Privacy Policy
Last updated: 22.7.2026
Data Controller
TMK Machinery Ltd / Piippo Hydraulic
Pieksämäentie 15 B
FI-41520 Hankasalmi
Finland
Contact Person for Data Protection Matters
Tony Koponen
Email: sales(at)piippohydraulic.com
Tel: +358 400 534 007
Register Name
Piippo Hydraulic-verkkokaupan asiakasrekisteri
Purpose of the Register and Processing of Personal Data
The personal data contained in the register is used solely for maintaining the customer relationship between the supplier and the customer, including processing orders, payments, deliveries, and customer service inquiries. Registration is not required to place an order through the online store.
Legal Basis for Processing
We process personal data on the following legal bases:
Performance of a contract — to process and fulfill your order, including payment processing and delivery.
Legal obligation — to comply with accounting, tax, and other statutory requirements.
Legitimate interest — to maintain the customer relationship, respond to inquiries, and improve our services, provided this does not override your rights and freedoms.
Consent — where applicable, such as for optional marketing communications. Consent can be withdrawn at any time as described below.
Personal Data Collected
The register may contain the following customer information:
Customer number
Company name
Business ID
Billing address
Delivery address
Postal code
City
Telephone number
Email address
Order history
Retention of Personal Data
We retain your personal data for as long as necessary to maintain the customer relationship and fulfil the purposes described in this Privacy Policy.
Personal data is retained for as long as the customer account remains active and for three (3) years after the account has been deleted. Notwithstanding the above, invoicing and order data required for accounting purposes is retained for six (6) years from the end of the relevant financial year, in accordance with the Finnish Accounting Act (Kirjanpitolaki). Certain information may also be retained for a longer period where necessary to comply with other legal obligations or to demonstrate compliance with such obligations.
Sources of Personal Data
Contact information is collected when the customer registers or places an order. Additional information is collected through purchases made in the online store.
Disclosure of Personal Data and Transfers Outside the EU/EEA
We do not sell or disclose personal data to third parties for their own marketing purposes. We do share necessary personal data with the following parties, acting as data processors on our behalf, solely for the purpose of fulfilling your order:
Mollie B.V. — for the processing of payments.
Posti — for the processing and delivery of shipments.
These processors are contractually bound to process personal data only on our instructions and to apply appropriate security measures.
In addition, we use Google and other third-party tools (such as analytics, marketing, and productivity services) that may process personal data on servers located outside the European Union (EU) or the European Economic Area (EEA), including in the United States. Where this occurs, we ensure an adequate level of protection is in place through appropriate safeguards recognized under the GDPR, such as the European Commission's Standard Contractual Clauses, and, where applicable, the provider's certification under the EU-U.S. Data Privacy Framework.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects data subjects.
Cookies
The website uses cookies and similar technologies for the following purposes:
Strictly necessary cookies — required for core store functionality, such as the shopping cart and checkout. These cannot be disabled and do not require consent.
Analytics cookies — used to understand how visitors use the website (e.g. via Google Analytics), helping us improve the store's content and performance.
Marketing cookies — used by us and third parties (e.g. Google Ads) to display relevant advertising and measure its effectiveness.
Analytics and marketing cookies are only set with your consent, which you can give or withdraw at any time via the cookie banner shown on the website. Enabling strictly necessary cookies is required to complete purchases through the online store.
Protection of Personal Data
The Data Controller's information systems and files are protected using generally accepted technical and organizational security measures.
Access to the register is restricted to authorized personnel of the Data Controller and requires a personal username and password. Access rights are granted only to employees whose duties require access to the register.
Rights of the Data Subject
The data subject has the right to:
Access the personal data relating to them;
Request the correction or deletion of inaccurate or outdated personal data;
Request the restriction of processing or object to the processing of their personal data;
Withdraw consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
Requests concerning the exercise of these rights must be submitted in writing and signed, and sent to:
TMK Machinery Ltd
Pieksämäentie 15 B
FI-41520 Hankasalmi
Finland
If we are unable to comply with a request in full, for example, where we are legally required to retain certain information, we will inform the data subject accordingly.
If the data subject believes that their personal data has been processed unlawfully or that applicable data protection legislation has otherwise been violated, they have the right to lodge a complaint with the competent data protection supervisory authority.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy as a result of changes to our services or applicable legislation.
Material changes to this Privacy Policy will be communicated to registered customers in connection with updates to these terms.