Tuotos privacy notice
Privacy Notice
Controller
Tuotos
Business ID: 3100959-3
Privacy contact: hello@tuotos.com
Data we collect
We collect the information submitted through the pilot request form, such as name, work email, company name, role, company website, country, phone number, and information provided in message fields.
The pilot request form is provided using Tally. We may also process technical log data to ensure the security and functionality of the service and to prevent misuse.
Purposes of processing
We use the information to review pilot interest, respond to requests, prepare a possible pilot review, improve the Tuotos DNS & Email Exposure Review offering, and ensure service security.
Legal basis
The legal basis for processing is the controller's legitimate interest to process B2B contact requests, evaluate pilot requests, respond to inquiries, prepare a possible service, and ensure service security.
If we ask for separate consent, for example for marketing communications, processing is based on that consent. We do not add form submitters to a marketing list based only on a pilot request.
Safety boundaries
Do not submit secrets, credentials, internal asset lists, customer material, sensitive infrastructure details, or other confidential technical data through the public form.
No technical work starts without written authorization and verified scope.
Recipients of data
We may use service providers for processing personal data, such as form, hosting, email, and security services. These providers may process personal data on behalf of the controller.
Transfers outside the EU/EEA
If personal data is transferred outside the EU/EEA, we ensure that the transfer has a lawful basis under the GDPR and appropriate safeguards, such as the European Commission's Standard Contractual Clauses or another applicable transfer mechanism.
Retention
We keep form data only for as long as necessary for the purposes described above. If no customer relationship or other reason for further processing is established, we delete the data no later than 12 months after the last contact.
Your rights
You have the right to request access to your personal data, correction of inaccurate data, deletion of data, and restriction of processing. You also have the right to object to processing where the processing is based on legitimate interest.
If processing is based on consent, you may withdraw that consent at any time. Where applicable, you may also have the right to data portability.
Right to lodge a complaint
You have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you believe your personal data is processed in violation of data protection law.