Privacy Policy
Last updated: 14 November 2026.
1. Data controller
NWHS Group Oy
Email: info@nwhs.fi
Phone: +358 44 080 4930
2. PDF file processing
PDF Lite merges PDF files locally in the user's web browser. The contents of the selected PDF files are not uploaded to the PDF Lite server.
Users select their own files and can download the resulting PDF document to their device.
3. Usage statistics
The service collects aggregated usage statistics to monitor functionality and reliability.
Recorded events include page views, successful merges, failed merges, and usage limit events.
Daily event counters do not contain PDF file contents, file names, or user account information.
4. IP addresses and abuse prevention
The statistics endpoint processes the visitor's IP address to limit excessive requests.
A SHA-256 hash is generated using the IP address and a time value. This hash is used as an identifier for a temporary request counter.
Rate-limiting files are intended to be removed during automated cleanup when they are more than two hours old.
A hashed IP address may still constitute personal data. Technical server logs maintained by the hosting provider may also contain IP addresses and other connection information.
5. Purposes of processing
Technical information is processed to monitor service functionality, prevent abuse, and investigate technical issues.
6. Legal basis for processing
The legal basis for processing technical personal data is the controller's legitimate interests under Article 6(1)(f) of the EU General Data Protection Regulation.
These interests include maintaining service security and reliability, preventing abuse, and investigating technical issues. Data collection and retention are kept to a minimum where reasonably possible.
7. Cookies and advertising
Merging PDF files does not require a user account or advertising cookies.
Google AdSense advertising is planned for the service. Further information about advertising cookies, consent management, and related data processing will be provided before advertising is enabled.
8. Data retention
Daily usage statistics are retained for 365 days. Older files are removed by a daily cleanup task. Temporary hashed rate-limiting files are removed by an hourly cleanup task once they are more than two hours old. In practice, these files are generally retained for approximately 2–3 hours. The retention period for technical hosting provider logs is being confirmed separately.
9. Data subject rights
Under applicable data protection laws, individuals may have the right to access their personal data, request correction or deletion, and object to processing.
Privacy-related requests can be sent to info@nwhs.fi. Individuals also have the right to lodge a complaint with the competent data protection authority.