Privacy statement

Controller

The controller behind the CarOn site and workshop is Teho group Oy, business ID 3367689-1, Lampputie 12 C 67, 00750 Helsinki, phone 045 262 5950, huolto@caron.fi.

For privacy matters, either channel works.

What we process

With a booking request we process your name and phone number, plus whatever you choose to give: email address, the car's registration number, make and model, a preferred day, and your message.

We also store which page the request was sent from, which page the visit began on and which channel brought you to the site. It tells us which channel brings customers. It contains no browsing history.

With an inspection repair request we also process the inspection date, the inspection result and the inspection report, if you send it. The report is kept with the request and deleted with it, and it cannot be opened from a public address.

Why, and on what basis

The information is used to answer your request, agree a time and prepare the work. The basis is taking pre-contractual steps at your request.

If you tick the reminder box, we use your contact details for service reminders. The basis is consent, and you can withdraw it at any time by phone or email.

How long we keep it

Booking requests are kept at most two years from the last contact. Invoicing records are kept as long as the Accounting Act requires.

The survey and the draw

If you answer our survey, we process your answers together with your name, your email address and the car's registration number. The answers show us how to improve our service. With the contact details we run the draw and tell the winners. The email address and the registration number make sure that everyone takes part only once.

The basis is your consent, which you give when you send your answers. You can withdraw it at any time by phone or email. We then delete your answers, and you are no longer in the draw.

If you allow us to send you offers by email, we store that permission and when it was given. It is a separate permission, and you can withdraw it at any time. Taking part in the draw does not depend on it.

The answers, the contact details and the permissions are deleted 12 months after the draw day. We never publish the winners' names. The survey's and the draw's emails are sent through the same email service as the booking emails.

Recipients and transfers

We do not sell data or hand it over for marketing. The data is on servers in the EU.

Booking emails are sent through an email service. It sends from within the EU, but its provider is a US company, so the email address and the message content may also be processed outside the EU or EEA. Such a transfer is made as the GDPR allows, for example under the European Commission's standard contractual clauses.

Your rights

You have the right to see the data we hold about you, to have errors corrected, and to have the data deleted once it is no longer needed. A phone call or an email is enough.

If you believe the processing is deficient, you can notify the Finnish Data Protection Ombudsman (tietosuoja.fi).

Cookies

Our public site sets no cookies. No advertising cookies, no tracking cookies, no third-party cookies. That is why there is no cookie banner.

We measure visits without cookies. For each page request the server records the page address, the site you came from (domain only), any campaign tag in the address, whether the request came from a browser or a crawler, and the time. No IP address, cookie or other identifier is stored. The lines are added up into daily totals, and the original lines are deleted within a week at the latest.

The staff admin page uses one login cookie. It is set only in staff browsers on the admin page, never in a customer's.

Changes

If this statement changes, we update it on this page and change the date above.