BRIGHTPLUS OY – PRIVACY POLICY

Last updated: 30 September 2026


Brightplus Oy (“Brightplus”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how Brightplus collects, uses, stores and protects personal data when you visit our website, submit a request through our Talk to us form, or otherwise interact with us through our website.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

1. Data Controller
The data controller responsible for the processing of your personal data is:
Brightplus Oy
Gneissikuja 5
90620 Oulu
Finland

Email: info@brightplus.com
Telephone: +358 20 7289 970
Business ID: 2627752-6


If you have questions about how we process your personal data or wish to exercise your data protection rights, please contact us at info@brightplus.com.

2. What Personal Data Do We Collect?
The personal data we collect depends on how you interact with our website.

2.1 Information you provide through our Talk to us form

When you submit a request through our Talk to us form, we may collect:

  • name;
  • work email address;
  • company;
  • role or job title, if provided;
  • information about what you are making, your material or side stream, depending on the relevant service or industry page;
  • information about the stage of your project;
  • any additional information you include in your message;
  • your request preferences, including whether you choose to receive occasional Brightplus news.

The form may also include technical or contextual information associated with your request, such as the relevant industry, product or service and the source from which the form was opened.
You are not required to provide optional information in the form. Required information is marked accordingly.
Please do not submit sensitive personal data or other information that is not necessary for your enquiry.

2.2 Information collected when you use our website
When you visit our website, certain technical information may be collected automatically, depending on your cookie and consent settings. This may include:

  • IP address or other technical identifiers;• browser type and version;
  • device type and operating system;
  • pages viewed;
  • interactions with the website;
  • date and time of visits;
  • approximate geographical information;
  • information about how you navigate and use the website.

Some of this information may constitute personal data under applicable data protection legislation.

3. How Do We Collect Personal Data?
We collect personal data when you

  • visit or use our website;
  • submit a request through our Talk to us form;
  • communicate with us by email or other communication channels;
  • choose to receive Brightplus news through the Talk to us form;
  • consent to the use of analytics cookies or similar technologies;
  • otherwise voluntarily provide information to us.

We may also receive technical information through service providers that support the operation of our website and analytics.

4. Why Do We Process Your Personal Data?
We process personal data only for specified and legitimate purposes.

4.1 Handling and responding to enquiries
We use information submitted through our Talk to us form to:

  • understand your enquiry;
  • respond to your request;
  • communicate with you regarding your project or requirements;
  • assess how Brightplus may be able to support you;
  • follow up on potential business cooperation;
  • provide information about relevant Brightplus products, services and solutions.

For example, depending on the page from which you contact us, your request may relate to textile coatings, packaging coatings or side-stream valorisation.


4.2 Developing customer and business relationships
We may process information provided through enquiries in order to:

  • evaluate potential business opportunities;
  • communicate with prospective customers and partners;
  • understand customer and market needs;
  • develop our products, services and solutions;
  • maintain our business relationships.

4.3 Website analytics and development
We use Google Analytics 4 (GA4) to understand how visitors use our website and to help us improve:

  • website content;
  • website functionality;
  • user experience;
  • website performance; our digital communication.


4.4 Sending occasional Brightplus news
The Talk to us form may include an optional checkbox allowing you to request occasional news about a relevant Brightplus topic or service.

If you select this option, we may use the contact information you provide to send you such communications.

You may withdraw your consent or unsubscribe from these communications at any time.

5. Legal Bases for Processing
Depending on the circumstances, we process personal data on the following legal bases under the GDPR.


5.1 Legitimate interests
We may process personal data where this is necessary for our legitimate interests and those interests are not overridden by your rights and interests.


Our legitimate interests may include:

  • responding to business enquiries;
  • communicating with potential customers, partners and other business contacts;
  • developing customer and business relationships;
  • developing our products and services;
  • operating and improving our website;
  • maintaining website security;
  • conducting appropriate B2B communications and marketing.

5.2 Consent
We rely on consent where consent is required, including for:

  • certain non-essential cookies and analytics technologies;
  • receiving occasional Brightplus news where you have actively selected this option.

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.3 Contract
We may process personal data where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.

5.4 Legal obligation
We may process personal data where processing is necessary to comply with a legal obligation applicable to Brightplus.

6. Talk to Us Form
Our Talk to us form is designed to make it possible for you to contact the relevant Brightplus team directly.

Depending on the page and service you are contacting us about, the form may ask for:

  • your name;
  • work email;
  • company;
  • role;
  • information about what you are making or about your side stream;
  • the stage of your project;
  • additional information or a message.

The information is used to understand and respond to your request and, where relevant, to assess potential cooperation.

Some information in the form is optional. You can choose whether to provide optional information.

The form may also contain technical fields identifying the relevant industry, product or source of the request. These fields help us understand the context of an enquiry and route or handle it appropriately.

Information submitted through the form is not used for unrelated purposes.

7. Brightplus News
The Talk to us form may include an optional checkbox such as:
“Send me occasional news on textile coatings.”
or
“Send me occasional news on side-stream valorisation.”

If you actively select this option, you are asking Brightplus to send you occasional information related to the relevant topic.

This processing is based on your consent.

You can unsubscribe from these communications at any time. Each marketing communication will provide an appropriate way to unsubscribe.

Withdrawing your consent will not affect the processing carried out before the withdrawal.

8. Google Analytics 4

We use Google Analytics 4 (GA4) to analyse how visitors use our website.
GA4 is provided by Google.
Depending on our configuration and your consent choices, Google Analytics may process information such as:

  • information about your interaction with our website;
  • pages and content viewed;
  • events and interactions;
  • device and browser information;
  • approximate geographical information;
  • technical identifiers and usage information.

Google provides privacy controls for Google Analytics, including controls concerning data retention, granular location and device data, Google Signals and advertising-related features.

The exact information collected depends on our GA4 configuration and the consent choices made by the website visitor.

We do not intentionally send directly identifying information, such as names or email addresses submitted through the Talk to us form, to Google Analytics.

9. Google Tag Manager
We use Google Tag Manager (GTM) to manage and deploy tags and measurement technologies on our website.

Google Tag Manager itself is a tag management system. It allows us to manage website tags, including the tags used for Google Analytics.

The use of tags that process personal data or access non-essential cookies is governed by the applicable consent settings on our website.

Where applicable, Google consent signals are used to communicate the visitor’s choices to Google services.

Google’s Consent Mode allows Google tags to adjust their behaviour based on the visitor’s consent choices.

10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.

Some technologies may be necessary for the website to function properly. Other technologies, including analytics technologies, may require your consent depending on their purpose and applicable law.

We use Google Analytics 4 for website analytics and Google Tag Manager to manage website tags.

Where required, we ask for your consent before using non-essential cookies or similar technologies.

You can manage your cookie preferences through the cookie consent mechanism provided on our website.

You can also configure your browser to block or delete cookies. However, disabling certain cookies may affect the functionality of the website.

For detailed information about the cookies used on our website, please see our Cookie Policy.
https://brightplus.com/cookie-policy

11. Who Has Access to Your Personal Data?
Personal data may be accessed by Brightplus employees and authorised personnel where this is necessary for their work.
We may also use carefully selected service providers to support our business and website.
Depending on the services used by Brightplus, these may include providers of:

  • website hosting and technical infrastructure;
  • website maintenance and development;
  • Google Analytics and website analytics;
  • Google Tag Manager and tag management;
  • email and communication services;
  • IT and information security services.

These service providers process personal data only to the extent necessary to provide their services to Brightplus and are required to protect the data in accordance with applicable data protection requirements.

We may also disclose personal data where required by law, a competent authority or a legal process.

We do not sell your personal data.

12. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection legislation.

Depending on the circumstances, safeguards may include an adequacy decision by the European Commission, Standard Contractual Clauses or another lawful transfer mechanism.

Information about Google’s data processing and international data transfer arrangements is available in Google’s applicable privacy and contractual documentation.

13. How Long Do We Keep Your Personal Data?
We keep personal data only for as long as it is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Talk to us enquiries

Information submitted through the Talk to us form is retained for as long as reasonably necessary to:

  • respond to the enquiry;
  • follow up on potential business cooperation;
  • maintain the relevant business relationship; and
  • comply with applicable legal or contractual obligations.

When the information is no longer necessary, it will be deleted or anonymised in accordance with our data retention practices.

Brightplus news
If you have opted in to receive Brightplus news, your contact information will be retained for this purpose until you unsubscribe, withdraw your consent or the information is otherwise no longer required.

Google Analytics
The retention period for user-level and event-level data in Google Analytics is determined by the settings configured in Brightplus’s GA4 property.

Google Analytics 4 data retention
Google Analytics 4 retains user-level data for 14 months and event-level data for 2 months, in accordance with the retention settings configured for Brightplus’s Google Analytics 4 property. After the applicable retention period, the relevant data is automatically deleted.

Google states that GA4 properties allow a data retention setting of 2 or 14 months for user-level and event-level data. The setting does not affect standard aggregated Google Analytics reporting.

14. Your Data Protection Rights
Depending on the circumstances, you have the following rights under the GDPR:

Right of access
You have the right to request access to the personal data we hold about you and information about how we process it.

Right to rectification
You have the right to request that inaccurate or incomplete personal data be corrected.

Right to erasure
In certain circumstances, you have the right to request that we delete your personal data.

Right to restriction of processing
In certain circumstances, you have the right to request that we restrict the processing of your personal data.

Right to object
You may have the right to object to processing based on our legitimate interests.
You also have the right to object to direct marketing at any time.

Right to data portability
Where applicable, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.

Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

These rights are recognised under the GDPR and are intended to give individuals greater control over how their personal data is processed.

15. How to Exercise Your Rights
If you wish to exercise your rights or have questions about our processing of your personal data, please contact us:

Email: info@brightplus.com
Telephone: +358 20 7289 970

We may need to verify your identity before responding to a request in order to protect your personal data.

We will normally respond to a request within one month of receiving it. Where permitted by the GDPR, this period may be extended by up to two further months if the request is particularly complex or numerous. We will inform you if an extension is necessary.

Requests relating to your data protection rights are generally handled free of charge. The GDPR provides limited exceptions for manifestly unfounded or excessive requests.

16. Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration and other unlawful or unauthorised processing.

The measures we use depend on the nature of the personal data and the risks associated with its processing.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

17. Third-Party Websites
Our website may contain links to websites or services operated by third parties.

This Privacy Policy applies only to Brightplus’s processing of personal data.

We are not responsible for the privacy practices or content of third-party websites.

We recommend reviewing the privacy information of any third-party website before providing personal data to it.

18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:

  • our website;
  • our services;
  • our data processing activities;
  • technologies used on our website; or
  • applicable legislation.

The latest version will always be published on this page.

We encourage you to review this Privacy Policy periodically.

19. Right to Lodge a Complaint
If you believe that Brightplus has not processed your personal data in accordance with applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.

In Finland, the supervisory authority is:
Office of the Data Protection Ombudsman
Website: https://tietosuoja.fi/en


You may also contact the supervisory authority in the EU Member State where you live, work or where you believe an infringement has occurred.

20. Contact Information
If you have any questions about this Privacy Policy or Brightplus’s processing of personal data, please contact us:

Brightplus Oy
Gneissikuja 5
90620 OuluFinland

Email: info@brightplus.com
Telephone: +358 20 7289 970

Last updated: 30 September 2026