Privacy and cookies
What we collect through the site's forms and cookies, what we use it for and how long we keep it.
Updated
In short
- We collect personal data only when you send a quote request or a message.
- Attachments are deleted from the site's storage after 14 days.
- Analytics and marketing cookies are used only if you allow them.
- YouTube videos load only when you start a video.
Controller and contact details
- Controller
- JL Levytekniikka Oy
Business ID 0987386-0 - Data protection contact
- Email: toimisto@
jl-levytekniikka.fi Phone: +358 50 387 1845Vahdontie 52, 21280 Raisio, Finland
You can send questions and requests about data protection by email or post.
Quote requests
The quote request form asks for your name, company, email address, phone number and country, and for the product details: quantity, material, material thickness, surface treatment, whether assembly is needed, preferred delivery time and further details. We also store the attachments with their original names, the page language and the time of sending.
Name, email, quantity, material, material thickness and confirmation that you have read this policy are required. Without them we cannot prepare a quote.
We use the details to prepare the quote and to contact you about it.
Basis: your request, that is, steps taken before a possible contract. When you represent a company, the basis is also our legitimate interest in handling quotes and customer relationships.
Attachments
Files you upload go straight to private storage and have no public address. We check the type of every file and scan it for malware before it is passed on to us. If the check fails, we receive the request without the files, and no unchecked file is passed on.
We receive a download link by email that works for 14 days. The files are deleted from storage automatically after 14 days. Rejected files are deleted at once, and files from an unfinished request in the daily clean-up once a day has passed.
Enquiries and emission data requests
The contact form asks for your name, email address, subject and message. We also store whether it is an emission data request, the page language and the time of sending. Name, email and message are required.
We use the details to reply to your message.
Basis: our legitimate interest in answering questions sent to us.
When your message reaches us
The form details arrive in our email and are handled by the people responsible for quotes and orders. We keep quote requests and messages in our email for one year.
If your request leads to a quote or an order, the related details are moved to our quote records. We keep them for as long as the contract and our legal obligations require, for up to 10 years.
We do not send you a confirmation email. You see the confirmation on screen once the form has been sent.
Running the site and security
The site runs on Vercel. Vercel processes your IP address and browser details to show you the page, and for the firewall, rate limiting and bot detection. Bot detection (Vercel BotID) runs a check in your browser when you send a form.
The form code does not store your IP address, browser details or tracking identifiers. Server logs record only identifiers and error codes, not what you wrote in the form. Logs are kept for one day.
Basis: our legitimate interest in keeping the site running and protecting it from misuse.
Analytics and marketing
We use Google Analytics and Google Ads conversion tracking only if you allow them. They load through Google Tag Manager only after you have made your choice. Before that, the site sends no requests to Google.
Analytics shows us which pages are read and where visitors come from. Marketing cookies measure whether an ad leads to a quote request or an enquiry. Your name, email, company, message and files are never part of the measurement. Google processes your IP address and device details. Analytics data is kept for 14 months.
Basis: your consent. You can withdraw it at any time in the cookie settings. Measurement then stops, and the site's own analytics and marketing cookies are deleted.
YouTube videos
At first the page shows only a picture of the video, and nothing loads from YouTube. When you start a video, the player loads from youtube-nocookie.com. Google then receives your IP address and device details, and the player stores data in your browser (see the table under Cookies). Google's own processing is described in Google's privacy policy.
Basis: our legitimate interest in showing videos when you ask for one by starting it.
Map and links to other sites
The map on the contact page is part of the site and does not load from a map service. Google Maps opens only if you press the map or directions link. Links to social media and other sites take you to services with their own privacy practices.
Recipients and processors
Vercel Inc.
- Purpose
- Hosting, form handling, attachment storage and malware scanning
- Where the data is processed
- Frankfurt, Germany
Resend, Inc.
- Purpose
- Sending the form messages to us
- Where the data is processed
- Ireland (Amazon SES). Resend keeps the messages for 30 days.
Google
- Purpose
- Analytics, Google Ads and Tag Manager only with your permission. The YouTube player when you start a video
- Where the data is processed
- Google's servers, also outside the EU
Cromsoft
- Purpose
- Our email provider: receiving and storing the messages
- Where the data is processed
- As set by the provider
| Service | Purpose | Where the data is processed |
|---|---|---|
| Vercel Inc. | Hosting, form handling, attachment storage and malware scanning | Frankfurt, Germany |
| Resend, Inc. | Sending the form messages to us | Ireland (Amazon SES). Resend keeps the messages for 30 days. |
| Analytics, Google Ads and Tag Manager only with your permission. The YouTube player when you start a video | Google's servers, also outside the EU | |
| Cromsoft | Our email provider: receiving and storing the messages | As set by the provider |
We do not sell your data or pass it on for anyone else's marketing.
Transfers outside the EU
Vercel, Resend and Google are US companies. Form details and attachments are stored in the EU, but the companies may also process data in the United States.
The transfers are based on the EU-U.S. Data Privacy Framework, in which Vercel, Google and Resend take part. We checked this on the framework's official list on 22 October 2026. Resend's transfers are also covered by the EU Standard Contractual Clauses.
Retention
Form details in the site's storage
- How long
- Until the message has been sent to us, usually under a minute. If sending fails, up to 14 days.
Attachments
- How long
- 14 days
Messages at Resend
- How long
- 30 days
Quote requests and messages in our email
- How long
- One year
Details related to quotes and orders
- How long
- For the contract and our legal obligations, up to 10 years
Server logs
- How long
- One day
Analytics data
- How long
- 14 months
Your cookie choice
- How long
- 12 months
| What | How long |
|---|---|
| Form details in the site's storage | Until the message has been sent to us, usually under a minute. If sending fails, up to 14 days. |
| Attachments | 14 days |
| Messages at Resend | 30 days |
| Quote requests and messages in our email | One year |
| Details related to quotes and orders | For the contract and our legal obligations, up to 10 years |
| Server logs | One day |
| Analytics data | 14 months |
| Your cookie choice | 12 months |
Your rights
You can ask to see your data, have incorrect details corrected and have your data deleted. You can also ask us to restrict processing, object to processing based on legitimate interest and receive the data you gave us in a machine-readable format. You can withdraw consent at any time. Withdrawal does not affect processing carried out before it.
Send your request by email to the address above. We reply within one month. We may ask for further details to confirm your identity.
Right to complain
If you believe we process your data in breach of data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland. We would ask you to contact us first so we can put things right.
Office of the Data Protection Ombudsman, PL 800, 00531 Helsinki, Finland.
Contact the Data Protection Ombudsman (tietosuoja.fi)(opens in a new tab)
Automated decisions
We do not make decisions about you based solely on automated processing.
Changes
We update this policy when the way the site works changes. The date of the latest update is at the top of the page.