Privacy Notice

Overview

This privacy notice explains how personal data is collected and used in connection with the SUPREME website.

The processing of personal data is based on:

  • the EU General Data Protection Regulation (GDPR), and
  • the Finnish Data Protection Act.

This notice may be updated from time to time. The latest version is always available on the SUPREME website.

Who is responsible for your data?

Controller
VTT Technical Research Centre of Finland Ltd (VTT)
Business ID: 2647375-4
Tekniikantie 21, 02150 Espoo, Finland

Postal address:
P.O. Box 1000, FI‑02044 VTT, Finland

Data Protection Officer (DPO):
dataprotection@vtt.fi

What data do we collect?

Information you provide

When you contact SUPREME via the website, we may collect:

  • Name
  • Email address
  • Organisation and role
  • Organisation type and website
  • Technologies or areas of interest
  • Information on how you heard about SUPREME
  • Any additional comments you submit

Technical website data

We may also process limited technical information, such as:

  • anonymised IP address
  • browser and device type
  • pages visited and usage patterns (aggregated)

Why do we process your data?

Website and communication

We use your data to:

  • respond to your enquiries
  • manage contacts and stakeholder communication
  • support SUPREME services and the Service Office activities

Website analytics

We use aggregated data to:

  • understand how the website is used
  • improve performance and user experience

Legal basis

All processing is based on your consent (GDPR Article 6(1)(a)).

Where do we get your data from?

  • Directly from you (e.g. contact forms)
  • Automatically through website usage (technical data only)

Who do we share your data with

We may share data with trusted service providers who support the website, such as:

  • hosting and infrastructure providers
  • analytics services (EU/EEA-based, privacy‑friendly)
  • IT support and maintenance providers

These providers act only on behalf of VTT and process data only as needed.

International data transfers

  • Personal data is not transferred outside the EU/EEA
  • Website analytics tools are designed to avoid personal data processing and cross-border transfers

Cookies and website technologies

Essential cookies

We use only a limited number of cookies required for:

  • website functionality
  • security
  • navigation

These cookies are necessary and cannot be disabled.

Privacy‑friendly analytics

We use analytics solutions that:

  • collect only anonymous, aggregated data
  • do not use tracking cookies
  • do not identify individual users

Examples of collected data:

  • number of visitors
  • pages viewed
  • device/browser type
  • general location (at aggregated level)

No marketing or tracking cookies are used.

How long do we keep your data?

  • Contact data: up to 2 years after the end of the SUPREME project
  • Analytics data: stored only in aggregated form and only as long as needed

After this, data is deleted or anonymised.

Your rights

You have the following rights under data protection law:

  • Withdraw your consent at any time
  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Receive your data (data portability, where applicable)
  • Lodge a complaint with a supervisory authority

To exercise your rights, please contact VTT using the details above.

Complaints

You may lodge a complaint with the Finnish Data Protection Ombudsman:
https://tietosuoja.fi/en/contact-information