Privacy Policy
Last updated: November 2026
1. Controller
The data controller for this website is:
Gallant Oy
Hämeenkatu 26 A, 33200 Tampere, Finland
Registry number: 0153648-0
VAT: FI01536480
Email: info@gallant-oy.com
Phone: 358 678 26 600
2. Personal Data We Collect
We collect personal data only when you submit the contact form on this website. The data we collect is:
- Full name — required, to identify you in our correspondence.
- Email address — required, to respond to your enquiry.
- Phone number — optional, to contact you by phone if you prefer.
- Company name — optional, to understand the context of your enquiry.
- Message content — required, to understand and respond to your enquiry.
If you accept advertising cookies, we also receive aggregated, pseudonymous campaign analytics data from Microsoft Advertising (see section 7).
3. Purposes and Legal Bases
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Responding to your enquiry | Name, email, phone (optional), message | Art. 6(1)(b) — steps prior to entering a contract, or Art. 6(1)(f) — legitimate interest in handling enquiries |
| Maintaining records of correspondence | All contact form data | Art. 6(1)(f) — legitimate interest |
| Measuring advertising campaign performance (only with consent) | Pseudonymous device identifiers via Microsoft UET cookies | Art. 6(1)(a) — consent |
4. Retention Periods
- Contact form data: retained for up to 24 months from the date of your last correspondence with us, unless a longer period is required by Finnish law or the matter becomes a client relationship (in which case the retention period for client records under Finnish accounting law — at least 10 years — applies).
- Advertising analytics data: as determined by Microsoft's data retention settings for the UET service. We do not store this data ourselves.
- Cookie consent choice: stored in your browser's localStorage for 12 months, after which you will be asked again.
5. Processors and Recipients
We use the following categories of processors to handle personal data on our behalf:
- Web hosting provider — hosts this website and processes any form submissions in transit. Data remains within the EEA.
- Email service provider — delivers contact form notifications to our inbox. Data remains within the EEA.
- Microsoft Corporation — if you consent to advertising cookies, Microsoft receives pseudonymous analytics data via the Microsoft Advertising Universal Event Tracking (UET) service. Microsoft is based in the United States; transfers are made under the EU–US Data Privacy Framework (DPF), by which Microsoft is certified. The legal basis for this transfer is your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time via the Cookie settings link in the footer; we will then stop the UET tag, push a consent-denied signal, and delete the UET cookies.
We do not sell personal data to third parties and do not use personal data for profiling or automated decision-making.
6. International Transfers
Personal data collected via the contact form is processed within the European Economic Area (EEA). The only transfer outside the EEA occurs if you have consented to advertising cookies: in that case, pseudonymous campaign data is transmitted to Microsoft Corporation in the United States under the EU–US Data Privacy Framework (DPF). Microsoft's DPF certification can be verified at dataprivacyframework.gov.
7. Microsoft Advertising UET Cookies
If you accept advertising cookies, we load the Microsoft Advertising Universal Event Tracking (UET) tag, which sets the following cookies:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _uetsid | Microsoft | Session-level UET tracking | 1 day |
| _uetvid | Microsoft | Visitor-level UET tracking | 13 months |
| MUID | Microsoft | Microsoft universal user identifier | ~1 year |
These cookies are set only after you consent. You can withdraw consent at any time via the Cookie settings link. When you withdraw consent, we push a consent-denied signal to the UET tag and delete the UET cookies from your browser.
Microsoft is named as a recipient of advertising data under the EU–US Data Privacy Framework. For Microsoft's own privacy practices, see privacy.microsoft.com.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — to receive a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate data corrected.
- Right to erasure — to have your data deleted where there is no longer a lawful basis for processing it.
- Right to restriction of processing — to limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used format where processing is based on consent or contract.
- Right to object — to object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing. For advertising cookies, use the Cookie settings link.
To exercise any of these rights, contact us at info@gallant-oy.com or in writing to Hämeenkatu 26 A, 33200 Tampere, Finland. We will respond within one month.
9. Right to Lodge a Complaint
If you believe we are processing your personal data in breach of the GDPR, you have the right to lodge a complaint with the Finnish supervisory authority:
Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)
PO Box 800, FI-00531 Helsinki
tietosuoja.fi
10. Changes to This Policy
We may update this privacy policy from time to time. The current version is always available at this URL. Material changes will be noted with a new "Last updated" date at the top of the policy.
11. Contact for Data Matters
For any questions or requests relating to this privacy policy or the processing of your personal data, please contact:
Gallant Oy
info@gallant-oy.com
Hämeenkatu 26 A, 33200 Tampere, Finland