Privacy notice

Controller

Sihilisko · Business ID 3647026-6 · Finland. Privacy questions and requests: info@mibunlock.com.

Information Sihilisko uses

Depending on what you request or buy, this can include your name, email address, country, VAT number, delivery address, VIN or registration number, head-unit part number, problem description, desired domain, order and payment references, contract, subscription and hosted-service entitlement details, shipment updates, Web project briefs, uploaded logos and images, review decisions, messages and customer-portal activity.

When a public product demo is opened, Sihilisko may retain a keyed, shortened hash of the network address, coarse browser language, first and latest visit times, and a session count. The raw network address and user-agent string are not stored. Recognisable crawlers, link previews, monitors and command-line clients are excluded where possible.

Opening the opc2all.com page or its buy link is counted per day with a keyed hash of the network address and browser that changes every day and is deleted the next day; no cookies are set, no address is stored, and only the daily totals are kept, for up to two years.

Asking for a product demo by e-mail — Uplink on opc2all.com, Clarissan on clarissan.com, HelCAD on helcad.com — stores the e-mail address you enter, which product you asked about, when you asked, and whether and how often the link was used. The address is used to send that link and to show Sihilisko who asked. Sihilisko writes to it about that product only if you ticked the box for that. The link itself is stored only as a hash, and the pass that opens a hosted demo carries no address. These records are deleted after one year; ask info@sihilisko.com to have yours deleted sooner.

Purposes and legal bases

• To answer requests, form and perform contracts, take verified payment, deliver products and provide the customer portal: performance of a contract or steps requested before a contract.
• To retain invoices, payments and other mandatory records: compliance with legal obligations.
• To prevent abuse and protect the service: Sihilisko's legitimate interests in operating a secure shop.
• To understand whether public product demos and product pages are useful, using minimised and pseudonymised visit counts: Sihilisko's legitimate interest in improving its services.
• Marketing is sent only when separately requested and is never a condition of purchase.

Recipients

Information is disclosed only where needed to providers involved in the transaction or service, such as PayPal, hosting and email infrastructure, delivery providers and bookkeeping. These providers receive only the information needed for their role. Information is not sold.

International transfers

Some providers may process data outside the EU/EEA. Where this happens, Sihilisko uses the safeguards required by EU data-protection law, such as an adequacy decision or standard contractual clauses.

Retention

Uncompleted requests and unnecessary portal tokens are kept only as long as needed to handle the request and prevent abuse. Pseudonymised demo statistics are kept only while they remain useful for measuring the demos, then deleted. Contract, payment, tax and bookkeeping records are retained for the periods required by applicable law. Project briefs, uploads and messages are kept while the project or related support remains active, then removed or minimised when no longer needed. Closing portal access does not erase records that Sihilisko must retain.

Your rights

You may request access, correction, deletion, restriction or portability of your personal data, and object where processing is based on legitimate interests. The portal provides a data export and a deletion-request function. You may also complain to the Finnish Data Protection Ombudsman.

For purchases, see withdrawal and cancellation.

Required information

Email and the information marked as required are necessary to process the selected purchase or request. Without them Sihilisko cannot provide that transaction. Optional fields are labelled optional.

Portal sign-in

The portal uses short-lived, single-use email links and essential sign-in cookies. A HelCAD sign-in may also keep a short-lived handoff cookie in the browser that requested the link, so approving the email on a phone can open HelCAD on that browser. It does not create a marketing profile. Existing shop records are connected only after control of the matching email address has been verified.