Privacy Policy
Last updated: 13 October 2026
Who we are – the controller
This policy explains how GearMotive Oy handles personal data on the website gearmotive.com. GearMotive Oy is the controller of that data.
GearMotive Oy
Business ID: 2668249-2
Address: Jussintie 5, 85410 Sievi, Finland
E-mail: sales@gearmotive.com
Phone: +358 40 820 8969
This policy is based on the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and the Finnish Data Protection Act (1050/2018).
What data we collect
When you send a message through the contact form on our contacts page (/contacts/), we collect:
- your name
- your e-mail address
- your phone number (optional)
- your country
- your message
- if you choose to give them: details of your car and racing class, your current transmission, your engine model, power and torque, and the support case you describe
When you request a quote or configure a product through the forms on app.diiliputki.fi (linked from the quote and configure buttons on our site), the details you enter there are collected by DiiliPutki. See "Recipients and processors" below.
When you visit the website, the company that hosts and delivers it processes technical request data: your IP address, your browser and the page you requested.
Purposes and legal bases
We use personal data to answer enquiries, prepare and send quotes, deliver and support orders, and manage our customer relationships. We do not sell personal data and do not use it for advertising. We do not make automated decisions about you and do not profile visitors.
Our legal bases are:
- steps you ask us to take before entering into a contract, and performance of a contract, when you ask for a quote or place an order (GDPR Article 6(1)(b));
- our legitimate interest in answering general enquiries and keeping business contact with people who have contacted us or who buy from us, and in keeping the website secure and working, including the technical request data our host processes (Article 6(1)(f)). You can object to processing based on legitimate interest (see "Your rights");
- our legal obligation to keep accounting records (GDPR Article 6(1)(c)).
Your name, e-mail address (which you enter twice to confirm it) and country are required in the contact form so that we can answer you; without them we cannot handle your enquiry. The phone number and other details are optional. To quote or deliver an order we need the details necessary for the contract; without them we cannot make an offer or deliver.
Recipients and processors
Personal data may be disclosed to the following recipients:
- DiiliPutki, operated by Rasofi Oy, which processes enquiries and quotes on our behalf as our processor. When you send the contact form, your browser sends the details directly to DiiliPutki's server (a supabase.co address). DiiliPutki uses Supabase (database hosted in Stockholm, eu-north-1) as its sub-processor.
- Cloudflare, which hosts and delivers this website and processes technical request data (IP address, browser and requested page) to deliver and protect the site.
- YouTube (Google): the Videos page (/videos/) shows YouTube videos in privacy-enhanced mode (youtube-nocookie.com). Nothing is loaded from YouTube until you press play. When you press play, the video is loaded from Google, which receives your IP address and may store data on your device; Google's own privacy policy then applies to it.
- Service providers that help us deliver and invoice orders, such as carriers and our accounting service provider, and authorities where the law requires it.
Our pages link to other sites (social media, resellers). Their own privacy policies apply once you open them.
Transfers outside the EU/EEA
The DiiliPutki database is located in the EU (Stockholm). Our processor's service providers (for example Supabase, Inc. and Cloudflare, Inc.) are part of US-based groups, and Google is a US company, so personal data may be transferred to or accessed from the United States. These transfers rely on the EU–U.S. Data Privacy Framework where the company is certified under it, or otherwise on the European Commission's standard contractual clauses. You can ask us for information on the safeguards at sales@gearmotive.com.
Cookies and tracking
We do not use cookies for analytics, marketing or social media, and the site has no tracking code. Our own pages do not store anything on your device. Cloudflare, which delivers the site, may set a short-lived, strictly necessary security cookie (for example __cf_bm) to tell human visitors from automated bots and to protect the site. It is needed to provide the site securely, so it does not require your consent.
Playing a video on the Videos page loads it from YouTube; see "Recipients and processors".
Map on the Resellers page
The Resellers page shows a map. When you open the page, your browser loads the map's base layer (map tiles, place names, fonts and symbols) from OpenFreeMap (tiles.openfreemap.org), a service operated by Hyperknot Software Kft. in Hungary and delivered through the Cloudflare content delivery network. To deliver the map, your IP address, browser type, operating system and the address of our website (not the specific page) are sent to that service. The map does not set cookies or store anything else on your device, and we do not receive the data the map service logs. According to OpenFreeMap's privacy policy (https://openfreemap.org/privacy/), its access logs do not contain IP addresses by default, error logs that may contain them are deleted after 7 days, and IP address logging may be switched on for at most 30 days to investigate an attack or misuse. OpenFreeMap and Cloudflare handle this data under their own privacy policies. Our legal basis is our legitimate interest in showing the locations of our resellers on a map (GDPR Article 6(1)(f)). Map data is from OpenStreetMap contributors.
Retention
We delete or anonymise enquiries and quote requests that did not lead to a sale 24 months after our last contact with you. We keep customer data for as long as the customer relationship lasts. We keep accounting records, such as invoices, as the Finnish Accounting Act (1336/1997) requires: vouchers for 6 years and books for 10 years from the end of the financial year.
Your rights
Under GDPR Articles 15 to 21 you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process your data;
- object to our processing;
- receive your data in a portable format.
You may object to processing based on our legitimate interest on grounds relating to your particular situation. We answer your request within one month.
Send your request to sales@gearmotive.com. If you sent us an enquiry through the contact form, you can also anonymise your own data on your personal page, which you can open with the link you received after submitting the form ("Open your own page").
You have the right to lodge a complaint with the supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
Security
Data is transmitted encrypted over HTTPS. Access to the enquiries is limited to people who need it for their work at GearMotive and at our processor.
Changes
We may update this policy when needed. The date at the top shows when it was last updated.