1. Scope
This Privacy Notice applies to personal data processed by European International Group Oy in connection with the European Global Link website and EGL's business activities.
EGL's activities may include engineering and construction-related opportunities, feasibility and project studies, international trade and sourcing discussions, market and project development, and strategic partnership opportunities.
This notice applies to website visitors, persons making enquiries, representatives of customers and prospective customers, suppliers, contractors, consultants, project partners and other professional contacts.
2. Personal data we may process
Website enquiries and project planner
Depending on the information you provide, we may process:
- your name;
- company or organisation;
- job title or professional role, where provided;
- work email address;
- telephone number;
- country or market relevant to the enquiry;
- service or project area of interest;
- project scope, objectives, requirements and other information included in your message;
- communications and correspondence relating to the enquiry.
Business and project relationships
Where discussions develop into a commercial, supplier, project or partnership relationship, we may additionally process:
- professional contact and role information;
- meeting and communication records;
- project, proposal and procurement-related contact information;
- contract and transaction-related information;
- billing and administrative information;
- information reasonably required for counterparty, compliance or conflict checks, where applicable.
Technical website data
Our hosting infrastructure may process technical data such as IP address, browser and device information, request timestamps, server logs and security-related information.
3. Sources of personal data
We generally obtain personal data:
- directly from you when you contact EGL, use the project planner or correspond with us;
- from the organisation you represent, where it introduces you as a relevant contact;
- from contractual or project counterparties where necessary for a specific engagement;
- from publicly available professional or business sources where reasonably necessary for legitimate B2B relationship management, project development or due diligence.
4. Purposes and legal bases for processing
| Purpose | Typical legal basis |
|---|---|
| Responding to enquiries and project planner submissions | Steps taken at your request before entering into a contract and/or EGL's legitimate interest in responding to business enquiries and managing professional relationships. |
| Preparing proposals, scopes, commercial discussions and project planning | Pre-contractual measures, performance of a contract and/or legitimate interests in developing and managing business opportunities. |
| Managing customers, suppliers, consultants, contractors and project partners | Performance of a contract and EGL's legitimate interests in managing business, supplier and project relationships. |
| International trade, sourcing and partnership discussions | Pre-contractual measures, contractual necessity and/or legitimate interests in evaluating and carrying out requested commercial opportunities. |
| Compliance, record keeping, invoicing and accounting | Compliance with legal obligations and, where appropriate, legitimate interests in protecting EGL's legal and commercial position. |
| Website security, fraud prevention and technical troubleshooting | Legitimate interests in protecting our website, systems, users and business information. |
| Direct marketing, where used | Consent where required by law, or another lawful basis available for permitted business-to-business communications. Recipients can object or unsubscribe at any time. |
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and whether they are overridden by the rights and freedoms of the individual.
5. Projects, international trade and strategic partnerships
EGL's work may require project information to be discussed with selected suppliers, consultants, customers or potential commercial partners in order to assess feasibility, availability, sourcing, technical requirements or a possible partnership.
Where such information includes personal data, we limit disclosure to what is reasonably necessary for the relevant opportunity and use appropriate contractual, confidentiality and data-protection safeguards where required.
We do not sell personal data.
6. Recipients and service providers
Personal data may be processed by EGL personnel and by service providers or counterparties where access is necessary for a legitimate business purpose.
These categories may include:
- Hostinger – website hosting, server infrastructure and email services;
- IT, cybersecurity and technical service providers;
- professional advisers such as accountants or legal advisers where necessary;
- selected suppliers, consultants, contractors, customers or project partners where necessary for the enquiry, project or commercial opportunity;
- public authorities where disclosure is required by applicable law.
7. Transfers outside the European Economic Area
EGL has an international business focus, including markets outside the European Economic Area. Personal data may therefore need to be shared or accessed outside the EEA in connection with an international project, trade opportunity, supplier relationship or strategic partnership.
Where the GDPR requires safeguards for an international transfer, EGL will use an applicable transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses or another legally permitted safeguard or derogation appropriate to the circumstances.
We aim to limit international transfers of personal data to information that is necessary for the relevant business purpose.
8. How long we retain personal data
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, taking account of contractual, legal, accounting and dispute-resolution needs.
- General enquiries and project planner submissions: normally up to 24 months after the last meaningful interaction, unless the enquiry develops into an active business relationship.
- Active customer, supplier, project and partnership records: for the duration of the relationship and thereafter for the period reasonably required for contractual, legal or dispute-related purposes.
- Accounting and legally required records: for the retention period required by applicable law.
- Technical and security logs: for the period reasonably necessary for security, diagnostics and abuse prevention.
Data may be deleted earlier where it is no longer necessary and there is no lawful reason to retain it.
9. Cookies, logs and similar technologies
The EGL website may use technologies that are strictly necessary for website operation, security, form handling or technical functionality.
Server and hosting infrastructure may also generate technical logs for security, maintenance and troubleshooting.
If EGL later introduces non-essential analytics, advertising or marketing cookies or similar tracking technologies, we will provide the required information and, where legally required, obtain consent before those technologies are activated.
10. Information security
We use appropriate technical and organisational safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include:
- encrypted web connections;
- access controls and password-protected systems;
- limiting access to persons who need the information for their work;
- security logging and monitoring;
- software and infrastructure maintenance;
- data minimisation and deletion when information is no longer needed.
11. Your data protection rights
Depending on the circumstances and the legal basis for processing, you may have the right to:
- obtain confirmation as to whether we process personal data about you;
- request access to your personal data;
- request correction of inaccurate or incomplete information;
- request erasure of personal data where the legal conditions are met;
- request restriction of processing;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- receive certain personal data you provided in a structured, commonly used and machine-readable format where the right to data portability applies;
- withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact info@europeangl.com. We may request additional information where reasonably necessary to verify identity.
You also have the right to lodge a complaint with the competent supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman: tietosuoja.fi ↗.
12. Automated decision-making and profiling
EGL does not ordinarily use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
If this changes, affected individuals will be provided with the information and safeguards required by applicable law.
13. External services and links
The EGL website may contain links to third-party services, for example email, messaging or external business platforms. When you choose to use an external service, that provider may process personal data under its own privacy terms.
For example, if you choose to contact EGL through WhatsApp, the processing carried out by WhatsApp/Meta is subject to the provider's own privacy terms in addition to EGL's processing of the resulting business communication.
14. Changes to this Privacy Notice
We may update this Privacy Notice when our services, systems, business processes, service providers or legal requirements change.
The current version will be published on this page with the date of the latest update. Where a change materially affects existing processing, we will provide additional notice where appropriate.