PRIVACY NOTICE Updated 25 August 2026 1. DATA CONTROLLER Avican Oy Business ID: 2791140-2 Lyhtytie 8 00750 Helsinki Finland Email: andre.loran@avican.fi Telephone: +358 45 122 3770 2. NAME OF THE REGISTER Avican Oy’s website contact and customer register. 3. PURPOSES OF PROCESSING PERSONAL DATA Personal data is processed for the following purposes: - responding to enquiries submitted through the website; - assessing a customer’s situation and service requirements; - preparing proposals and conducting contract negotiations; - establishing, managing and developing customer relationships; - providing Avican Oy’s services; - ensuring the security, functionality and usability of the website; - complying with statutory obligations; - marketing where consent has been provided or where the marketing is based on Avican Oy’s legitimate interests. Depending on the circumstances, the processing of personal data is based on the data subject’s consent, the performance of a contract or steps taken before entering into a contract, the data controller’s legitimate interests or a statutory obligation. 4. PERSONAL DATA PROCESSED Avican Oy may process the following personal data: - name; - email address; - telephone number, if provided; - company name and position within the company; - information provided through the contact form or by other means; - communications relating to enquiries, proposals and customer relationships; - technical information relating to the use of the website, including IP address, browser, device type, operating system, time of visit and cookie information; - other information necessary for providing the service. Health information, personal identity codes or other sensitive personal data should not be submitted through the contact form. 5. SOURCES OF PERSONAL DATA Personal data is primarily obtained directly from the data subject: - through the website’s contact form; - by email or telephone; - during meetings and customer negotiations; - during the customer relationship; - through cookies and other technical functions of the website. 6. RECIPIENTS OF PERSONAL DATA AND SERVICE PROVIDERS Avican Oy may use trusted service providers to process personal data on its behalf and in accordance with its instructions. These may include: - Wix.com, which provides the website, hosting, contact form and related information systems; - Microsoft and other email, cloud and IT service providers; - analytics, information security and cookie service providers; - experts and contractual partners used by Avican Oy where processing is necessary for providing the service. Personal data may be disclosed to public authorities where required by law or a lawful order issued by an authority. Avican Oy does not sell personal data to third parties. 7. TRANSFERS OF PERSONAL DATA OUTSIDE THE EU AND EEA Wix and other service providers used by Avican Oy may process personal data outside the European Union and the European Economic Area. In such cases, personal data is transferred in accordance with applicable data protection legislation. Transfers may be based on an adequacy decision by the European Commission, Standard Contractual Clauses or another approved transfer mechanism. Further information about Wix’s processing of personal data is available in Wix’s Privacy Policy: https://www.wix.com/about/privacy 8. RETENTION OF PERSONAL DATA Information relating to enquiries and requests for proposals is generally retained for no longer than 24 months from the most recent contact. If an enquiry leads to a customer relationship, personal data is retained for the duration of the customer relationship and thereafter for as long as required to fulfil contractual obligations, establish or defend legal claims, or comply with statutory obligations. Marketing information is retained until the data subject withdraws their consent or objects to the use of their personal data for direct marketing. Personal data that is no longer required is securely deleted or anonymised. 9. PROTECTION OF PERSONAL DATA Access to personal data is restricted to persons who require it to perform their duties or provide the relevant service. Personal data is protected using appropriate technical and organisational measures. These may include restricted access rights, personal user accounts, secure connections, service providers’ information security measures and appropriate maintenance of information systems. 10. RIGHTS OF THE DATA SUBJECT Under applicable data protection legislation, the data subject has the right to: - receive information about the processing of their personal data; - access the personal data concerning them; - request the correction of inaccurate or incomplete personal data; - request the deletion of personal data where permitted by law; - request the restriction of processing; - object to processing based on legitimate interests; - object to the use of personal data for direct marketing; - receive the personal data they have provided in a structured and machine-readable format and transfer it to another controller where the right applies; - withdraw their consent at any time. Requests concerning the exercise of these rights should be sent to andre.loran@avican.fi. Avican Oy may request additional information where necessary to verify the requester’s identity. The data subject also has the right to lodge a complaint with the Office of the Data Protection Ombudsman if they believe that their personal data has been processed in violation of applicable data protection legislation: Office of the Data Protection Ombudsman https://tietosuoja.fi 11. AUTOMATED DECISION-MAKING AND PROFILING Avican Oy does not use personal data collected through the website for automated decision-making or profiling that produces legal or similarly significant effects concerning the data subject. 12. COOKIES The website uses cookies that are necessary for its operation. Subject to the visitor’s consent, the website may also use analytics and marketing cookies. Visitors can manage optional cookies through the website’s cookie banner. Blocking cookies may affect the availability or functionality of certain website features. 13. CHANGES TO THIS PRIVACY NOTICE Avican Oy may update this Privacy Notice when its operations, services or applicable legislation change. The current version of the Privacy Notice will be published on this page together with the date of the latest update.