Privacy Policy

This privacy policy was last updated on 25 August 2026 and applies to citizens and lawful residents of the European Economic Area and Switzerland.

In this privacy policy we explain what we do with the data we receive from you via https://hiil.fi. We recommend that you read this statement carefully. Our processing complies with data protection law. This means, among other things, that we:

  • clearly state the purposes for which we process personal data (through this privacy policy);
  • aim to limit the collection of personal data to what is necessary for lawful purposes;
  • ask for your explicit consent where required before processing your data;
  • take appropriate security measures to protect your data and require the same from processors;
  • respect your right to access, correct or delete your data on request.

If you have questions or want to know exactly what data we process about you, please contact us.

1. Purpose, data collected and retention

We collect or receive personal data for the following purposes related to our business:

  • Contact form: name, email, phone number and message. Purpose: to respond to your enquiries. Data is not stored permanently on our servers; it is sent by email to Hiil recipients. Email correspondence is retained for the duration of the communication.
  • Sample box order form: name, company, email, phone, postal address (street, postal code, city, country) and message. Purpose: to process and deliver sample box orders. Data is not stored permanently on our servers; it is sent by email. Email correspondence is retained for processing the order and any follow-up contact.
  • Event forms (meeting request and ticket request): name, company, email and, depending on the form, phone, preferred date, number of tickets and project description. Purpose: to arrange a meeting at an event or to provide tickets. Data is sent by email to Hiil and may be stored in the CRM.
  • Webinar registration: first name, last name, email and optionally organisation, role and advance questions. Purpose: to process registration and send confirmation and join instructions (Google Meet) by email. Registrations are stored in Hiil’s CRM webinar section. You are added to the newsletter only if you give separate consent on the form.

Form data is processed via email. We use the Resend service to send emails (as a processor); Resend processes data only for the purpose of transmitting the message.

To protect forms against abuse and bot traffic, we use Cloudflare Turnstile (Cloudflare, Inc.). Turnstile may process technical data (such as IP address and browser information) to detect bots. This data is not used for marketing. Cloudflare acts as a processor for this purpose.

Customer and lead register (CRM). Data submitted via forms may be stored in Hiil’s own customer and lead register (CRM) to handle your request, manage the customer relationship, and follow up on sales and orders. We retain the data for as long as needed for that purpose or to meet legal obligations. The controller is Hiil Oy.

Mailing list and marketing. We may send news or marketing messages only if you have given a separate, voluntary consent (e.g. an optional form checkbox). You may withdraw consent at any time; instructions are included in the messages, or you can contact us using the details below.

2. Cookies

Our site does not use analytics or marketing cookies. The site may use only strictly necessary technical cookies to ensure functionality (e.g. language preference); these do not collect personal data. For more information see our cookie policy.

3. Visitor analytics

We collect anonymous usage statistics to improve the service. We do not use cookies nor store data that could identify individual users. The analytics tool is provided by Vercel Inc.; data is processed anonymously.

4. Disclosure

We may disclose personal data when required by law or court order, in response to a law enforcement request, or as otherwise permitted by law (e.g. matters of public security).

If our website or organisation is acquired, sold or involved in a merger or business transfer, your data may be disclosed to our advisers, potential buyers and the new owners.

5. Security

We are committed to the security of personal data. We take appropriate measures to limit misuse and unauthorised access, ensure that only necessary persons have access, and review our security measures regularly.

6. Third-party websites

This privacy policy does not apply to third-party websites linked from our site. We cannot guarantee that those third parties process your personal data in a reliable or secure manner. We recommend reading their privacy policies before use.

7. Changes to this policy

We reserve the right to change this privacy policy. We recommend that you review it periodically. We will inform you of changes where reasonably possible.

8. Your rights regarding your data

If you want to know what personal data we hold about you or to exercise your rights, please contact us using the details below. You have, among others, the following rights:

  • Right to be informed why your data is needed, what happens to it and how long it is kept.
  • Right of access: to obtain access to your data.
  • Right to rectification: to have your data completed, corrected or erased.
  • Where processing is based on consent, you have the right to withdraw consent and to request erasure of your data.
  • Right to data portability: to receive your personal data and have it transferred to another controller.
  • Right to object: you may object to processing of your data; we will comply unless we have compelling legitimate grounds.

Please identify yourself clearly so that we do not modify or delete the wrong person’s data.

9. Complaints

If you are not satisfied with how we process your personal data, you have the right to lodge a complaint with a supervisory authority (in Finland: Office of the Data Protection Ombudsman).

10. Contact

Hiil Oy
Huoltotie 3
80790 Kontiolahti
Finland

Website: https://hiil.fi
Email: joona.kotilainen@hiil.fi
Phone: +358 50 569 0586