1. Data Controller
Digipaja Oulu, Finland Email: info@digipajaoulu.fi We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR).
2. What Data We Collect
We collect the following data: **Through the contact form:** - Name - Email address - Phone number (optional) - Company name (optional) - Project description **Automatically collected data:** - IP address (anonymized) - Browser type and version - Operating system - Site usage data (after cookie consent)
3. Purpose of Data Processing
We use collected data for the following purposes: - Responding to contact requests - Preparing quotes - Managing customer relationships - Improving site functionality - Statistical analysis (anonymized)
4. Cookies
We use cookies on our website: **Necessary cookies:** - Basic site functionality - Remembering your cookie preferences - Session management **Analytics cookies (optional):** - Google Analytics (anonymized IP) - Site usage statistics You can manage your cookie settings at any time. Necessary cookies are required for the site to function.
5. Data Retention
We retain your personal data only as long as necessary: - Contact requests: 2 years - Customer data: Duration of relationship + 6 years (accounting law) - Analytics data: 26 months Expired data is automatically deleted or anonymized.
6. Data Sharing
We do not sell or rent your personal data to third parties. We may share data with: - Our service providers (e.g., email service, hosting) - Authorities when required by law All our service providers are committed to GDPR compliance.
7. Your Rights
You have the following rights under GDPR: - **Right of access** - You can request a copy of your data - **Right to rectification** - You can request correction of inaccurate data - **Right to be forgotten** - You can request deletion of your data - **Right to restrict processing** - You can restrict how we process your data - **Right to data portability** - You can receive your data in a portable format - **Right to object** - You can object to processing of your data To exercise your rights, contact: info@digipajaoulu.fi
8. Data Security
We protect your data with: - SSL/TLS encryption for all data transfers - Regular security audits - Access control and logging - Backups We will notify of data breaches within 72 hours of discovery.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify of significant changes on our website. We recommend reviewing this policy regularly.
10. Contact
For privacy-related questions, contact: Digipaja Email: info@digipajaoulu.fi If you are not satisfied with how we handle your data, you can file a complaint with the Data Protection Ombudsman (tietosuoja.fi).