Privacy policy

1. Controller

Service provider

Botcom Oy

Business ID

3270673-7

Public register

Finnish Trade Register (PRH)

VAT registration

Not registered for VAT (30 September 2026)

Address

Väinöläntie 2 B 25, 80140 Joensuu, Finland

Email

contact@botcom.fi

Merchant cooperation

iurii@parhainhinta.fi

Privacy enquiries: contact@botcom.fi.

2. Data we may process

• Technical server logs such as IP address, browser/device details, request time and requested page.
• Email address and tracked product from a previously requested price alert. Creation of new alerts is currently paused.
• Merchant-contact data, messages, feed URL and integration metadata for B2B onboarding.
• Visitor and usage data generated by Google Analytics only after consent. Google AdSense advertising is currently disabled.
• Favourites and comparisons stored locally in the browser normally do not leave the device.

3. Purposes and legal bases

• Operations and security: legitimate interests in protecting and operating the service.
• Price alerts: providing a service requested by the user.
• Merchant cooperation: Botcom Oy's legitimate interest in managing B2B contacts and integrations. Where the data subject is personally a party to the contract, processing may also be necessary for pre-contractual steps or contract performance.
• Analytics: consent. Google Analytics is not loaded before consent. Advertising is currently disabled pending an appropriate consent-management setup.

4. Sources

Data comes from users or merchant contacts, technical traffic to the service, and where relevant publicly available business-contact information for B2B communication. Where contact data was obtained from another source and is used to contact the person, we provide the information required by GDPR Article 14 no later than the first communication, unless an applicable exception applies.

5. Recipients and processors

We use hosting, database, email and analytics service providers. Google Analytics (Google Ireland Limited) may be enabled only with consent. Google AdSense advertising is currently disabled.

6. International transfers

Where a provider processes data outside the EU/EEA, we use an applicable GDPR transfer mechanism such as an adequacy decision or Standard Contractual Clauses.

7. Retention

We retain personal data only as long as needed for the stated purpose, security, contractual matters or legal obligations. Technical logs are subject to normal infrastructure log rotation; incident-related records may be retained longer where necessary to investigate an incident or legal claim. Consent choices are stored for up to 12 months. Price-alert data is retained while the alert is active or otherwise needed to provide the service.

8. Your rights

Depending on the situation, you may request access, correction, erasure or restriction, object to legitimate-interest processing, request portability and withdraw consent at any time. Contact contact@botcom.fi. We respond without undue delay and normally within one month as required by the GDPR; the period may be extended where the GDPR permits.

9. Supervisory authority

You may lodge a complaint with the Office of the Data Protection Ombudsman in Finland. Current contact details are available at tietosuoja.fi.

10. Automated decisions

We do not make decisions about users that produce legal or similarly significant effects within the meaning of GDPR Article 22.

Messages, reports and choices

Messages and content reports may include supplied contact details, message content, the reported URL and handling records. The basis is our legitimate interest in responding and correcting information, or a legal obligation for statutory reports. We retain these while handling the matter and afterwards only to demonstrate the outcome, handle a claim or meet a legal obligation.

Ordinary browsing does not require a name or email. Merchant-form details are needed for feed checks, integration processing and communication. Its checkbox confirms authority and cooperation terms, without analytics or marketing consent. Direct marketing can be opposed at any time without a reason.

Withdraw analytics consent through Cookie settings. This stops new collection and deletes accessible first-party Analytics cookies; it does not automatically erase data already collected by Google. Request erasure separately. Cookie expiry and analytics-server retention are separate.

Analytics may involve processing in the United States. Google describes transfer safeguards in its data processing terms. Ask the controller for details or a copy of applicable safeguards. Analytics consent does not replace a GDPR transfer mechanism.

Merchant links may pass through affiliate networks. Those operators may receive an IP address, link identifier and click time and are responsible under their own notices. Our consent does not consent to other websites’ cookies. Complex or numerous rights requests may allow up to two additional months; we explain the extension within the first month. You can complain to a competent authority where you live or work, or the Finnish Data Protection Ombudsman.