Privacy policy
Updated 19 July 2026. This notice explains how PowerNest Solutions Oy processes personal data of online-store customers, people contacting us and website users.
1. Controller and contact details
The controller is PowerNest Solutions Oy. Privacy requests can be sent to info@powernest.fi.
2. Personal data we process
- name, address, telephone number, email address and service language;
- order, delivery, return, warranty and customer-service data;
- company name, Business ID and contact-person details for business customers;
- site, consumption, roof, electrical-connection and installation data supplied for a proposal or implementation;
- payment status, payment method, transaction identifier and fraud-prevention data; PowerNest does not receive the full card number from Stripe;
- IP address, browser and device information, logs, cookie choices and website-use data;
- messages, consents and other information provided by the customer.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing orders, payments, delivery, returns, warranty and customer service | Entering into and performing a contract |
| Invoicing, accounting, taxation, product safety and authority obligations | Legal obligation |
| Preparing proposals and responding to enquiries | Pre-contractual steps or legitimate interests |
| Information security, prevention of misuse, logs and service development | Legitimate interests |
| Non-essential analytics and marketing | Consent |
4. Sources of data
We obtain data mainly from the customer, use of the online store, payment-service providers, delivery and installation partners and, where necessary, public business registers.
5. Recipients and service providers
Data may be disclosed or made available for processing only to the extent necessary:
- Stripe and banks or payment services participating in the payment;
- hosting, ecommerce, security, email and IT service providers;
- carriers, warehouses, manufacturers, importers, installers and service partners;
- accounting, tax, legal and insurance service providers;
- authorities where required by law.
6. Transfers outside the European Economic Area
Some service providers may process data outside the European Economic Area. Where this occurs, we use safeguards required by applicable data-protection law, such as an adequacy decision, the European Commission’s standard contractual clauses and supplementary measures.
7. Retention periods
- order and contract data is retained for the time required by the contract, warranty, statutory liability for defects and legal claims;
- transaction vouchers and related accounting material are generally retained for at least six years and certain accounting records for at least ten years under Finnish accounting requirements;
- proposal and enquiry data is normally retained for no more than 24 months after the last active contact unless a contract is formed or longer retention is justified;
- security and technical logs are retained only for as long as necessary;
- consent-based data is processed until consent is withdrawn or the data is no longer needed.
8. Your rights
You may have the right to access, correct or erase personal data, restrict processing, object to processing based on legitimate interests, receive certain data in a portable format and withdraw consent. Send requests to info@powernest.fi. We may request additional information to verify identity.
You may lodge a complaint with the Office of the Data Protection Ombudsman in Finland if you believe that processing infringes data-protection law.
9. Payments and automated checks
Stripe may perform automated fraud and security assessments to protect a payment transaction. Acceptance or rejection of a payment may be based on checks made by Stripe, the card issuer or another payment service.
10. Security
We use technical and organisational measures such as access controls, encrypted connections, backups and system updates. No system can, however, be guaranteed completely risk-free.
11. Required information
Information required for delivery and performance of the contract must be provided. Without it, we may be unable to process an order, deliver a product or prepare a proposal. Creating a customer account is not required for an individual online-store purchase.
12. Changes
We may update this notice when services, providers or legislation change. The latest version is published on this page.