Privacy Notice

This notice explains how Baron Foodtech Oy processes personal data about website visitors and people who contact us. It covers our contact form, email enquiries, the technical operation of the website, cookies and analytics.

1. Controller and contact details

Baron Foodtech Oy
Business ID: 1655732-1
Varikontie 4, 15550 Nastola, Finland
info@baronfoodtech.fi
+358 50 917 5526

Please send privacy questions and requests concerning your personal data to the email address above. Tell us which matter or enquiry your request concerns. We may verify your identity securely where necessary.

2. Personal data and its sources

• Enquiries: your name, company, email address, telephone number, message and information about handling your enquiry. You provide this information through the form, by email or during other communications.
• Technical data: IP address, requested page, time, browser and device information, security logs and error logs. This information is generated automatically when you use the website.
• Cookie choices: the cookie categories you accept or reject and the validity of your choice.
• Analytics based on consent: for example, page views, events, traffic source, approximate location, browser and device information, and pseudonymous user and session identifiers. Google Analytics 4 does not log or store individual IP addresses from EU visitors.

Please do not send sensitive personal data or information that is unnecessary for handling your enquiry through the contact form.

3. Purposes and legal bases

• Answering enquiries, preparing offers and customer cooperation: our legitimate interests in conducting our business, maintaining customer and partner relationships, and responding to requests (GDPR Article 6(1)(f)). Where you are personally a party to a contract, processing may instead be necessary for the contract or steps you request before entering into it (Article 6(1)(b)).
• Website operation, prevention of misuse and security: our legitimate interest in maintaining a safe and functional website (Article 6(1)(f)).
• Legal obligations: compliance with a legal obligation where legislation requires processing or retention (Article 6(1)(c)).
• Google Analytics and non-essential cookies: your consent (Article 6(1)(a)). You may refuse or withdraw consent at any time.

Providing your contact details is voluntary. We need your name, email address and message to respond to a request submitted through the form. Refusing analytics does not prevent you from using the website or contacting us. We do not use this data for automated decision-making that produces legal or similarly significant effects.

4. Service providers and recipients

Only people who need the data for their work may access it. We use the following services and tools. Providers processing personal data on our behalf carry out agreed tasks under appropriate data processing terms:

• Kajahdus: website maintenance and technical support.
• Louhi and UpCloud: production website hosting and server services in Finland.
• Microsoft 365: email and handling enquiries.
• WPConsent: cookie consent management installed on the website. Your choice is stored in your browser; using the plugin does not in itself mean that analytics data is sent to WPConsent.
• Google: Google Analytics based on consent, and Google Search Console for monitoring search visibility. Search Console reports information generated from Google Search; its use alone does not install an analytics cookie in a website visitor’s browser.

We may disclose data to public authorities where required by law and where necessary to establish, exercise or defend legal claims. We do not sell your personal data.

5. Transfers outside the EU and EEA

The production website server is located in Finland. Microsoft and Google services may involve processing and support outside the EU and EEA, including in the United States. Where applicable, transfers rely on a European Commission adequacy decision, such as the EU–US Data Privacy Framework for certified recipients covered by that framework, or the Commission’s Standard Contractual Clauses together with any necessary supplementary safeguards. Hosting in Finland does not by itself limit all cloud service processing to Finland.

You may contact us for further information about transfers and safeguards. Further details: Microsoft Privacy Statement and Google Privacy Policy.

6. Retention periods

• Website enquiries: up to 24 months after the matter has been closed, unless an ongoing customer relationship, contract performance, a legal obligation or a legal claim requires longer retention. Unnecessary information is deleted earlier.
• Technical logs: up to 90 days. Information necessary to investigate a particular security incident may be retained longer to resolve that incident and protect legal rights.
• Google Analytics 4: user and event data retention is to be set to 2 months. Aggregated reports may remain available longer; cookie lifetimes are separate from event data retention.
• Cookie choice: the WPConsent choice remains valid for 30 days, or until you delete it from your browser or change your choice.

Data is removed from backups through the normal backup rotation. Backups are used only for recovery and continuity. Records subject to statutory retention requirements are retained for the period required by applicable law.

7. Cookies, Google Analytics and external content

Essential cookies support the technical operation of the website and remember your cookie choice. Non-essential analytics cookies require your prior consent. You can accept or reject them separately in the WPConsent preferences panel and change your decision later. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Change cookie settings

When Google Analytics 4 is introduced, it typically uses _ga and _ga_<identifier> cookies, with a default lifetime of up to 2 years; browsers may shorten that period. These distinguish users and sessions. Analytics is started only after you have consented to statistics cookies. Analytics event data retention is to be set to the 2-month period stated above.

Google Search Console is used to monitor visibility in search results and the website’s technical discoverability. It neither replaces nor requires consent for Google Analytics. If you follow an external link or start an external service such as a video, that provider may process your data under its own privacy notice.

The cookies configured in WPConsent are listed below. The list is updated when services are introduced or changed.

The contact panel stores the automatic introduction card’s display and dismissal state and timing in your browser’s sessionStorage for the browsing session in that tab. This state is not sent to the server or used to track visitors.

8. How we protect your data

We protect personal data using access controls, encrypted connections, updates, backups and other appropriate technical and organisational measures. Access is granted only where necessary. We maintain appropriate processing agreements and instructions with service providers.

9. Your rights

Where applicable, you have the right to access and receive a copy of your data, have inaccurate data corrected, request deletion or restriction, and receive data you have provided in a portable format where processing is automated and based on consent or a contract. You may object to processing based on legitimate interests on grounds relating to your particular situation. These rights are not absolute; for example, a legal retention obligation may prevent deletion.

You can withdraw cookie consent in the cookie settings. Please send other requests to info@baronfoodtech.fi. We normally respond within one month of receiving your request. If a legally permitted extension is necessary, we will inform you.

You have the right to lodge a complaint with a supervisory authority if you consider that your data is being processed unlawfully. In Finland, the authority is the Office of the Data Protection Ombudsman. You may also contact the authority in your country of habitual residence, place of work or the place of the alleged infringement.

10. Changes to this notice

We update this notice when our services, data processing or applicable legislation change. The latest update date appears at the top of this page. We will provide separate information about material changes where necessary.