Privacy Policy
H&W Biotech Oy
Last updated: 3 November 2026
H&W Biotech Oy (“H&W”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, make an enquiry, or use our products and services.
1. Data Controller
H&W Biotech Oy
Address: Tekniikantie 12, 02150 Espoo, Finland
Email: [email protected]
Website: https://healthwing.fi
H&W Biotech Oy is responsible for the personal data processing described in this Privacy Policy.
2. Personal Data We Collect
Depending on your interaction with us, we may collect:
-
Contact information: Name, company name, email address, telephone number, and preferred contact method.
-
Communication information: Enquiries, messages, quotation requests, and related correspondence.
-
Customer information: Customer account details, orders, billing and delivery information, and transaction records, where applicable.
-
Technical information: IP address, browser and device information, cookies, and website usage information.
We collect personal data that you provide voluntarily, as well as certain technical information generated when you use our website.
Please do not include sensitive personal information, such as medical or health information, in our general contact form.
3. Contact Forms and Business Communication
When you contact H&W Biotech Oy through our website, email, telephone, or other communication channels, we receive and may store the personal information you provide.
By submitting a contact form on our website, you acknowledge that H&W Biotech Oy will receive and process your contact information to respond to your enquiry and follow up on related business matters, as described in this Privacy Policy.
We may use your contact information to:
-
Respond to questions and enquiries.
-
Provide requested product or service information.
-
Prepare and send quotations.
-
Communicate about products or services relevant to your enquiry.
-
Follow up on related business opportunities and discussions.
-
Maintain records of relevant business correspondence.
We may contact you by email or telephone, taking into account your indicated contact preferences.
Submitting an enquiry does not automatically subscribe you to unrelated marketing newsletters or promotional communications.
Providing information through our contact form is voluntary. However, without sufficient contact details, we may be unable to respond to your enquiry.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes and under the following GDPR legal bases:
Legitimate interests — Article 6(1)(f)
To respond to enquiries, maintain relevant business communication, follow up on customer requests, manage business relationships, and protect our website and systems.
Our legitimate interests are balanced against the rights and freedoms of individuals.
Contractual necessity — Article 6(1)(b)
To take steps requested by an individual before entering into a contract, or to perform a contract with that individual, where applicable.
Legal obligations — Article 6(1)(c)
To comply with applicable legal requirements, including accounting and taxation obligations.
Consent — Article 6(1)(a)
Where required, for activities such as certain direct marketing communications and the use of non-essential cookies.
Where processing is based on consent, you may withdraw it at any time without affecting processing lawfully carried out before withdrawal.
5. Marketing and Customer Communication
We may communicate with existing and potential customers regarding their enquiries, quotations, orders, and related business matters.
Direct marketing communications are sent only where permitted under applicable data protection and electronic communications laws, including where valid consent is required.
Submitting a contact form does not, by itself, constitute consent to receive unrelated marketing messages.
You may object to direct marketing at any time by contacting [email protected] or using an unsubscribe method provided in a marketing message.
6. Sharing and International Transfers of Personal Data
We may share personal data with authorised personnel and service providers where necessary for business operations, including:
-
Website hosting and IT service providers.
-
Email and communication service providers.
-
Customer relationship management and business software providers.
-
Payment, delivery, and accounting service providers, where applicable.
-
Professional advisers and public authorities where necessary or legally required.
Service providers acting on our behalf must process personal data in accordance with applicable data protection requirements.
Where personal data is transferred outside the European Economic Area (EEA), we use an appropriate legal transfer mechanism, such as a European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where required.
You may contact us for information about applicable transfer safeguards.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
Contact information and correspondence may be retained while an enquiry or business relationship remains active and for a reasonable period afterwards to manage relevant follow-up.
For enquiries that do not result in an ongoing business relationship, our standard retention period is up to 24 months after the last substantive communication, unless a longer period is justified by legal obligations or a documented legitimate need.
Customer, contractual, and financial records may be retained for longer where required by applicable law or necessary for the establishment, exercise, or defence of legal claims.
We delete or anonymise personal data when it is no longer required.
8. Cookies and Website Analytics
Our website uses cookies and similar technologies to provide essential website functionality, maintain security, and, where enabled, analyse website usage.
Strictly necessary cookies may be used without consent where permitted by law.
We request consent before using non-essential cookies where consent is legally required.
Visitors can manage or withdraw cookie consent through the cookie preference controls available on our website.
Additional information about individual cookies and their purposes is provided through our cookie information and preference controls.
9. Your Rights Under GDPR
Subject to applicable legal conditions, you have the right to:
-
Request access to your personal data.
-
Request correction of inaccurate or incomplete data.
-
Request deletion of your personal data.
-
Request restriction of processing.
-
Object to processing based on legitimate interests.
-
Request data portability where applicable.
-
Withdraw consent where processing is based on consent.
-
Object to the processing of your personal data for direct marketing at any time.
To exercise your rights, please contact [email protected].
We normally respond within one month, subject to extensions permitted by the GDPR.
You also have the right to lodge a complaint with the Finnish Office of the Data Protection Ombudsman:
10. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, and misuse.
Access to personal data is limited to authorised personnel and service providers who require it for legitimate business purposes.
11. Children’s Privacy
Our website and general business enquiry services are not specifically directed at children.
We do not intentionally solicit children’s personal information through our general contact forms.
If you believe that a child has provided personal data inappropriately, please contact us.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our operations, services, or legal obligations.
The latest version will be published on our website with the updated date.
13. Contact Us
For questions about this Privacy Policy, personal data processing, or your GDPR rights, please contact:
H&W Biotech Oy
Tekniikantie 12, 02150 Espoo, Finland
Email: [email protected]
Website: https://healthwing.fi