Privacy Policy

1. Data Controller

The data controller is: Paras Aqua Oy
Business ID: FI33757333
Address: Laukaantie 4, 40320 Jyväskylä, FINLAND
Email address: info@parasaqua.fi

2. Name of the Register

This privacy policy applies to the following register: Customer and Register

3. Purpose and Legal Basis for Processing Personal Data

Personal data is processed for purposes such as managing customer relationships, providing services, handling communications, marketing, and invoicing. The legal basis for processing personal data is based on one or more of the following: the performance of a contract, the data subject’s consent, compliance with a legal obligation, or the legitimate interests of the data controller.

4. Data Content of the Register

The register contain personal data such as name, contact details including email address and phone number, company or organization name, IP address, website usage data, and information related to the customer relationship or services used.

5. Sources of Data

Personal data is primarily collected directly from the data subject through forms, website interactions, or other direct communication. Data may also be obtained from public sources where applicable.

6. Disclosure and Transfer of Data

Personal data is not disclosed to third parties unless necessary for service provision or required by law. Data may be shared with trusted service providers such as accounting firms or IT service providers who process data on behalf of the controller. Personal data may be transferred outside the EU or EEA only if appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

9. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes defined in this policy or to comply with legal obligations. Customer data is typically stored for the duration of the customer relationship and for a reasonable period thereafter. Accounting-related data is stored in accordance with applicable laws.

10. Principles of Data Protection

Personal data is protected using appropriate technical and organizational measures. Technical measures may include secure systems, encryption, firewalls, and access control mechanisms. Organizational measures include restricting access to authorized personnel only and providing training on data protection practices.

11. Rights of the Data Subject

The data subject has the right to access their personal data, request correction of inaccurate data, request deletion of their data where applicable, object to processing, request restriction of processing, and request data portability. If processing is based on consent, the data subject has the right to withdraw consent at any time. Requests should be submitted to the contact email provided above.

12. Cookies

The website may use cookies to improve user experience and analyze website traffic. Cookies may include essential, functional, or analytical cookies, such as those used by analytics services. Users can manage cookie preferences through their browser settings.

13. Changes to the Privacy Policy

This privacy policy may be updated from time to time to reflect changes in legal requirements or business practices. The latest version will always be available on the company’s website.

13. Date

Last updated: 10.4.2026