Privacy Policy of Brighthouse Intelligence Oy

 

1. Who we are
Brighthouse Intelligence Oy (“we”, “us”, “our”) is a Finnish engineering services company specializing in digital, remote & autonomous systems. Our registered office is in Turku, Finland. This Privacy Policy explains how we collect, use, disclose, transfer, and store your personal data in accordance with EU General Data Protection Regulation (GDPR) and applicable Finnish law. (brighthouse.fi)

2. Contact details

3. Personal data we collect
We may collect the following categories of personal data:

  • Contact details (e.g., name, email, phone, job title) voluntarily submitted when you request information or use our services.
  • Company information (e.g., organization name, industry, business contact).
  • Usage data such as IP address, browser and device information, pages visited – collected automatically via cookies or site analytics.
  • Optional profiling data related to your preferences or inquiries, if you describe specific project requirements.

4. Legal basis for processing

  • Performance of a contract or pre-contractual communication.
  • Legitimate interest, e.g., to maintain business relationships and secure our digital platforms.
  • Consent, where required (e.g., newsletter signup, website cookies beyond essential).
  • Compliance with legal obligations.

5. Purpose and use of personal data
We process your data to:

  1. Provide information about our services and respond to inquiries.
  2. Enter into and execute agreements for engineering and cybersecurity services.
  3. Send informational communications (e.g., updates, newsletters, event invitations) — with your consent or based on legitimate interest.
  4. Improve and secure our website and digital infrastructure (e.g., detecting unauthorized access).
  5. Meet compliance obligations (e.g., accounting, legal record-keeping).

6. Data sharing and disclosure
We may share your data:

  • With trusted third-party service providers (e.g., IT, cloud, maintenance) under confidentiality and GDPR-compliant arrangements.
  • With authorities, when required by law or legal process.
  • With expert advisors (e.g., legal, auditors) under professional secrecy obligations.
  • Without identifying individuals, in aggregated or anonymized form for analytics or marketing analysis.

7. International transfers of data
If your data is transferred outside the EU/EEA (e.g., cloud servers), we ensure GDPR compliance by using:

  • Standard contractual clauses (SCCs),
  • Approved binding corporate rules,
  • Or transfers to countries recognized by the EU as providing adequate protection.

8. Data retention
Your personal data is retained:

  • For the duration of our contractual relationship,
  • For legal obligations (e.g., invoicing, tax, statutory retention periods),
  • For our legitimate interest (e.g., up to 5 years after last contact for business relationship management unless legal provisions require shorter retention).
    Once no longer needed, data will be securely deleted or anonymized.

9. Your rights under GDPR
You may:

  • Access your personal data and receive a copy,
  • Request correction of inaccurate data,
  • Request deletion (“right to be forgotten”) where allowed,
  • Restrict our processing,
  • Object to processing based on legitimate interest,
  • Request data portability (machine-readable format),
  • Withdraw any consent at any time; withdrawal doesn’t affect prior lawful processing.

To exercise these rights, contact us at info@brighthouse.fi.

10. Lodging a complaint
If you suspect your data rights have been infringed, you have the right to lodge a complaint with the Finnish Data Protection Authority (Tietosuojavaltuutetun toimisto).

11. Changes to this policy
We may update this policy to reflect changes in laws, our operations, or services. The latest version is available at brighthouse.fi/privacy (or similar). Where significant, we’ll notify you by email or website notice.

12. Cookies and tracking technologies
Our website may use cookies or similar technology for basic functionality and analytics. We distinguish between:

  • Essential cookies: required for site operation; no consent needed.
  • Non-essential cookies (e.g., analytics): activated only with your consent.
    You can adjust cookie preferences in your browser or via our cookie banner (if applicable).

Effective as of July 1, 2025.