Privacy policy

This is Stenfors Transport's register description and privacy policy in accordance with the Finnish Personal Data Act (sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared 31.8.2026. Last amended 9.9.2026.

1. Data controller

Stenfors Kuljetus & Muuttopalvelut / Keski-Solar (Stenfors Transport)
Business ID 3495129-3
Vessintie 136, 67410 Kokkola

2. Contact person for the register

Alexander Stenfors
contact@stenforstransport.fi · 041 487 6647

3. Name of the register

Stenfors Transport's customer register.

4. Legal basis and purpose of processing personal data

Under the EU General Data Protection Regulation, the legal basis for processing personal data is the person's consent and a contract to which the data subject is a party. The purpose of processing is to prepare quotes, plan and carry out moves or transport, and to communicate with the customer about them. The data is not used for automated decision-making or profiling.

5. Data held in the register

The data stored in the register includes: name, phone number, email address, the origin and destination addresses of the move, the preferred date, the amount of goods and other details given in the booking form, photos of the load sent voluntarily, and the answer to the question "Where did you hear about us?". The data is kept for as long as is needed to handle the quote and the job, and for as long as the Finnish Accounting Act requires.

6. Regular sources of data

The data stored in the register is obtained from the customer themselves via the booking form, by email, by phone, through social media services, from contracts, at customer meetings and in other situations where the customer provides their details.

7. Regular disclosure of data and transfer outside the EU

Data is not regularly disclosed to other parties. Booking data is stored in the Supabase service on a server located in the EU, and the website runs on Vercel. Email notifications about bookings are delivered via the Web3Forms service. Data is not transferred outside the EU or the EEA.

8. Principles of protecting the register

The register is handled with care, and data processed in information systems is protected appropriately. The data is kept in password-protected systems accessible only to those whose duties include processing it. The website does not use tracking cookies. Visitor numbers are measured with Vercel Analytics, which does not identify individual visitors.

9. Right of access and right to request rectification

Every person in the register has the right to check the data stored about them and to request that any incorrect data be corrected or incomplete data be completed. Requests are sent in writing to contact@stenforstransport.fi. The data controller may ask the person making the request to prove their identity and will respond within the time set out in the GDPR, as a rule within one month.

10. Other rights relating to the processing of personal data

A person in the register has the right to request the erasure of their personal data from the register (the "right to be forgotten") and the other rights under the EU General Data Protection Regulation, such as restriction of processing in certain situations. Requests are sent in writing to contact@stenforstransport.fi. You also have the right to lodge a complaint with the supervisory authority (the Office of the Data Protection Ombudsman, tietosuoja.fi).