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent (Art. 7) Where processing is based on consent, the data subject may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right Not to Be Subject to Automated Decision-Making (Art. 22) The Controller does not make automated decisions or carry out profiling based on personal data that would produce legal or similarly significant effects on the data subject.
Requests concerning the exercise of these rights shall be addressed to the Controller using the contact details provided in section 1. Requests will be answered within one month.
Right to Lodge a Complaint with a Supervisory Authority The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if they believe that the processing of personal data violates their rights.
Office of the Data Protection Commissioner
Postal address: P.O. Box 800, FI-00531 Helsinki, Finland
Visiting address: Lintulahdenkuja 4, FI-00530 Helsinki, Finland
Telephone (switch): +358 29 566 6700
Email: tietosuoja@om.fi
Website: https://tietosuoja.fi
Submitting the contact form and open job applications and providing personal data is voluntary. Mandatory fields are marked on the form. If mandatory information is not provided, the Controller may not be able to process the inquiry or job application.
The website uses cookies to ensure website functionality, improve user experience, and analyze visitor numbers and website usage.
Cookies are categorized according to their purpose as follows:
The website uses the Cookiebot cookie management tool, which allows users to provide, manage, and withdraw their cookie consent. Consent can be changed at any time through the website’s cookie settings.
Users may also block the use of cookies through their browser settings. However, this may impair website functionality.
The Controller may update this Privacy Policy, for example due to changes in legislation or services. The latest version is available on the website. Material changes will be communicated separately where necessary.