Privacy Policy — Sensible 4

1. Overview & Data Controller

Sensible 4 Oy (registered in Finland, European Union) is committed to protecting the privacy and personal data of our website visitors, partners, and business contacts.

This Privacy Policy describes how we collect, process, store, and protect personal data in compliance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable national data protection legislation, including the Finnish Data Protection Act (Tietosuojalaki 1050/2018).

Data Controller Contact Details:

Company: Sensible 4 Oy

Registered Office: Tampere / Espoo, Finland

Inquiries & Privacy Officer: info@sensible4.fi

Website: https://sensible4.fi

2. Categories of Personal Data We Collect

We only collect personal data that is necessary for our legitimate business operations, responding to customer inquiries, and ensuring website security. We collect data in the following contexts:

Direct Inquiries & Contact Forms: When you submit an inquiry via our website contact form or email us, we collect your full name, business email address, company/organization name, job title, phone number (if provided), and the content of your message.
Commercial & Partner Discussions: Communication records, technical specifications, retrofit deployment assessments, and meeting notes relating to autonomous haulage evaluations.
Technical Server & Access Logs: When you visit our website, our web servers automatically record technical data including your IP address, browser type and version, operating system, referrer URL, pages visited, and date/time of access.

3. Legal Bases for Processing (GDPR Art. 6)

Under the GDPR, we process your personal data under the following legal bases:

Contract / Pre-contractual Measures

Processing your inquiries, requests for proposals, and pilot evaluations for our DAWN™ autonomous software platform (GDPR Art. 6(1)(b)).

Legitimate Business Interests

Maintaining corporate relationship management, preventing spam and fraud, securing our IT infrastructure, and improving our services (GDPR Art. 6(1)(f)).

Legal Obligations

Complying with mandatory statutory accounting, corporate taxation, and record-keeping laws under Finnish legislation (GDPR Art. 6(1)(c)).

Consent

Where you have explicitly consented to specific optional communications or analytics tracking (GDPR Art. 6(1)(a)).

4. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:

General Inquiries: Retained for the duration of the communication and up to 24 months following the conclusion of active correspondence.
Commercial Agreements & Project Files: Retained for the duration of the commercial relationship and up to 10 years to comply with statutory accounting and tax regulations.
Server Log Files: Retained for security and diagnostic purposes for a maximum of 90 days, after which they are automatically rotated and purged.

5. Data Sharing & International Transfers

We do not sell, rent, or trade your personal data. We only share data with trusted third-party service providers acting on our behalf (Data Processors) under strict data processing agreements:

Cloud Hosting & Infrastructure: Hostinger International Ltd. (EU-based servers) for secure web hosting.
Email & Productivity Services: Google Workspace (Google Cloud EMEA) under standard EU data protection terms.

All data processing takes place primarily within the European Union (EU) / European Economic Area (EEA). If any transfer outside the EEA occurs, it is conducted under European Commission Standard Contractual Clauses (SCCs) ensuring an adequate level of protection.

6. Your Rights Under GDPR

As a data subject located in the EU/EEA, you have full statutory rights regarding your personal data:

Right of Access (Art. 15):

Request a copy of the personal data we hold about you.

Right to Rectification (Art. 16):

Request correction of inaccurate or incomplete data.

Right to Erasure (Art. 17):

Request deletion of your data where statutory grounds apply.

Right to Restriction (Art. 18):

Request temporary restriction of processing in specific cases.

Right to Data Portability (Art. 20):

Receive your data in a structured, machine-readable format.

Right to Object (Art. 21):

Object to processing based on legitimate interests.

To exercise any of your rights, please contact us at info@sensible4.fi. We respond to all verified requests within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Authority:
Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)
Website: https://tietosuoja.fi

7. Security & Encryption

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is protected using industry-standard SSL/TLS (HTTPS) encryption.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our operational practices. Any revisions will be published on this page with an updated effective date.