Privacy policy

Last updated:

This Privacy Policy explains how Preempt Systems Oy processes personal data when you visit our website, contact us, or communicate with us about our products and services.

1. Controller and contact details

Preempt Systems Oy is the controller responsible for the processing described in this policy.

Preempt Systems Oy
Business ID: 3438719-4
Salhojankatu 25d
33500 Tampere, Finland

Email: contact@preemptsystems.com

2. Enquiries and business relationships

When you contact us, we process the information you provide. This may include your name, company, professional role, email address, message, and information about your technical requirements.

We use this information to:

  • Respond to enquiries and provide requested information.
  • Discuss product evaluations, integration, licensing and support.
  • Manage business relationships and related correspondence.
  • Meet legal obligations and establish, exercise or defend legal claims.

Our legal basis is our legitimate interest in responding to enquiries and conducting our business. Where processing is necessary to enter into or perform a contract with you personally, we rely on contractual necessity. Where applicable, we also process information to comply with legal obligations.

Providing information is voluntary. However, without sufficient contact details and information about your enquiry, we may be unable to respond or provide the assistance requested.

3. Business prospecting

We may obtain professional information from LinkedIn to identify people whose responsibilities are relevant to our products and services.

This information may include your name, employer, job title, LinkedIn profile, available business contact details, the source of the information, and records of our correspondence.

We use this information to assess business relevance and make appropriate professional introductions. Our legal basis is our legitimate interest in developing relevant business relationships, taking account of your role, reasonable expectations and privacy interests. Where applicable electronic marketing rules require prior consent, we obtain that consent before sending marketing communications.

When we obtain your information indirectly, we provide the required privacy information within one month, or at our first communication if that happens earlier, unless a legal exception applies. We identify where we obtained your information and whether it came from a publicly accessible source.

You can object to direct marketing at any time, without giving a reason. Reply to our message or contact contact@preemptsystems.com. We will stop using your information for direct marketing.

4. Website operation and contact form

Our website is hosted and delivered by Cloudflare. Visiting the website involves processing technical information such as your IP address, browser and device information, requested pages and access times.

Cloudflare processes this information to deliver the website, protect it against attacks and misuse, and investigate errors. Our legal basis is our legitimate interest in providing a functioning and secure website.

We do not use website analytics.

When you send the contact form, the information you enter is delivered to us by email through Resend, an email delivery service, and stored in our Proton Mail mailbox. Resend keeps a record of sent messages, including their content, for 30 days. We process this information for the purposes described in section 2.

To protect the contact form from automated abuse, the contact page uses Cloudflare Turnstile. It checks whether the visitor is a person by analysing technical signals such as your IP address, browser and connection characteristics. When you send the form, we pass Turnstile’s result and your IP address to Cloudflare for verification, and we reject the submission if verification fails. Cloudflare acts as our processor for this check. It also uses the signals as an independent controller to improve Turnstile, as described in the Turnstile Privacy Addendum. Our legal basis is our legitimate interest in keeping the contact form secure and free of spam.

5. Cookies

This website does not set cookies or use similar browser storage, so it does not ask for cookie consent.

Cloudflare may set a strictly necessary security cookie, such as __cf_bm, when it needs to tell people apart from automated traffic. You can manage cookies through your browser settings.

6. Advertising, newsletters and email tracking

We do not display third-party advertisements on this website or use advertising pixels to track visitors for targeted advertising.

We do not currently send newsletters.

We do not use tracking pixels to measure email opens or tracking links to measure clicks in our correspondence.

We may still send replies, relevant business introductions, and communications concerning evaluations, licensing, support or existing business relationships.

7. Service providers and other recipients

We use the following providers to support the activities described in this policy:

  • Cloudflare, Inc.: website hosting, content delivery, security, domain name services and bot protection for the contact form (Turnstile).
  • Plus Five Five, Inc. (Resend): delivering contact form submissions by email.
  • Proton AG: receiving, storing and sending email correspondence through Proton Mail.

These providers may use subprocessors to deliver their services. See Cloudflare’s subprocessor list and Resend’s subprocessor list.

We may also disclose relevant information to professional advisers or competent authorities where necessary to meet legal obligations or establish, exercise or defend legal claims.

We do not sell personal data.

8. International transfers

Our service providers may process personal data outside the European Economic Area.

Cloudflare, Inc. and Plus Five Five, Inc. (Resend) are based in the United States. Both are certified under the EU–U.S. Data Privacy Framework, and their data processing terms also provide for the European Commission’s standard contractual clauses. See Cloudflare’s Data Processing Addendum and Resend’s Data Processing Addendum.

Proton AG is based in Switzerland. Proton states that its Proton Mail servers are located in Switzerland, Germany or Norway. See the Proton Mail Privacy Policy.

Where personal data is transferred outside the EEA, we rely on an applicable adequacy decision or appropriate safeguards required by data protection law. You can contact us for information about the safeguards applicable to your data and, where relevant, a copy of them.

9. Your rights

Subject to the conditions in applicable data protection law, you may:

  • Request access to your personal data and information about its processing.
  • Ask us to correct inaccurate or incomplete information.
  • Request deletion or restriction of processing.
  • Object to processing based on legitimate interests because of your particular circumstances.
  • Object to direct marketing at any time.
  • Receive qualifying information in a portable format where processing is automated and based on consent or a contract.
  • Withdraw consent at any time where processing relies on consent.

To exercise your rights, contact contact@preemptsystems.com. We may request information reasonably necessary to verify your identity.

We normally respond within one month. Where the law permits an extension, we will explain the reason and inform you within that initial period. Further information is available in the European Data Protection Board’s guidance on individual rights.

You may lodge a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman.

10. Changes to this policy

We may update this policy when our services, processing activities or legal obligations change. The latest version will be published on this page with its revision date. Where required, we will provide additional notice of material changes.