Privacy Policy

1. Introduction

Welcome to MainosAalto. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, disclose, and safeguard your information.

2. Data Controller

MainosAalto
Contact: info@mainosaalto.com

3. Definitions

• Personal Data: any information relating to an identified or identifiable individual.
• Processing: any operation performed on personal data (e.g., collection, storage, use).
• Data Subject: individual whose personal data is processed.

4. Data We Collect

• Name, postal address, email address, phone number
• Company name or subject of advertising
• Ad text, design preferences, selected distribution areas
• Cookies and usage data (IP address, browser type, access times)

5. Purpose and Legal Basis

We process personal data for the following purposes:

• Order management and fulfillment (contract performance, GDPR Art.6(1)(b))
• Billing and accounting (legal obligation, GDPR Art.6(1)(c))
• Customer support and inquiries (legitimate interest, GDPR Art.6(1)(f))
• Website functionality and analytics (consent for cookies, GDPR Art.6(1)(a))

6. Cookies and Tracking

We use necessary cookies to ensure website functionality. We also use analytics cookies to improve user experience:

• Essential cookies: required for basic site operations.
• Analytics cookies: Google Analytics for usage data (you may opt out via banner).

7. Data Sharing

Your data may be shared with:

• Accounting service provider for invoicing
• Postal distribution partner for ad delivery
• IT service provider (hosting, backups)

We do not transfer data outside the EU/EEA without ensuring adequate safeguards (e.g., Standard Contractual Clauses).

8. Data Retention

We retain personal data as follows:

• Order and billing data: 10 years (accounting records requirement)
• Website analytics: 24 months
• Marketing consents: until withdrawal

9. Security Measures

We implement technical and organizational measures to protect personal data, including:

• Encrypted HTTPS connections
• Access controls and role-based permissions
• Regular data backups and secure storage

10. Your Rights

As a data subject, you have the right to:

• Access and receive a copy of your data
• Request correction of inaccurate data
• Request deletion or restriction of processing
• Object to processing based on legitimate interests
• Data portability
• Lodge a complaint with a supervisory authority

11. Consent and Withdrawal

You may withdraw consent (e.g., cookie consent) at any time via our website settings or by contacting us.

12. Changes to This Policy

We may update this policy. We will notify significant changes on our website and by email if appropriate. Minor updates take effect immediately.