Privacy Policy updated August 30, 2026
This policy describes how we process the personal data of our website users.
1. Data Controller and Contact Information
AMG Steel Oy
amgsteel.oy (@) gmail.com
2. Purpose of Processing Personal Data
Personal data is processed to handle and respond to contact requests submitted through the website, and to establish potential customer relationships (customer acquisition). In addition, data is processed to ensure the technical functioning and security of the website.
The data controller uses technical subcontractors to assist in data processing. Automated decision-making or profiling is not used.
3. Legal Basis for Processing
The processing of personal data is based on the legitimate interest of the data controller (GDPR Article 6(1)(f)). The data controller has a legitimate interest in processing contact requests sent through the website and carrying out customer acquisition. The data subject initiates the contact process themselves by filling out a form; therefore, the processing is predictable for the data subject and does not infringe upon their rights or interests.
Further information on legal bases:
4. Rights of the Data Subject
The data subject has the right to access their personal data, request the rectification or erasure of data, and withdraw their consent. More information about these rights is available on the Data Protection Ombudsman's website:
Requests must be sent in writing to the contact person mentioned in section 1.
5. Data Content of the Register
Only data necessary for the purpose of processing is collected through the website, such as name, phone number, email address, and other messages sent via contact forms (e.g., Tally) as well as information voluntarily provided by the user.
6. Regular Data Sources
Personal data is obtained exclusively from the data subjects themselves when they fill out the website's contact form. Providing this information is a prerequisite for submitting a contact request.
7. Retention Period of Personal Data
Personal data is retained only for as long as necessary to process the contact request or to carry out customer acquisition. The applicable retention period is generally 0–3 years from the time of contact, unless legislation requires a longer retention period. Outdated and unnecessary data is deleted regularly.
8. Recipients of Personal Data
Data is processed only by persons authorized by the data controller and designated technical service providers who act as data processors on behalf of the controller (see section 9). Data is not disclosed to third parties for marketing purposes.
9. Data Transfers Outside the EU or EEA
As a rule, personal data is not transferred outside the EU or EEA. Mainostoimisto Hermanni is responsible for the technical implementation and maintenance of our website and acts as a data processor on behalf of the data controller. The Tally form service used on the site (Tally BV, Belgium) acts as a sub-processor and processes data within the EU.
If other service providers or technical plugins are later added to the site that may transfer data outside the EU/EEA, we aim to ensure that transfers are carried out in accordance with data protection legislation requirements (for example, utilizing the European Commission's Standard Contractual Clauses).
10. Principles of Register Protection
The data is protected by appropriate technical and organizational measures. Access to the data is restricted only to those individuals who need it to perform their duties.
11. Cookies and Third-Party Services
Our website is designed to respect privacy, and as a rule, we avoid the use of unnecessary tracking and marketing cookies. However, the site may use technical cookies or third-party services and plugins (e.g., forms, map embeds, analytics, or security tools) to ensure the technical functioning, security, or user experience of the site. Such third-party tools may set their own cookies or collect technical data in accordance with their own privacy policies.
Currently used key technical services:
Tally Contact Form: The form is implemented using the Tally.so service. It is a privacy-respecting service that does not install cookies by default. It utilizes the browser's local storage solely for technical purposes, such as ensuring form submission and preventing spam. Further information: https://tally.so/help/privacy-policy