Who we are
Summain Oy (referred to below as Summain, we, or us) operates the website at https://summain.com. We are a Finnish company registered in Espoo (Y-tunnus 3505359-1, VAT FI35053591), with an additional office in Lahti. This policy explains what personal data we process through this website, why we process it, and what rights you have.
What data we collect
This site does not ask visitors to register an account and does not run e-commerce, forms, or third-party analytics or advertising trackers. The only personal data we knowingly collect is what you choose to send us directly – for example, if you email a member of our team using the addresses published on this site, we receive your name, email address, and the contents of your message.
Like most websites, our hosting infrastructure automatically logs basic technical information for every visit, such as IP address, browser type, and pages requested, for security, troubleshooting, and performance purposes. We do not use this data to build profiles of individual visitors.
Cookies
This site does not currently set analytics or advertising cookies. Our caching and security plugins may set strictly necessary technical cookies required for the site to function; these do not track you across other websites. If we introduce analytics or marketing cookies in the future, we will update this policy and add a consent mechanism before they are activated.
Why we process your data, and on what basis
We process the data described above to respond to enquiries sent to us, to keep our website secure and functioning correctly, and to meet legal obligations where they apply. Where you contact us directly, our legal basis is our legitimate interest in responding to you (Article 6(1)(f) GDPR) or, where relevant, the steps needed to enter into a contract with you (Article 6(1)(b) GDPR).
How long we keep it
We keep enquiry correspondence for as long as reasonably needed to handle the matter you raised, and technical server logs for a limited period consistent with normal hosting practice, after which they are deleted or anonymised.
Who we share it with
We do not sell personal data, and we do not share it with third parties for their own marketing purposes. We may share data with service providers who process it on our behalf and solely on our instructions – for example, our website hosting provider – strictly to the extent needed to operate this website.
International transfers
We do not intentionally transfer personal data outside the European Economic Area. If this changes, we will update this policy to describe the safeguards in place.
Your rights
Under the GDPR, you have the right to ask us for access to, correction of, or deletion of your personal data, to restrict or object to our processing of it, and to receive a copy of it in a portable format. To exercise any of these rights, contact us using the details below. If you believe we have not handled your data properly, you also have the right to lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Finland’s supervisory authority.
Contact us
For any question about this policy or your personal data, contact us at contact@summain.com, or write to Summain Oy, Sinikalliontie 11, 02630 Espoo, Finland.
Changes to this policy
We may update this policy as our website and services evolve. This version was last updated on 13 August 2026.