Table of Contents
Privacy Notice
Last updated: July 24, 2025
This privacy notice explains how and why we process personal data in accordance with EU GDPR Articles 12, 13 and 14.
Controller
Purposes and Legal Bases for Processing Personal Data
Brikker Oy processes personal data for the following purposes: marketing of products and services, handling contact requests, processing quotes and orders, invoicing and debt collection, bookkeeping, and customer feedback.
Legal bases for processing:
- •Consent: e.g. quote requests, registering for the portal
- •Performance of a contract: e.g. orders
- •Legal obligations: e.g. bookkeeping and the Consumer Protection Act
- •Controller's legitimate interest: e.g. direct marketing
Controller's legitimate interests
Brikker Oy has the right to market its own products and services by phone or email on the basis of the controller's legitimate interest, as defined in the Act on Electronic Communications Services (917/2014).
Personal Data Processed in the Register
The register may include, among others, the following data:
- •Name
- •Phone number
- •Email address
- •Customer identification data (e.g. the channel through which the customer arrived)
- •Portal access rights and login data (Auth0)
Where Personal Data is Obtained
Brikker Oy primarily collects customer data from the data subject themselves, for example via a registration form, or from information provided by email or phone. Data is also collected at trade fairs and customer meetings with the person's consent.
Information about persons visiting Brikker Oy's website is collected by means of cookies for Segment.io. With these, Brikker Oy can develop its website and marketing operations. More information about cookies on the Cookies page.
Provision of Data and Consequences of Not Providing Data
Providing personal data is a prerequisite for, among other things, access to the portal, calculating a quote, and placing an order. If personal data is not provided, an order or contract cannot be formed.
Recipients of Personal Data
Customer data collected and processed by Brikker Oy may be processed by Brikker Oy's partners or system suppliers:
| Service | Purpose |
|---|---|
| Google Inc. | Email services |
| Auth0 | User authentication and management |
| Segment.io | User tracking |
| MailerLite | Email marketing |
| AWS SES | Event-related email communication |
| Amplitude | User analytics (data is transferred from Segment) |
Transfers of Data to Third Countries (outside the EU/EEA)
Data collected and processed by Brikker Oy is primarily processed and stored within the EU/EEA.
In the case of Google's email service and Google Analytics, data may be transferred outside the EU. More information about Google's data protection can be found here: https://privacy.google.com/businesses/compliance/
User Tracking
We use the Segment.io service to track how users interact with our website and product. This data is analyzed with Amplitude so we can better understand user behavior and develop our services.
We use the MailerLite service to manage email communication with our subscribers. If you subscribe to our emails, your contact details are stored in MailerLite. We use standard email tracking features, such as monitoring whether an email was opened or links were clicked.
We send transactional emails (such as account- or system-related messages) via Amazon Web Services Simple Email Service (AWS SES). These emails are sent based on user actions and are not used for marketing purposes. AWS may process metadata related to the delivery and status of messages.
From a GDPR perspective, we act as the controller, and our service providers (Segment, Amplitude, MailerLite, and AWS) act as processors of personal data. If you do not want to be tracked, you can clear your browser cache, adjust your browser's privacy settings, opt out of email tracking via your email client, or unsubscribe from our emails.
For more information on how these service providers process data, see their privacy policies:
Automated Decision-Making and Profiling
Brikker Oy does not make automated decisions or profiling from personal data.
Retention Period of Personal Data
- •Data related to contracts is retained for as long as the contract is valid.
- •Portal credentials are retained for their period of validity.
- •Marketing data is reviewed and updated regularly; old data is deleted.
- •Accounting material is retained in accordance with the Accounting Act.
Rights of the Data Subject
A customer in the register has the following rights concerning their personal data:
- •To request the rectification of their personal data if it contains incorrect or outdated information.
- •The right to withdraw the right to direct marketing based on Brikker Oy's legitimate interest.
- •The right to withdraw consent to the processing of their personal data if the consent to collect the data was given by the data subject themselves.
- •The right to have their personal data erased. Personal data will be erased from the customer register when:
- ◦The data subject withdraws their consent to the processing of their personal data (consent originally requested)
How to exercise your rights:
The request must be made by email: support@brikker.eu
Subject: To the Data Protection Officer: Change to register entry
Principles of Register Protection
Customer data sent through the brikker.fi website is protected with an SSL certificate. Enterprise resource planning systems are protected by firewalls, passwords, and other methods improving data security. Access rights to systems containing personal data are restricted, and only persons with access rights process the data. The number of manually processed customer records is minimized, and manual archives are stored in locked premises.
Changes to the Privacy Notice
We continuously improve and develop our services and therefore reserve the right to change this privacy notice by notifying about it on this page.
Contact Information
If you have any questions about this privacy notice or how we process your personal data, you can contact us: