1. Data Controller Identification

Vaultbundletempone Systems Oy ("Vaultbundletempone", "we", "us", or "our"), registered under Finnish Business ID FI-84920412, with primary registered offices at Mannerheimintie 18 B, 00100 Helsinki, Finland, acts as the primary Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and national data protection statutes.

This Privacy Policy explains how we collect, process, retain, and protect personal data when you access our technical guides, utilize our comparison indexes, or communicate directly with our engineering personnel.

2. Categories of Information Collected

We practice strict data minimization. Depending on your interaction with this platform, we may process:

  • Automated Server Log Data: When querying web resources, your browser transmits fundamental connection parameters, including client IP address (anonymized at the subnet boundary), user-agent string, HTTP referrer, timestamps, and accessed page requests.
  • Direct Communication Records: When you submit messages via our technical contact form, we collect your submitted name, email address, classification subject, and message text.
  • Local Preference Indicators: Minimal browser storage keys (such as consent selection flags stored in localStorage) to prevent persistent cookie banner re-appearance.

3. Legal Bases for Processing (GDPR Art. 6)

We process personal data strictly under lawful, codified grounds:

  • Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, mitigate Distributed Denial of Service (DDoS) attempts, and debug technical routing anomalies.
  • Consent (Art. 6(1)(a)): For non-essential analytics or when you explicitly request a direct response via our contact forms.
  • Legal Obligation (Art. 6(1)(c)): Where Finnish or European regulatory bodies mandate the retention of accounting, audit, or statutory compliance documentation.

4. Third-Party Sub-Processors & Data Transfers

Vaultbundletempone does not sell, lease, or monetize user data. Certain infrastructure components rely on vetted European data processors:

  • Cloud Hosting & Edge CDN Providers: Data centers located strictly within the European Economic Area (EEA) executing reverse proxy caching and DDoS mitigation.
  • Transactional Email Relays: Certified European mail transfer infrastructure facilitating form submission dispatch under strict Data Processing Agreements (DPAs).

If processing requires transmission outside the EEA, we mandate Standard Contractual Clauses (SCCs) approved by the European Commission, coupled with supplemental technical encryption safeguards.

5. Data Retention Protocols

We retain collected records only for the duration required to achieve their legitimate operational intent:

  • Raw server log streams are purged on a rolling 30-day retention cycle.
  • Inquiry communications sent via our contact endpoint are retained for a maximum of 24 months to address ongoing compliance or editorial follow-up, after which they are irreversibly erased.
  • Local browser consent preferences expire or remain until cleared locally by the end-user.

6. Data Subject Rights (GDPR & CCPA/CPRA)

Natural persons residing within the EU/EEA and qualified jurisdictions retain specific statutory protections regarding their personal records:

  • Right of Access (Art. 15): You may request formal confirmation of whether personal data concerning you is processed, alongside a structured copy.
  • Right to Rectification (Art. 16): You may demand correction of erroneous or outdated records.
  • Right to Erasure / "To Be Forgotten" (Art. 17): You may request permanent deletion of your records where legitimate processing grounds no longer apply.
  • Right to Restriction & Objection (Arts. 18 & 21): You retain the prerogative to limit or object to processing founded upon legitimate interests.
  • Right to Data Portability (Art. 20): You may request your submitted data in an accessible, machine-readable format.

7. Data Protection Officer & Supervisory Authority

To exercise your statutory privacy rights, submit a formal request to our Data Protection Officer at [email protected] with the subject header "GDPR Rights Request". We fulfill verified requests within thirty (30) calendar days without fee.

If you consider our processing non-compliant with European data protection law, you have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, Lintulahdenkuja 4, 00530 Helsinki, Finland, tietosuoja.fi) or your local national supervisory authority.