Plus.fi web service privacy policy

Updated: 7.11.2026

In this privacy policy, we explain how Plus Katsastus Oy processes the personal data of Plus.fi web service users and individuals who contact the company.

1. Controller and contact details

Plus Katsastus Oy
Tuotekatu 8 B
21200 Raisio

Inquiries regarding data protection and the processing of personal data:
tietosuoja@plus.fi

2. Purposes and legal bases for processing personal data

We process personal data on the following grounds:

Performance of a contract: the processing of personal data is necessary for the implementation of the service ordered by the customer or for pre-contractual measures taken at the customer’s request.

Legitimate interest of the controller: we process personal data to manage and maintain the customer relationship and for marketing that does not require consent. Our legitimate interest is the maintenance of customer relationships and the marketing of our services. We assess that the interests or fundamental rights and freedoms of the data subject do not override this interest.

Consent: we process personal data on the basis of consent for the purposes stated when requesting consent, such as electronic direct marketing that requires consent. Consent can be withdrawn at any time.

3. Personal data processed

We may process the following personal data to the extent necessary for the respective purpose:

  • first and last name
  • address, postal code, and city
  • phone number and email address
  • service language
  • vehicle registration number
  • content of communications and information related to their processing
  • marketing consents and opt-outs, and information on changes to them
  • IP address
  • technical data of the web service, usage data, and cookie identifiers, which are described in more detail in section 12.

4. Where is personal data obtained from?

We obtain personal data primarily from the individual themselves, for example, when they use the web service, contact us, or provide marketing consent.

Technical data may be generated automatically in connection with the use of the web service.

5. Is providing personal data mandatory?

Providing personal data is generally voluntary. However, some information is necessary for booking or implementing the service or for responding to a contact request. Without this information, we cannot provide the service in question, process the booking, or respond to the contact request.

We will indicate which information is mandatory at the time of data collection.

6. Recipients and processors of personal data

Personal data is processed only by individuals who need it to perform their work duties.

We use service providers who process personal data on our behalf and in accordance with our instructions. These include, for example, providers of web service maintenance, information system, and communication services, as well as providers of analytics and cookie consent management services. We agree on the processing of personal data with these service providers as required by data protection legislation.

Information may be disclosed to authorities if required by legislation.

7. Data transfers outside the EU or EEA

Analytics data processed in the Google Analytics 4 service may be transferred outside the EU or EEA, including to the United States.

Google uses the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission as the basis for transfers, as applicable. More information on transfer bases and safeguards can be found in Google’s description of international data transfers.

Other personal data described in this policy is not transferred outside the EU or EEA.

8. Retention of personal data

We retain personal data related to the customer relationship and service bookings for three years from the last identifiable service event, unless the law requires a longer retention period.

The retention period for user and event data in the Google Analytics 4 service is set to 14 months. This retention period does not apply to aggregated statistical reports.

After the retention period has expired, we delete the data or anonymize it so that the person can no longer be identified.

9. Protection of personal data

We protect personal data with appropriate technical and organizational measures. We restrict access to personal data based on work duties and ensure the management of access rights.

10. Your rights

In accordance with the requirements of data protection legislation, you have the right to:

  • receive information on whether we process your personal data, as well as gain access to your data and a copy of it
  • request the rectification of incorrect data and the completion of incomplete data
  • request the erasure of your data
  • request the restriction of the processing of your personal data
  • object to processing based on legitimate interest on grounds relating to your particular personal situation
  • receive the data you have provided to us in a structured, commonly used, and machine-readable format and transfer it to another controller when the processing is based on consent or a contract and is carried out automatically
  • withdraw your consent at any time if the processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before it.

You may at any time object to the processing of your personal data for direct marketing purposes. In such cases, we will no longer process your data for this purpose.

You can submit a request concerning your rights to the contact details provided in section 1. We may, if necessary, request additional information to verify your identity. We will generally respond to the request within one month of receiving it. If it is necessary to extend the deadline in situations permitted by law, we will notify you of this and the reasons for the delay within one month.

You also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data violates data protection legislation. In Finland, the supervisory authority is the Data Protection Ombudsman: tietosuoja.fi.

11. Cookies and similar technologies

We use cookies and similar technologies on our website to ensure the functioning of the site and, with your consent, to analyze visitor traffic and develop the web service. For analytics, we use the Google Analytics 4 service.

Necessary cookies are in use without consent. Analytics cookies are used only with your consent.

More detailed information about cookies, their providers, purposes of use, and validity periods can be found in the site’s Cookiebot cookie settings. You can open the settings from the bottom left corner of the site and change your choices or withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

12. Web service analytics

We use the Google Analytics 4 service to monitor the use of the website and to develop the service.

Analytics processes technical data concerning the browser and device, such as browser type, operating system, and language settings, as well as website usage data, such as page views, visit times, traffic sources, and actions taken on the site. In addition, cookie identifiers and approximate location data derived from the IP address are processed.

According to Google, GA4 uses the IP address to determine the approximate location but does not store individual IP addresses.

13. Updating the policy

We update this privacy policy as necessary when the processing of personal data or the requirements concerning it change. The up-to-date policy is available on our website.