Privacy policy

Updated

This site collects personal data in two places. They are the contact form and the intake call booking. Below is what I collect, why, who sees it and how you get it removed.

Data controller

I handle everything that comes in through this site myself. Questions about data protection go to the same address as everything else.

What I collect

  • Contact form. Name and email are required, because without them I cannot reply. Company and the description of your situation are optional.
  • Intake call booking. Name, email and the time you choose. The booking is made in Calendly and the details are given there.
  • The form service records the time of the submission and the IP address, to block spam.
  • The web server records ordinary log data such as the time of the request and the IP address.

Do not put confidential details in the form. We go through those on the call.

What I use the data for, and on what basis

I use the data only to reply to you and to have a conversation about a possible engagement. I do not use it for marketing. I do not sell it or pass it on.

The legal basis is steps taken at your request prior to entering a contract, Article 6(1)(b) of the GDPR. Secondarily it is the legitimate interest of replying to an enquiry, Article 6(1)(f).

I do not ask for separate consent, because consent is not the right basis here. When you send the form you are asking me to get in touch, and replying is what that requires.

Who processes the data

I use three services. They process the data on my behalf and may not use it for their own purposes.

  • Formspree, United States. Receives form submissions and forwards them to my email.
  • Calendly, United States. Receives intake call bookings.
  • Cloudflare, United States. Serves the site, records ordinary server logs and counts visitor numbers.

Transfers to the United States rely on the EU standard contractual clauses or on the EU–US Data Privacy Framework, depending on which the provider has committed to.

Cookies and analytics

This site uses no cookies. It stores nothing in your browser. Fonts and images come from the same server as the page.

Visitor numbers are measured with Cloudflare Web Analytics. It counts page views and referring sites. It uses no cookies, stores nothing in your browser and builds no identifier that could follow you from one site to another. That is why this site does not ask for consent to analytics.

How long I keep the data

Enquiries that do not lead to an engagement are deleted within a year.

If an engagement follows, the data becomes part of the client relationship. It is then kept as long as the relationship and the retention periods in accounting law require.

Your rights

You have the right to

  • know what data I hold about you
  • have incorrect data corrected
  • have the data deleted
  • restrict the processing or object to it
  • receive the data you gave me in a portable format

Send the request to [email protected]. I reply within a month. A deletion request is usually done the same working day.

If you are not satisfied with how I handle your data, you can lodge a complaint with the Finnish Data Protection Ombudsman. Instructions are at tietosuoja.fi.

Automated decision-making

There is no automated decision-making on this site. The data is not used for profiling.

Changes to this policy

If this policy changes, the date at the top of the page changes.

Back to the front page