Privacy Policy
Last updated: September 2026
​
Atmas Group Oy (“Atmas Group”, “Atmas”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act and other applicable data protection legislation.
This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, contact us, submit an inquiry, request information or a quotation, purchase our products or services, participate in projects with us, or otherwise interact with Atmas Group.
1. Data Controller
The controller responsible for the processing of personal data covered by this Privacy Policy is:
Atmas Group Oy
Arielinkatu 2
00540 Helsinki
Finland
Email: info@atmasgroup.com
Website: www.atmasgroup.com
For questions concerning privacy, personal data or the exercise of your data protection rights, please contact us at info@atmasgroup.com.
2. Personal Data We May Collect
Depending on how you interact with Atmas Group, we may collect and process the following categories of personal data:
Contact and professional information
-
Name
-
Company or organization
-
Job title or professional role
-
Business address
-
Email address
-
Telephone number
-
Country or region
Business and customer information
-
Inquiries and requests for information
-
Product and service interests
-
Quotations and commercial correspondence
-
Orders and contractual information
-
Project-related information
-
Delivery and billing information
-
Customer and supplier records
-
Technical support and after-sales communications
Website and technical information
-
IP address
-
Browser and device information
-
Website usage and interaction data
-
Referring website
-
Cookie identifiers and similar technical information
-
Analytics information, subject to applicable consent requirements
Communication information
-
Emails and other correspondence with us
-
Information submitted through website forms
-
Meeting and event-related information
-
Marketing preferences and consent records
We do not intentionally request special categories of personal data through our website. Please do not submit unnecessary sensitive personal information through our contact forms.
3. Why We Collect Your Contact Information
When you contact Atmas Group or submit a form through our website, we use your contact information primarily to respond to your inquiry and provide the requested information, quotations, products, services, technical assistance or other support.
To ensure appropriate local or technical assistance, your inquiry and relevant contact details may be shared with an authorized Atmas Group distributor, partner or representative responsible for your country, region, product or project.
We do not sell your personal information.
We do not disclose personal information to unrelated third parties for their own independent marketing purposes. Personal data may, however, be shared with service providers and other parties where necessary to operate our business, provide requested products or services, comply with legal obligations or for the other purposes described in this Privacy Policy.
By submitting a website form, you acknowledge that Atmas Group Oy will process your personal data for the purposes described in this Privacy Policy.
Where consent is legally required for a particular processing activity, we will request that consent separately.
4. How We Collect Personal Data
We may collect personal data directly from you when you:
-
Submit a website contact form;
-
Send us an email or contact us by telephone;
-
Request a quotation or technical information;
-
Purchase products or services;
-
Enter into a business relationship with Atmas Group;
-
Attend meetings, exhibitions, conferences or other business events;
-
Subscribe to marketing communications; or
-
Otherwise communicate or interact with us.
We may also receive business contact information from legitimate third-party sources, including authorized Atmas Group distributors and representatives, project partners, customers, suppliers and other business partners, as well as publicly available professional or business sources.
5. Purposes and Legal Bases for Processing
We process personal data only where we have an appropriate legal basis.
Inquiries, Quotations and Project Requests
We process contact information, communications and relevant business information to respond to inquiries, provide technical information, prepare quotations and discuss potential projects.
Legal basis: taking steps at your request before entering into a contract and/or our legitimate interest in responding to customers and business contacts and conducting our business.
Products, Services and Projects
We process information necessary to manage orders, contracts, projects, deliveries, technical support, warranties and other customer services.
Legal basis: performance of a contract and/or our legitimate business interests.
Customer, Distributor, Partner and Supplier Relationships
We process business contact information and correspondence to manage relationships with customers, distributors, representatives, suppliers, manufacturers, contractors and project partners.
Legal basis: performance of a contract and/or our legitimate interest in managing and developing our business relationships and operations.
Accounting and Legal Requirements
We process information where necessary for invoicing, accounting, taxation, regulatory compliance, record keeping and other legal requirements.
Legal basis: compliance with legal obligations.
Website Operation and Security
We may process technical information to operate, secure, troubleshoot and improve our website and online services.
Legal basis: our legitimate interest in maintaining a secure, functional and effective website.
Where non-essential cookies or similar technologies require consent, such processing is based on consent.
Marketing and Business Communications
We may provide customers and professional business contacts with information about Atmas Group products, technologies, services, projects, exhibitions and other relevant business developments where permitted by applicable law.
Depending on the circumstances, processing may be based on your consent or our legitimate interest in maintaining appropriate communications with existing customers and relevant professional contacts, subject to applicable electronic marketing requirements.
You may unsubscribe from marketing communications at any time.
6. Sharing Personal Data
We do not sell personal data.
Where necessary and appropriate, we may share personal data with:
-
Authorized Atmas Group distributors and representatives;
-
Project partners and contractors;
-
Manufacturers and suppliers;
-
Logistics and delivery providers;
-
IT, website, hosting, cloud and communications service providers;
-
Customer relationship management and email service providers;
-
Website analytics and technology providers;
-
Accounting, banking and payment service providers;
-
Professional advisers, including legal, accounting and compliance advisers; and
-
Public authorities where disclosure is required by law.
Because Atmas Group operates internationally, an inquiry or project may be handled together with an authorized distributor, representative or partner responsible for the relevant country, region, product or project.
In these circumstances, we may provide relevant contact and project information to that party where necessary to respond to your inquiry, prepare a quotation, provide local or technical support, execute a project or deliver requested products or services.
7. International Transfers
Atmas Group is headquartered in Finland and operates internationally through customers, distributors, representatives, suppliers and project partners.
Personal data may therefore be processed or made accessible outside Finland and, where necessary, outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA and GDPR requirements apply to the transfer, we use an appropriate lawful transfer mechanism. Depending on the circumstances, this may include:
-
A European Commission adequacy decision;
-
European Commission Standard Contractual Clauses (SCCs); or
-
Another transfer mechanism permitted under applicable data protection legislation.
Where appropriate, additional technical, contractual or organizational safeguards may also be used.
For further information concerning safeguards applicable to transfers of your personal data, contact info@atmasgroup.com.
8. Website and Third-Party Services
Our website may use third-party technologies and service providers for website hosting, security, forms, communications, analytics, embedded content and other website functionality.
These may include services provided by Wix and Google, depending on the technologies and features currently enabled on our website.
Third-party websites linked from our website operate according to their own privacy policies. Atmas Group is not responsible for the privacy practices of independent third-party websites or services.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to operate correctly. Other technologies, including certain analytics, functionality or marketing cookies, are used subject to applicable consent requirements.
Where consent is required, non-essential cookies are used only after the appropriate consent has been obtained.
You can manage or withdraw your cookie choices through the cookie settings available on our website.
For further information, please see our Cookie Policy.
10. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable contractual, accounting, tax, warranty, regulatory and legal requirements.
Retention periods depend on the type of information and our relationship with you.
For example:
-
General inquiries are retained for as long as reasonably necessary to respond and conduct appropriate business follow-up;
-
Customer, quotation, project and contractual information may be retained throughout the business relationship and afterwards where necessary for contractual, warranty, legal or legitimate business purposes;
-
Accounting and transaction records are retained for the periods required by applicable legislation;
-
Marketing information is retained until consent is withdrawn, an objection is made or the information is otherwise no longer required; and
-
Website and technical information is retained according to the purposes and settings of the relevant technologies.
When personal data is no longer required, it is deleted, anonymized or otherwise appropriately disposed of.
11. Data Security
We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, misuse, alteration, disclosure or destruction.
Access to personal data is limited to persons and service providers who require the information for legitimate business purposes.
However, no internet transmission, electronic communication or data storage system can be guaranteed to be completely secure.
​
12. Your Data Protection Rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
-
Access personal data concerning you;
-
Request correction of inaccurate or incomplete personal data;
-
Request erasure of personal data;
-
Request restriction of processing;
-
Object to processing based on legitimate interests;
-
Object to direct marketing at any time;
-
Request data portability where applicable;
-
Withdraw consent at any time where processing is based on consent; and
-
Lodge a complaint with a competent data protection supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.
To exercise your rights or ask a question concerning your personal data, contact:
We may request reasonable information necessary to verify your identity before fulfilling a request.
13. Supervisory Authority
You have the right to lodge a complaint with a competent supervisory authority if you believe that your personal data has been processed contrary to applicable data protection legislation.
In Finland, the competent authority is:
Office of the Data Protection Ombudsman
Tietosuojavaltuutetun toimisto
Finland
Depending on your circumstances, you may also have the right to contact a competent supervisory authority in another EU or EEA country.
14. Providing Personal Data
You are generally not required to provide personal data simply to browse our website.
However, certain information may be necessary for us to respond to an inquiry, prepare a quotation, process an order, enter into or perform a contract, arrange delivery, provide technical support or otherwise provide requested products or services.
If required information is not provided, we may be unable to respond fully to your request or provide the requested product or service.
15. Automated Decision-Making
Atmas Group does not use personal data collected through this website to make decisions based solely on automated processing, including profiling, that produce legal effects concerning an individual or similarly significantly affect an individual.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our operations, services, website technologies or applicable legal requirements.
The latest version will be published on this page together with the date of the latest update.
17. Contact
For questions regarding this Privacy Policy, our processing of personal data or your data protection rights, please contact:
Atmas Group Oy
Arielinkatu 2
00540 Helsinki
Finland
Email: info@atmasgroup.com
Website: www.atmasgroup.com