Privacy Policy
Sibbo Medical Devices Oy
1. Data Controller
Sibbo Medical Devices Oy
Hitsaajankatu 22 (Opus 2)
00810 Helsinki, Finland
Business ID (Y-tunnus): [ 3295036-9]
Email: info@sibbomedicaldevices.com
2. What Data Do We Collect?
We collect and process the following categories of personal data:
- Personal and contact details: Name, email address, phone number, physical address, and company details (if applicable).
- Order and transaction data: Details regarding purchases, orders, billing, and customer service inquiries.
- Technical and usage data: IP address, browser type, device information, and website interaction data collected via cookies.
3. Lawful Basis and Purpose of Processing
We process your personal data for the following purposes and under the following legal bases pursuant to Article 6 of the GDPR:
- To fulfill orders and perform contracts (Art. 6(1)(b)): Processing orders, managing customer accounts, providing customer support, and delivering our products and services.
- Consent (Art. 6(1)(a)): Direct electronic marketing, sending newsletters, and non-essential analytical or marketing cookies. You may withdraw your consent at any time.
- Legitimate Interests (Art. 6(1)(f)): Improving our products, services, and website functionality, monitoring customer behavior to prevent fraud, and managing business operations.
- Legal Obligation (Art. 6(1)(c)): Retaining transaction and accounting records as mandated by applicable Finnish laws (e.g., Kirjanpitolaki).
4. How Do We Collect Your Data?
You provide most of the data we collect directly when you:
- Contact us online, submit a inquiry, or place an order for products/services.
- Subscribe to a newsletter, complete a customer survey, or provide feedback.
- Interact with our website via your browser’s cookies and analytical tools.
5. How Do We Store and Protect Your Data?
We implement appropriate technical and organizational measures to ensure data security. Your data is stored on secure password-protected cloud servers and hosting facilities provided by vetted service providers. Access is strictly limited to authorized personnel who require the data to perform their job duties.
6. How Long Do We Keep Your Personal Data?
We store your personal data only as long as necessary to fulfill the purposes for which it was collected:
- Customer and order data: Retained for the duration of the customer relationship and up to 6 years following the end of the financial year (in accordance with Finnish accounting laws).
- Direct marketing data: Retained until you unsubscribe or request deletion.
- Inquiries and customer service communications: Retained for up to 3 years after the query is resolved.
Once personal data is no longer required, it is securely erased or permanently anonymized.
7. Data Transfers Outside the EU/EEA
Your data is primarily processed within the European Economic Area (EEA). If any of our service providers (e.g., cloud storage, email, or analytics platforms) transfer data outside the EU/EEA, we ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
8. Direct Marketing
We would like to send you information about our products and services that may interest you. If you have consented to direct marketing, you have the right at any time to opt out or stop us from contacting you for marketing purposes.
To opt out of direct marketing, click the “unsubscribe” link included in any of our marketing emails or contact us at info@sibbomedicaldevices.com.
9. Your Data Protection Rights Under GDPR
You are entitled to the following rights under the GDPR:
- Right to Access (Art. 15): Request copies of your personal data.
- Right to Rectification (Art. 16): Request that we correct inaccurate or complete incomplete information.
- Right to Erasure / “Right to be Forgotten” (Art. 17): Request the deletion of your personal data under certain conditions.
- Right to Restrict Processing (Art. 18): Request that we limit the processing of your data under certain conditions.
- Right to Object (Art. 21): Object to our processing of your personal data (including direct marketing).
- Right to Data Portability (Art. 20): Request that we transfer your data to another organization or directly to you in a structured, commonly used format.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
We will respond to any requests within one month of receipt. To exercise any of these rights, please contact us at info@sibbomedicaldevices.com or by mail at our office address.
10. Automated Decision-Making and Profiling
We do not make decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects concerning you.
11. Cookies
Cookies are small text files placed on your device to collect standard Internet log and visitor behavior information. When you visit our website, we may collect information automatically via cookies or similar tracking technologies tai searching technologies.
For detailed information on the specific cookies we use, their purposes, and how to manage your cookie preferences, please refer to ourCookie Policy / Cookie Banner Settings.
12. Changes to Our Privacy Policy
Sibbo Medical Devices Oy keeps its privacy policy under regular review. Any updates will be published on this web page.
This privacy policy was last updated on 6th August 2026.
13. How to Contact the Supervisory Authority
If you feel that Sibbo Medical Devices Oy has not addressed your data privacy concern in a satisfactory manner, or if you believe our data processing violates applicable data protection laws, you have the right to lodge a complaint with the supervisory authority.
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Visiting Address: Lintulahdenkuja 4, 00530 Helsinki, Finland
Postal Address: P.O. Box 800, 00531 Helsinki, Finland
Telephone: +358 29 566 6700
Email: tietosuoja@om.fi
Website: https://tietosuoja.fi/en/