Privacy policy – Tirppa market research and customer register
This privacy policy, written in line with the EU General Data Protection Regulation (GDPR), explains how we process your personal data.
Last updated: 5 October 2026
1. Data controller
Tirppa Solutions Oy (Business ID 3612724-9)
Address: Knuuttilanraitti 259, 62310 Voltti, Finland
Contact person in privacy matters: Samuli Räty-Mattila, info@tirppa.fi
2. Name of the register
Register of Tirppa market research, the PARVI platform interest survey, the website waitlist, contact requests sent through the website and potential customers.
3. Purpose and legal basis of processing personal data
- Conduct and analyse market research related to agricultural drones and precision farming (for investor communication and business development).
- Develop services (PARVI platform and Tirppa ecosystem).
- Maintain contact and communicate the progress of the new technology's test phase and commercialisation to those who have separately consented to it, for example by joining the waitlist on our website.
- Respond to contact requests sent through the website's contact forms (farmers, drone contractors, investors and partners).
4. Contents of the register
- Contact information: Email address (optional).
- Survey responses: The professional role indicated by the respondent (e.g., farmer/contractor), farm size category, type of production, and opinions and views on agricultural challenges and new technologies.
- Email address.
- The language version of the website used to sign up, and the time of signing up.
- Name, email address and, optionally, phone number and company or organisation.
- The answers given in the form, such as location, field area, crops, the jobs they are interested in, their contracting business or their role, and a free-form message.
- The language version of the website used.
Note: Market research results and statistics are presented to investors and publicly only in a completely anonymised form (e.g., "X% of farmers with over 100 ha consider soil compaction a problem"), and individual respondents cannot be identified from them.
5. Regular sources of information
Data is regularly obtained directly from the data subject: via an online Google Forms questionnaire when answering the survey, and via the waitlist and contact forms on tirppa.fi.
6. Regular disclosures of data and transfers outside the EU/EEA
Data is not sold, rented, or regularly transferred to third parties for direct marketing purposes.
We use Google services: Google Forms for surveys, Google Apps Script for processing the waitlist and contact forms (waitlist details are forwarded as an email to our company's Google Groups mailbox, and contact requests to our company's email), and Google Firebase Hosting for the website, which processes technical data needed to deliver the site, such as IP addresses. Data may therefore technically be transferred to Google's servers in the United States. Google LLC is committed to complying with the EU-US Data Privacy Framework (DPF) and uses Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of data protection outside the EU.
7. How the register is protected
The register is handled confidentially. Electronically processed data is stored on secure cloud servers. Access to the register data is restricted to the data controller's employees or subcontractors who need to process it for their work and are authorised to do so. Access to the data is protected with usernames, passwords, and two-factor authentication.
8. Retention period for personal data
- The raw market research data in Google Forms is deleted as soon as the responses have been moved to a secure location and analysed (no later than 6 months after the survey ends).
- Statistical data is kept permanently, but it is completely anonymised and is no longer considered personal data.
- Email addresses, including those of waitlist members, are kept on a separate lead list as long as the person is a subscriber, or until they withdraw their consent, but for no more than 24 months after the information was provided if there has been no further contact.
- Contact requests are kept in our email for as long as needed to handle the matter and any customer relationship that follows, but for no more than 24 months after the last contact.
9. Rights of the data subject
- Obtain confirmation as to whether personal data concerning them are being processed, and the right to inspect this data.
- Request the correction of inaccurate or incorrect personal data.
- Withdraw their consent and request the deletion of their data ("right to be forgotten").
- Demand the restriction of processing of their personal data or object to its processing.
- Receive the personal data they have provided in a structured, commonly used and machine-readable format, and transfer it to another controller.
If you feel that we have violated data protection legislation, you have the right to file a complaint with the Data Protection Ombudsman (www.tietosuoja.fi).
10. Cookies and web analytics
Our website uses Google Analytics to track visitor traffic and improve our services. We collect analytics data only if you have given explicit consent in the cookie banner.
If you accept cookies, Google Analytics collects anonymous statistical data about site usage (such as visitor numbers, popular pages, time spent, and devices). IP addresses are anonymised, and individual users cannot be identified from the collected data. Google may transfer and store this data on its servers in the United States (protected by EU-approved mechanisms).
We also store your cookie choice and your language choice in your browser's local storage, so we don't have to ask again. This information stays on your device and is not sent to us.