Privacy notice

1Controller

Primpex Oy (auxiliary business name Primpex Autohuolto)
Business ID 2575921-6
Hämeentie 103, 00550 Helsinki
Phone 050 599 0357
Email asiakaspalvelu@primpex.fi

Please send any enquiries about your personal data by email to asiakaspalvelu@primpex.fi.

2What data we process

Customer and job data: name, phone number, email address, address and billing details where necessary, the vehicle’s registration number and technical data, a description of the job or fault, work carried out, parts used, measurement and inspection data, and details of quotes and invoices issued.

Web form data: information given in the contact and quote request forms and files sent as attachments to the forms, such as photos and inspection reports.

Camera surveillance recordings: video recordings from camera surveillance of the premises and the yard.

Technical website data: server log data and data from strictly necessary cookies.

3Purpose and legal basis of processing

Performance of a contract: preparing quotes, booking appointments, carrying out servicing and repair work, keeping the customer informed about the progress of the work, invoicing, and handling warranty and liability-for-defects matters.

Legal obligation: retaining accounting records as required by accounting and tax legislation.

Legitimate interest: the security of the premises and property and the investigation of incidents of damage (camera surveillance), customer service, and the collection of receivables and the establishment of and defence against legal claims.

We do not use personal data for automated decision-making or profiling, and we do not sell or rent data to third parties.

4Where the data comes from

The data is mainly obtained from the customer directly by phone, by email, through a web form or at the workshop. Technical vehicle data may also be retrieved from parts and vehicle information systems based on the registration number. Some jobs come to us through a third-party quote request service, in which case we receive the information the customer has given in that service.

5Retention periods

Accounting records (invoices, work orders and other vouchers): in accordance with the Accounting Act, six years from the end of the calendar year in which the financial period ends.

Customer and service history data: for the duration of the customer relationship and thereafter for as long as needed to resolve warranty and liability-for-defects matters.

Quote requests and enquiries that do not lead to a job: kept for as long as they may be needed for managing the customer relationship, quotes, and warranty or complaint matters. We delete the data on request unless the law requires it to be retained.

Camera surveillance recordings: about one month, after which the recording is automatically overwritten. If a recording is needed to handle damage, a crime or another incident under investigation, that recording may be kept for as long as the matter is being handled.

6Disclosure of data

Data is disclosed only to the extent required to carry out the work, for invoicing or to meet a legal obligation. Recipients may include:

• parts suppliers and parts wholesalers to the extent required by an order
• the payment service provider and the bank
• the accounting firm and the auditor
• the administrators of information systems and the website, and the hosting provider
• the vehicle manufacturer’s digital service book system, when a service entry is made
• a debt collection agency, if a receivable is transferred for collection
• authorities, such as the police, on the basis of a request based on law

Service providers process the data as processors on our behalf and only for the purpose for which the data was disclosed.

7Transfers of data outside the EU or EEA

As a rule, we do not transfer personal data outside the EU or EEA. The website uses external content delivery services to load icons and fonts, which means the visitor’s IP address is technically passed to that service provider. If data is transferred outside the EEA, the transfer is based on standard contractual clauses approved by the European Commission or another safeguard in accordance with the General Data Protection Regulation.

8Camera surveillance

The workshop premises and the yard are under recording camera surveillance. The purpose of the surveillance is to protect property, to prevent and investigate crimes and damage, and to investigate incidents of damage involving customers’ vehicles. The legal basis for the processing is the controller’s legitimate interest.

The monitored areas are marked with signs. Recordings are viewed only when there is a justified reason to investigate a specific incident, and access to the recordings is limited to designated persons. Recordings are not used to monitor employees’ work performance. A recording may be handed over to the police to investigate a crime or to an insurance company to handle a damage claim.

9Cookies and technical website data

The website uses cookies that are strictly necessary for the functioning and security of the site, such as cookies required for the forms, the site cache and remembering your cookie choice. In addition, with your consent we use Google Analytics 4 (Google Ireland Ltd) for visitor statistics and an embedded Google Maps map on the contact page. These services set cookies and may process, for example, your IP address, device and browser information and data about the pages you view. Analytics and the map are loaded only after you accept cookies or open the map, and you can withdraw or change your consent at any time via the Cookie settings link at the bottom of the page. The site does not use the Meta pixel or any other advertising cookies.

The site’s fonts and icons are loaded from external content delivery services, which means the visitor’s IP address is technically passed to that service. You can block cookies in your browser settings, but then not all functions of the site may work correctly.

10Data security

Data in electronic form is protected with user IDs and passwords, and only those who need the data for their work have access to it. Traffic on the website is encrypted. Paper records are also handled so that they are not accessible to unauthorised persons. Staff handle customer data confidentially.

11Your rights

You have the right to:

• find out whether we process personal data about you and receive a copy of that data
• request the correction of inaccurate or incomplete data
• request the erasure of data if there is no longer a basis for processing it
• request the restriction of processing
• object to processing based on legitimate interest on grounds relating to your particular situation
• transfer the data you have provided from one system to another to the extent that the processing is based on a contract and carried out automatically

Please note that some of the data is subject to a statutory retention obligation, such as accounting records, in which case the data cannot be deleted before the end of the retention period.

You can make a request by email to asiakaspalvelu@primpex.fi or by visiting the workshop. The identity of the person making the request is verified before any data is disclosed. We respond to the request within one month at the latest.

If you believe that your personal data is being processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

12Changes to this notice

We develop our service and may update this notice. The current version is always available on this page. We will announce significant changes on our website.