
Privacy policy.
What personal data we process, what it is used for and what rights you have.
Updated 6 October 2026 · EU General Data Protection Regulation (2016/679)
1. Controller
Rusanen Group Oy (Business ID 2961078-5)
Vaihdekatu 1, 04220 Kerava, Finland
info@rusanengroup.com
2. Contact for data protection matters
For data protection matters you can write to info@rusanengroup.com. We answer requests within one month at the latest.
3. What data we process
We process the following data:
- Enquiry details: name, company, email, phone number, subject and the content of your message, when you fill in the contact form on this site or contact us by email or telephone
- Customer relationship details: contact people, sites, orders and deliveries
- Invoicing details
- Job application details, if you send an open application
We do not process special categories of personal data, and we do not make automated decisions or carry out profiling.
4. What the data is used for and on what basis
Answering enquiries and preparing quotes. The basis is steps taken at the request of the data subject prior to entering into a contract.
Managing the customer relationship, deliveries and invoicing. The basis is a contract.
Bookkeeping and meeting statutory obligations. The basis is a legal obligation.
Recruitment, if you send an application. The basis is consent.
5. Where the data comes from
The data comes from you, when you contact us, send an application or deal with us as a customer. We do not buy contact details from outside parties.
6. Cookies and analytics
We use Google Analytics to see how many visitors the site has, which pages interest them and where they come from. The measurement does not start by itself: it waits until you accept it in the cookie notice at the bottom of the page. If you choose Essential only, no measurement cookie is set and no data is sent to Google.
- What is collected: pages visited, the referring site or search engine, approximate location, browser and device type
- The IP address is shortened before storage and is not used to identify you
- We do not use advertising cookies and we do not pass data on for advertising purposes
- Measurement data is kept in Google Analytics for 14 months
Your choice is stored in your own browser, not with us. You can withdraw your consent by clearing this site’s data in your browser, after which the notice is shown again.
The basis for the measurement is consent. Fonts and the other files on the site are loaded from our own server, so browsing without consent does not send your data to third parties.
7. The map and outside services
The map on the contact page is loaded from OpenStreetMap. It does not load by itself: it opens only when you press Show the map. Only at that point does your IP address go to the OpenStreetMap server to fetch the map tiles. The laundry addresses can be read on the page without opening the map.
The site is published on Netlify. Netlify processes IP addresses and browser data in its server logs in order to deliver the site and keep it secure. The basis is legitimate interest.
Contact form submissions go through Netlify’s form service, which forwards the message to our email and keeps a copy in the Netlify dashboard. The form asks for nothing beyond the details listed above, and it should not be used to send sensitive information.
8. Disclosures and transfers
We do not sell or rent personal data. Data is processed on our behalf by service providers who deliver our website, email, customer relationship management and financial administration. Data processing agreements are in place with them.
Some of the service providers operate outside the EU and the EEA. Those transfers use the standard contractual clauses approved by the European Commission, or an adequacy decision by the Commission.
The list of service providers in use and the countries they operate in will be completed once the systems are confirmed.
9. Retention periods
- Accounting material: the six or ten years required by the Finnish Accounting Act
- Customer relationship data: for the duration of the relationship and the years following it, so that contracts and complaints can be revisited
- Enquiries that do not lead to a customer relationship: two years at most
- Job applications: two years at most from the date of application
The exact retention periods for customer relationship data and enquiries will be confirmed in Rusanen Group’s internal data protection guidance.
10. Data security
The data is protected by access control, and only people whose work requires it can handle it. The connection to the site is encrypted. Systems are logged into with personal credentials.
11. Your rights
You have the right to check the data concerning you, to ask for incorrect data to be rectified, to ask for data to be erased, to object to or restrict processing, to move data from one system to another, and to withdraw consent you have given. Requests go to info@rusanengroup.com. We verify your identity before releasing any data.
If you believe we are processing your data contrary to the GDPR, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
12. Changes
We update this policy when the processing or the systems in use change. The date of the latest update is marked at the top of the page.
