Privacy notice
How Comtec Labs Oy processes personal data on this website, in quote requests and in customer and supplier relationships – the information required by articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
1. Controller
Comtec Labs Oy, Business ID 3261372-5
Muottitie 1, 65320 Vaasa, Finland
info@comteclabs.com · +358 50 073 8528
2. Contact in privacy matters
Send questions and requests about your personal data to info@comteclabs.com with the subject Privacy, or by post to the address above. We answer without undue delay and at the latest within one month, as the GDPR requires. We may ask you to confirm your identity before we disclose or change data.
3. Purposes, data and legal bases
| Purpose | Personal data | Legal basis (GDPR) |
|---|---|---|
| Answering quote and contact requests sent through the website form, including the files you upload | Name, email, phone, company, country, preferred language, your message and project details, and the uploaded files (for example Gerber, BOM and drawings, which may contain names) | Steps taken at your request before entering into a contract (art. 6(1)(b)) and our legitimate interest in answering business enquiries (art. 6(1)(f)) |
| Managing customer relationships: quotes, orders, deliveries, invoicing, warranty and repairs | Names, titles and contact details of the customer's contact persons, order and delivery data, invoicing data and correspondence | Performance of a contract (art. 6(1)(b)), our legal obligations such as accounting (art. 6(1)(c)) and our legitimate interest in maintaining the business relationship with the customer company (art. 6(1)(f)) |
| Managing supplier and partner relationships | Names and contact details of the supplier's contact persons, orders and correspondence | Performance of a contract (art. 6(1)(b)), accounting obligations (art. 6(1)(c)) and our legitimate interest (art. 6(1)(f)) |
| Website analytics with Google Analytics 4, to understand how the site is used | Pseudonymous cookie identifiers, pages viewed and events, approximate location derived from the IP address (country or city level), device, browser and referring page | Your consent (art. 6(1)(a)) – only if you choose Allow analytics. Without consent Google consent mode keeps analytics storage denied. |
| Remembering your cookie choice and language | Your cookie choice (allowed or declined) and the language you chose, stored in your own browser | Strictly necessary to provide the service you asked for and to respect your choice (art. 6(1)(f) and the Finnish Act on Electronic Communications Services, section 205) |
| Operating the website and the quote service securely | Technical log data: IP address, time, requested address, browser and error information | Our legitimate interest in information security and in preventing misuse (art. 6(1)(f)) |
Giving your contact details in a quote request is voluntary, but without them we cannot answer. We do not use personal data for advertising, we do not sell it, and we make no decisions based solely on automated processing that would have legal or similarly significant effects on you. The automatic file check in the quote form checks your circuit-board files, not you.
4. Where the data comes from
Mainly from you: through the quote form, by email, by phone and in meetings. Data about contact persons may also come from your employer or colleagues, and company data from public sources such as the Finnish Trade Register. Analytics data is collected from your browser only with your consent.
5. Recipients and processors
- Our own business system. The website, the quote form and the files you upload, and our customer, order and supplier records are kept in our own business system; access is limited to the Comtec Labs staff who need the data in their work.
- Email service provider. Messages you send to us and our replies pass through and are stored by our email service provider, which acts as our processor.
- Google (Google Ireland Limited and Google LLC). Only if you allow analytics: Google Analytics 4 processes the analytics data listed above. Google LLC is certified under the EU–US Data Privacy Framework, which covers transfers of the data to the United States.
- Partners needed for your order – bare-board fabricators, component distributors and carriers – receive only the data the order requires, typically the manufacturing files and a delivery contact.
- Authorities and auditors when the law requires it, for example the tax authorities and our accounting firm and auditor.
Apart from Google Analytics with your consent, we do not transfer personal data outside the EU and the EEA. If a partner outside the EEA is needed for your order, for example a bare-board fabricator, it receives the manufacturing files – personal data only if it is unavoidable, and then with appropriate safeguards such as the European Commission standard contractual clauses.
6. How long we keep the data
- Quote and contact requests that do not lead to an order, including the uploaded files: 24 months from the last contact, after which they are deleted.
- Customer and supplier records: for the duration of the business relationship, and accounting material after that as the Finnish Accounting Act requires – 6 years for vouchers and correspondence and 10 years for the books and financial statements.
- Website analytics data in Google Analytics: 14 months.
- Your cookie choice and language: in your own browser until you clear them or change the choice.
- Technical log data: only as long as needed for information security, after which it is deleted.
7. Your rights
- Access – to know whether we process your data and to get a copy of it.
- Rectification of inaccurate or incomplete data.
- Erasure of data we no longer need or may no longer keep – unless the law, for example the Accounting Act, requires us to keep it.
- Restriction of processing, for example while the accuracy of the data is being checked.
- Objection to processing based on our legitimate interest, on grounds relating to your particular situation.
- Data portability – to receive data you gave us under a contract or consent in a machine-readable format.
- Withdrawing consent at any time, without affecting processing before the withdrawal – for analytics with the Change cookie choice button below.
- Lodging a complaint with the supervisory authority, the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi), if you consider that we process your data unlawfully. tietosuoja.fi
8. How the data is protected
The website and the quote form use encrypted connections (HTTPS). Access to customer data and uploaded files requires personal user accounts and is limited to the people who need it in their work. Customer design files are treated as confidential, as our delivery terms state. Terms of use
Cookies and analytics
This website uses Google Analytics to understand how the site is used. Analytics cookies are set only if you choose Allow analytics in the small notice at the bottom of the page; until then Google consent mode keeps analytics and advertising storage denied and no analytics cookies are stored. The site uses no advertising cookies.
| Name | Purpose | When and how long |
|---|---|---|
| comtec_consent | Your cookie choice (local storage in your browser, not a cookie sent to us) | Always necessary; kept until you clear it or change the choice |
| ph_lang | Remembers the language you chose with the FI / EN / SV switch; contains only the language code | Necessary for the function you used; set only when you switch language |
| _ga, _ga_<ID> | Google Analytics 4: distinguishes visits and sessions with a pseudonymous identifier | Only with your consent; up to 2 years unless you remove them earlier |
Your choice is saved in your own browser (local storage) and is not sent to us. You can change it at any time:
The map on our Vaasa page is loaded from OpenStreetMap only when you click Show map; until then no data is sent to OpenStreetMap.
9. Changes to this notice
We update this notice when our processing changes. The date of the latest version is shown below.
Updated 10 October 2026.