Privacy policy.

Who is responsible for your data

Kretsa Oy (Business ID / VAT 3254442-4), Helsinki, Finland, is the data controller for personal data processed through the Kretsa service. For any question about this policy or your data, use the contact form.

What we collect

• Machine information you submit: equipment type, manufacturer, model, year, condition, location, availability and any photos, videos or documents you upload.
• Seller contact details: company name, contact name, business email, phone number and country.
• Buyer application data: company name, country, website, VAT number, contact details, purchasing categories and markets.
• Messages you send us through contact forms or email.
• Technical data strictly needed to operate the service, such as session and authentication data and server logs.

Why we process it, and on what legal basis

• To deliver the service you asked for — presenting your machine to relevant buyers, collecting offers and communicating with you. Legal basis: performance of a contract or steps taken at your request (GDPR Art. 6(1)(b)).
• To verify buyer companies and keep the buyer network professional, to prevent misuse, and to improve the service. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)).
• To meet accounting and other statutory obligations. Legal basis: legal obligation (GDPR Art. 6(1)(c)).

Who sees what

Approved buyers see an anonymised description of your machine: type, manufacturer, model, year, condition, photos you release and an approximate region. They do not see your company name, exact address, contact details, serial number or any minimum price.

Your identity is disclosed to a buyer only when you accept their offer and choose to proceed. Buyer identities are likewise withheld from you until an offer is accepted.

Service providers

We use a small number of processors to run the service: cloud hosting and database infrastructure inside the EU, file storage for the media you upload, and an email delivery provider for notifications. Processors act only on our instructions under a data processing agreement. We do not sell personal data, and we do not use it for advertising.

How long we keep it

Submission and offer records are kept for as long as needed to run the transaction and afterwards for as long as required for accounting and to handle possible disputes. Buyer application data is kept for the duration of the buyer relationship. You can ask us to delete data that we are not legally required to retain.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, and to receive data you provided in a portable format. Send the request through the contact form and we will respond within one month.

If you believe we handle your data incorrectly, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

Cookies

Kretsa uses strictly necessary cookies only. See the cookie policy for details.