Privacy Policy
Last updated: October 2026
1. Data Controller
The controller responsible for your personal data under the General Data Protection Regulation (GDPR) and applicable data protection legislation is:
Huhtaniska
Tampere, Finland
Website: huhtaniska.fi
2. Personal Data We Collect
We only collect personal data that you voluntarily provide to us when contacting us via our website contact form. This data includes:
- Full Name (to address and identify you)
- Email Address (to communicate and respond to your inquiry)
- Company Name (optional, to contextualize your business needs)
- Message Content (details regarding your inquiry or consulting project)
3. Legal Basis and Purpose of Processing
We process your personal data based on the following legal grounds under Article 6 of the GDPR:
- Legitimate Interest (Art. 6(1)(f) GDPR): Responding to client inquiries, evaluating consulting requirements, and managing prospective business communications.
- Consent (Art. 6(1)(a) GDPR): Provided explicitly by submitting the contact form on our website.
4. Data Storage and Infrastructure
Our website is hosted on Cloudflare Pages and edge infrastructure. Processing of contact requests is carried out in adherence to strict EU data protection standards. Cloudflare acts as a data processor under standard contractual clauses ensuring GDPR compliance.
5. Data Retention
We retain contact inquiries and related communication for up to 12 months following our most recent interaction, unless required longer for statutory record-keeping or active contract negotiation. Inactive inquiries are securely deleted upon expiry or upon request.
6. Data Sharing and Transfers
We do not sell, rent, or lease personal information to third parties. Data is only shared with essential infrastructure service providers (such as Cloudflare) acting strictly on our behalf under data processing agreements. We do not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards.
7. Your Rights Under GDPR
As a data subject residing in the European Union, you hold the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16 GDPR): You have the right to correct inaccurate or incomplete data.
- Right to Erasure (Art. 17 GDPR): You have the right to request deletion of your data when it is no longer necessary for the purposes collected.
- Right to Restriction of Processing (Art. 18 GDPR): You may request restriction of data processing under certain circumstances.
- Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used format.
- Right to Object (Art. 21 GDPR): You may object to data processing based on legitimate interests.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority, the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
To exercise any of these rights, please contact us via our website contact form.
8. Cookies and Tracking
This website does not use tracking cookies, analytics trackers, or third-party marketing beacons. Only essential technical storage necessary for core functionality and security (such as Cloudflare threat mitigation) is utilized.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect technological, operational, or legal changes. Updates will be published on this page with the revised date.