Privacy policy

1. Data Controller and Contact Person

  • Company: At Sauce Oy
  • Business ID: 2734452-4
  • Address: Rauvolantie 64, 20760 Kaarina
  • Email: myynti@atsauce.fi
  • Website: www.atsauce.com | www.atsauce.fi

 

2. Purposes and Legal Bases for Processing

We collect and process personal data for the following purposes:

  • Managing customer relationships and providing services: User registration, service delivery, customer support, and communication.
  • Compliance with legal obligations: Such as requirements under accounting legislation.
  • Marketing and communication: Newsletters, direct marketing, and customer surveys.
  • Business and website development: Improving user experience, statistical analysis, and analytics using cookies.

3. What Personal Data Do We Collect?

We only collect data necessary for the intended purpose:

  • Information provided by the user: Name, contact details (email, phone number, address), organization, billing details, consents granted, and feedback.
  • Data observed from service usage (cookies and analytics): IP address, browser version, device identifiers, landing page, duration of visit, as well as browsing and click data collected via cookies.
  • Data derived from service usage: Segments or interests inferred through analytics to target services.

 

4. How Long Is Data Retained?

We retain personal data only for as long as necessary to fulfill the purposes defined in this privacy policy or to meet statutory obligations (such as the Accounting Act). Outdated and unnecessary data is erased or anonymized on a regular basis.

 

5. Disclosures and Recipients of Data

Personal data may be disclosed to the following entities:

  • Service providers and subcontractors: Third parties offering IT, billing, marketing, or analytics services to us (processing data on behalf of atSauce Oy).
  • Authorities: Pursuant to statutory requirements or demands issued by a competent authority.
  • Corporate transactions: If At Sauce Oy is involved in a merger, acquisition, or other business reorganization.

 

6. International Data Transfers

We strive to process data primarily within the EU/EEA. If service providers we utilize (for instance, global IT partners) transfer data outside the EU/EEA, we ensure an adequate level of data protection by using Standard Contractual Clauses approved by the European Commission or other legal transfer mechanisms.

 

7. Protection of Personal Data

We employ appropriate technical, physical, and administrative security measures (such as encryption, firewalls, access control, and access restriction) to protect personal data against loss, misuse, and unauthorized access. Access to the data is restricted to employees and partners who require it for their duties.

 

8. Cookies and Third-Party Websites

Our website uses cookies to enhance user experience and perform analytics. You can manage or disable cookies via your browser settings or through the cookie banner on our website. This policy does not apply to third-party websites that may be linked from our site.

 

9. Your Rights

Under the GDPR, you have the following rights:

  • Right of access: The right to obtain confirmation as to whether we are processing data concerning you and to request a copy of that data.
  • Right to rectification: The right to demand the correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): The right to request the deletion of your data if there is no longer a legal basis for processing.
  • Right to restriction of processing: The right to request that we restrict the processing of your data in certain situations.
  • Right to object: The right to object to the processing of your data based on legitimate interest or for direct marketing purposes.
  • Right to data portability: The right to receive the data you provided in a machine-readable format and transfer it to another controller.
  • Right to withdraw consent: If processing is based on your consent (e.g., newsletter), you can withdraw it at any time.

 

10. Exercising Your Rights and Right to Lodge a Complaint

As a customer, you can exercise your rights by contacting the email address mentioned in Section 1. To ensure data security, we may ask you to verify your identity (for example, by confirming the request via email or while logged into the service).

If you consider that the processing of your personal data infringes data protection legislation, you have the right to lodge a complaint with the supervisory authority:

  • Office of the Data Protection Ombudsman
  • Visiting address: Lintulahdenkuja 4, 00500 Helsinki
  • Website: www.tietosuoja.fi

 

11. Changes to the Privacy Policy

We update this policy as necessary, for example, as our operations evolve or as legislation changes. The updated policy will always be available on our website.

This policy was last updated: July 24, 2026.