Privacy Policy

SupaBright Oy — Business ID (Y-tunnus): 3625238-1
Effective date: 24 May 2026 · Last updated: 24 May 2026

This Privacy Policy explains how SupaBright Oy processes personal data in connection with its website, digital services, and the W4S Technologies Ecosystem. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

1. Data controller

SupaBright Oy (Business ID 3625238-1) is the controller responsible for the processing of personal data described in this policy.
Contact: info@supabright.com · www.supabright.com

2. Personal data we process

Depending on how you interact with us, we may process the following categories of personal data:

• Contact and identification data — name, email address, telephone number, company, and job title that you provide when contacting us or requesting a demo.
• Customer and account data — information required to deliver and administer the Services, including user accounts and the content you submit within the Digital Services.
• Communication data — the content of messages and correspondence you send to us.
• Technical and usage data — IP address, browser type, device information, and log data generated when you use the website or Digital Services.

3. Purposes and legal bases for processing

We process personal data for the following purposes and on the following legal bases under GDPR Article 6:

• Providing and administering the Services — performance of a contract (Art. 6(1)(b)).
• Responding to enquiries and demo requests — our legitimate interest in handling and following up on your request, or steps taken at your request prior to a contract (Art. 6(1)(b) and (f)).
• Improving and securing our website and Digital Services — our legitimate interest in operating a secure and functional service (Art. 6(1)(f)).
• Complying with legal obligations — such as accounting and tax obligations (Art. 6(1)(c)).

4. Cookies and similar technologies

This website stores a small preference value in your browser's local storage to remember your selected language. This is necessary for the site to function as you expect and does not track you across other websites.

Web fonts on this website are served directly from our own servers. No fonts or other resources are loaded from third-party content delivery networks, so your IP address is not shared with such providers for this purpose.

5. Recipients and processors

We may share personal data with trusted service providers who process data on our behalf (for example hosting, infrastructure, and communication providers). Such providers act as processors under a data processing agreement and may only process personal data according to our instructions. We do not sell personal data.

6. Transfers outside the EU/EEA

Where personal data is transferred outside the European Economic Area, we ensure that an appropriate safeguard is in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. Data related to contracts and accounting is retained for the periods required by applicable law.

8. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• request restriction of, or object to, processing;
• receive your data in a portable format (data portability);
• withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at info@supabright.com. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), the supervisory authority in Finland.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The version published on this page is the version in force, and material changes will be indicated by updating the "Last updated" date above.

11. Contact

SupaBright Oy · Business ID: 3625238-1
Email: info@supabright.com
Website: www.supabright.com