1. Koti
  2. Privacy Policy

Privacy Policy

Nylunds Boathouse
Hamnvägen 56, 10820 Hanko
Email: [email protected]
Date: January 28, 2026 (updated as needed)

We respect your privacy and process your personal data responsibly under GDPR.

What personal data do we collect?

  • Name, phone, email, address
  • Boat/vehicle details linked to you (e.g. ownership info for transfers)
  • Payment details (handled securely via payment provider)
  • Messages or inquiries you send us
  • Website usage data via Google Analytics (cookies)

We do not collect unnecessary or sensitive data unless required by law (e.g. for boat registration).

Why do we process your data?

  • To perform contracts (buy/sell/broker boats) – GDPR Art. 6(1)(b)
  • To comply with legal obligations (bookkeeping, tax, registration) – GDPR Art. 6(1)(c)
  • With your consent: newsletter/marketing, publishing boat photos where you appear – GDPR Art. 6(1)(a)
  • Legitimate interest: basic customer service and business follow-up – GDPR Art. 6(1)(f)

How long do we keep your data?

  • Contracts and accounting records: 10 years after the transaction (Finnish bookkeeping law + dispute protection)
  • Newsletter list: until you unsubscribe
  • Other data: only as long as needed, max 10 years

Who do we share data with?

  • Accounting service / auditor
  • Authorities (e.g. Traficom, Transportstyrelsen, tax offices) when required
  • Payment providers, insurance companies (for the deal)
  • Google (for Analytics and future Ads) – they act as processors with GDPR agreements

We do not sell your data.

Cookies and Google Analytics / Ads

We use Google Analytics to understand website usage. It sets first-party cookies (e.g. _ga, _gid) for visitor tracking (up to 2 years). We also plan to use Google Ads for marketing.

You can manage cookies via our banner: Accept (full features) or Reject (limited data, modeling used).

IP addresses are anonymized where possible.

Your rights

You have the right to:

  • Access your data
  • Correct errors
  • Request deletion (where possible)
  • Object to processing (e.g. marketing)
  • Restrict processing
  • Receive your data in portable format

Contact us at [email protected]. We reply within one month (free in most cases).

Security

We use passwords, encryption, and secure providers. We report breaches to authorities within 72 hours if needed.

Questions? Email [email protected].

enfisv