BuildStat

Privacy Policy

Updated 17 October 2026

1. Data controller

Vertia Oy (Company registration number: 2406942-4)
Nuijamiestentie 3 A, 00400 Helsinki
myynti@vertia.fi | +358 44 7700 400

2. Contact person for matters relating to the register

For any enquiries regarding data protection, please contact us at tietosuoja@vertia.fi.

3. Name of the register

The BuildStat service’s customer and user register.

4. Purpose and legal basis for the processing of personal data

We process personal data for the following purposes:

  • Provision and maintenance of the BuildStat service (performance of the contract)
  • Customer relationship management and customer communications (legitimate interest)
  • Order processing and invoicing (contractual and statutory obligation)
  • Service development and analytics (legitimate interest)
  • Processing of enquiry requests and demo bookings (consent)
  • Marketing communications (consent)

5. Personal data to be processed

We collect and process the following information:

  • Contact details: name, email address, telephone number, company
  • Order and contract details: services ordered, delivery and billing address
  • Operating data: login details, log data relating to the use of the service
  • Sensor data metadata: sensor locations, site name (do not contain personal data)
  • Contact details: messages sent via the contact forms

6. Sources of information

Personal data is mainly collected from the data subject themselves in connection with the use of the service, orders and enquiries. Company details may be supplemented using information from public registers (e.g. the Central Business Register).

7. Disclosure and transfer of data

Personal data will not be disclosed to third parties for marketing purposes. Data may be disclosed:

  • To provide services to Vertia Oy’s group companies
  • Service providers who process data on our behalf (e.g. cloud services, email services)
  • To the authorities, pursuant to a statutory obligation

The website uses the following service providers, to whom personal data is transferred:

  • Google Cloud Platform — the storage of enquiries, orders and leads, as well as the website’s servers.
  • Firebase Hosting — The public BuildStat website pages and static assets are delivered through Firebase Hosting's CDN. The visitor's IP address and browser request information are transmitted to Google through Firebase Hosting. Contact form and demo booking data are sent directly from the browser to the EU-hosted Cloud Run API; Firebase Hosting does not handle those submissions.
  • Slack — Sales enquiries: type of enquiry, name, company, total order value and date of the demo.
  • Podio — Processing of enquiries, sensor kit orders and demo bookings: name, email address, telephone number, company, message, and order details and addresses.
  • Google Workspace (Google Calendar and Google Meet) — Demo bookings: a calendar invitation and a Google Meet link are sent to the booker’s email address, and the name, email address, telephone number, company and additional details are recorded in the booking description.
  • Google Fonts — The fonts on the website are loaded from Google’s servers, which means that the visitor’s IP address is transmitted to Google.
  • Google Analytics 4 — Visitor statistics are collected only with the user’s consent (see section 11).

We use subcontractors whose servers may be located outside the EU/EEA. In such cases, the transfer of data is based on standard contractual clauses approved by the EU or another lawful transfer mechanism.

8. Data retention

Personal data is retained for as long as the customer relationship remains in force and, thereafter, for the period required by statutory obligations (e.g. accounting records for 6 years). Information from contact forms will be deleted no later than 12 months after submission, unless a customer relationship is established.

9. Security of the register

Personal data is protected by appropriate technical and organisational measures. The databases are hosted on encrypted cloud services (Google Cloud Platform, within the EU). Access to personal data is restricted to those individuals whose job roles require it.

10. Rights of the data subject

You have the right to:

  • To access your personal data and request a copy of it
  • Request the rectification or erasure of your data
  • Restrict or object to the processing of your data
  • Transferring your data to another service (data portability)
  • You may withdraw your consent at any time
  • Lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman)

You can exercise your rights by contacting us at tietosuoja@vertia.fi.

11. Cookies and analytics

This website uses the following analytics service, which requires the user’s consent:

  • Google Analytics 4 — Visitor statistics and behavioural analysis. Uses cookies and sends data to Google.

Analytics cookies are only activated once the user has given their consent via the cookie banner (Google Consent Mode v2). Essential technical cookies (e.g. language selection, consent selection) do not require consent.

12. Changes to the privacy policy

We reserve the right to update this privacy policy. Any significant changes will be announced on the service or by email.