Privacy policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the GDPR is:

Grid Jarvis Oy
Linnoitustie 4 B, 02600 Espoo, Finland
Email: sales@gridjarvis.com
Business ID (Y-tunnus): 3188624-6

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Processing activities

2.1 Hosting and server logs

When you access this website, our hosting provider processes technically necessary access data in server log files: IP address, date and time of the request, page requested, referrer URL, browser type and operating system.

Purpose: delivery, stability and security of the website, prevention of abuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Recipients: hosting and content delivery providers acting as processors.
Third-country transfers: where processing takes place outside the EU/EEA, it is based on the EU Standard Contractual Clauses.
Retention: log files are generally deleted after 30 days.

2.2 Contact and demo form

If you use the form on this website, we process the data you provide: name, work email address, company and your message. Your IP address is also processed briefly to prevent abuse of the form (rate limiting).

Purpose: handling your enquiry, arranging a product demonstration and subsequent business communication.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries and preventing abuse).
Recipients: our backend and database provider (Supabase) and our email delivery provider (Resend), each acting as a processor. The message is delivered to our mailbox at sales@gridjarvis.com.
Third-country transfers: where processing takes place in the United States, it is based on the EU Standard Contractual Clauses.
Retention: enquiries are deleted once they have been dealt with conclusively, and at the latest after 24 months, unless statutory retention periods apply. IP addresses used for rate limiting are discarded after a few minutes.

2.3 Job applications

You can apply for open positions by email to careers@gridjarvis.com or through the form on this website. We process the application data you submit solely for the purpose of conducting the recruitment process.

Legal basis: Art. 6(1)(b) GDPR and Art. 88 GDPR in conjunction with national employment data protection rules.
Retention: deletion no later than six months after the process is concluded, unless you have consented to longer storage.

2.4 Cookies and local storage

This website sets no cookies for analytics, marketing or tracking purposes and embeds no advertising or analytics services. For that reason no cookie banner is displayed.

The only entry stored in your browser is the following strictly necessary local storage item:

• jarvis-language (origin: gridjarvis.com, purpose: remembering your language selection, lifetime: until you delete it). Legal basis: § 25(2)(2) TDDDG and 205 § of the Finnish Act on Electronic Communications Services, as the entry is strictly necessary for the service you have explicitly requested.

2.5 Fonts and embedded content

All fonts used are served locally from our own server. No connection is made to Google Fonts or any other font CDN. No videos, maps, chat widgets or other third-party content are embedded.

3. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, simply send a message to sales@gridjarvis.com.

4. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). You may also contact the supervisory authority responsible for your place of residence or work, for example the competent state data protection authority in Germany.