Data controller
Midguard Systems Ab
Business ID 3576015-7
Vaasa, Finland
contact@midguardsystems.com
Personal data we collect
We collect personal data only when you choose to contact us, for example through the OEM partnership inquiry form or by email. Depending on what you provide, this may include:
- name
- company and role
- business email address
- LinkedIn profile or phone number, if you choose to provide one
- information about your program, such as program phase, expected volume range and any free-text message
- the time of submission and technical information necessary to deliver and protect the form (such as anti-spam and rate-limiting data)
Technical drawings or sensitive program information are not required to contact us and should not be submitted through the form.
Purpose and legal basis
We process inquiry data to respond to your inquiry, to assess and discuss a potential collaboration, and for related business communication. We do not use inquiry data for marketing, newsletters or advertising.
The legal basis for processing data submitted through the form is your consent under Article 6(1)(a) GDPR, which you give by ticking the consent box before submitting. Where an inquiry leads to contractual discussions, further processing may be based on steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) or on our legitimate interest in conducting business communication (Article 6(1)(f) GDPR).
You may withdraw your consent at any time by contacting us at the address above. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Service providers
To operate this website we rely on service providers that process data on our behalf, limited to what is necessary for their function:
- website hosting and delivery of the site
- a database service that stores inquiries submitted through the form
- an email delivery service that forwards inquiry notifications to our contact address
- basic, aggregated website analytics provided by our hosting platform
These providers act as processors under our instructions. Some providers may process data outside the European Economic Area; where this is the case, we rely on the safeguards provided for in Chapter V GDPR, such as adequacy decisions or standard contractual clauses. We do not sell personal data and do not share it with third parties for their own purposes.
Retention
We retain inquiry data only as long as necessary to handle the inquiry and any resulting business communication. If an inquiry does not lead to further cooperation, we aim to delete or anonymise the data within a reasonable period after the communication has ended, unless a longer retention period is required by law.
Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you
- request rectification of inaccurate or incomplete data
- request erasure of your data, subject to legal retention obligations
- request restriction of processing or object to processing based on legitimate interest
- receive the data you provided in a portable format, where processing is based on consent
- withdraw consent at any time, as described above
You also have the right to lodge a complaint with a supervisory authority. In Finland, the competent authority is the Office of the Data Protection Ombudsman(opens in a new tab).
Contact
For privacy-related questions or to exercise your rights, contact contact@midguardsystems.com. We may need to verify your identity before responding to a request.
We may update this policy when our processing or the applicable requirements change. The date at the top of this page indicates the current version.