Privacy notice

Controller

Sihilisko · Business ID 3647026-6 · Finland. Privacy questions and requests: info@sihilisko.com.

Information Sihilisko uses

Depending on what you request or buy, this can include your name, email address, country, VAT number, delivery address, VIN or registration number, head-unit part number, problem description, desired domain, order and payment references, contract, subscription and hosted-service entitlement details, shipment updates, Web project briefs, uploaded logos and images, review decisions, messages and customer-portal activity.

When a public product demo is opened, Sihilisko may retain a keyed, shortened hash of the network address, coarse browser language, first and latest visit times, and a session count. The raw network address and user-agent string are not stored. Recognisable crawlers, link previews, monitors and command-line clients are excluded where possible.

Purposes and legal bases

• To answer requests, form and perform contracts, take verified payment, deliver products and provide the customer portal: performance of a contract or steps requested before a contract.
• To retain invoices, payments and other mandatory records: compliance with legal obligations.
• To prevent abuse and protect the service: Sihilisko's legitimate interests in operating a secure shop.
• To understand whether public product demos are useful, using minimised and pseudonymised visit counts: Sihilisko's legitimate interest in improving its services.
• Marketing is sent only when separately requested and is never a condition of purchase.

Recipients

Information is disclosed only where needed to providers involved in the transaction or service, such as PayPal, hosting and email infrastructure, delivery providers and bookkeeping. These providers receive only the information needed for their role. Information is not sold.

International transfers

Some providers may process data outside the EU/EEA. Where this happens, Sihilisko uses the safeguards required by EU data-protection law, such as an adequacy decision or standard contractual clauses.

Retention

Uncompleted requests and unnecessary portal tokens are kept only as long as needed to handle the request and prevent abuse. Pseudonymised demo statistics are kept only while they remain useful for measuring the demos, then deleted. Contract, payment, tax and bookkeeping records are retained for the periods required by applicable law. Project briefs, uploads and messages are kept while the project or related support remains active, then removed or minimised when no longer needed. Closing portal access does not erase records that Sihilisko must retain.

Your rights

You may request access, correction, deletion, restriction or portability of your personal data, and object where processing is based on legitimate interests. The portal provides a data export and a deletion-request function. You may also complain to the Finnish Data Protection Ombudsman.

For purchases, see withdrawal and cancellation.

Required information

Email and the information marked as required are necessary to process the selected purchase or request. Without them Sihilisko cannot provide that transaction. Optional fields are labelled optional.

Portal sign-in

The portal uses short-lived, single-use email links and an essential sign-in cookie. It does not create a marketing profile. Existing shop records are connected only after control of the matching email address has been verified.