Privacy notice

Updated 31 October 2026

1. Controller

Pekka Palo Performance (Business ID 3254857-2)
Talkookuja 7, 04500 Kellokoski, Finland
info@pperformance.fi, +358 50 324 9985

2. What data we process

  • Contact form: name, email address, phone number, car model and year, engine and the content of your message. Name, email and message are required.
  • Email and phone calls: the details you give when you contact us directly.
  • Technical data: Microsoft Azure, which serves the website, processes your IP address, request details and browser type to deliver the pages and protect the service. The form service uses your IP address to prevent abuse (at most five messages in ten minutes) and does not store it permanently.
  • Bot protection: Cloudflare Turnstile processes your IP address and browser and device information to confirm that a human is using the form. Turnstile loads only on the front page, when the form comes into view.

We do not ask for sensitive data, and our services are not aimed at children.

3. Purposes and legal bases

  • Replying to enquiries: legitimate interest (GDPR Art. 6(1)(f)). Requests for a quote: steps taken at your request before entering into a contract (Art. 6(1)(b)).
  • Preventing spam and abuse, and website security: legitimate interest (Art. 6(1)(f)).
  • Any resulting customer relationship and work: the contract and applicable accounting and tax law.

We do not use automated decision-making or profiling.

4. Processors and transfers

  • Microsoft Ireland Operations Limited (Azure): website and contact form service in the EU (West Europe region). Pages may be delivered from a network location near the visitor.
  • Microsoft Ireland Operations Limited (Microsoft 365): email and mailbox in the EU.
  • Cloudflare, Inc.: Turnstile bot protection, with processing in the United States and on Cloudflare's global network.

Transfers outside the EU rely on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. We do not sell your data or share it for marketing. We disclose data only where the law requires it.

5. Cookies and tracking

This website does not use cookies, analytics, advertising pixels or other tracking tools, so no cookie banner is needed. Turnstile is used only to protect the contact form on the front page.

6. Retention

  • Messages received through the form or by email are kept in the Microsoft 365 mailbox for up to two years after our last contact. We delete them earlier on request, unless the law requires us to keep them.
  • If an enquiry leads to a customer relationship, accounting records are kept for the period required by the Finnish Accounting Act.
  • The website itself stores no data.
  • Microsoft and Cloudflare keep technical data in their service logs for the periods set in their own policies.

7. Security

  • The website is only available over encrypted HTTPS connections.
  • Messages go straight to the Microsoft 365 mailbox and are not stored on the website.
  • The form's sending service can only send from one address (info@pperformance.fi).
  • Administrator accounts are protected with multi-factor authentication.

8. Your rights and complaints

Under the GDPR you have the right to access your data, have it corrected or erased, restrict its processing, object to processing based on legitimate interest and, where applicable, receive your data in a portable format.

Send requests to info@pperformance.fi. We reply within one month and may ask you to confirm your identity.

You can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the supervisory authority in the EU country where you live or work.

9. Changes

We update this notice when our services or the law change. The date at the top shows the latest update.