This privacy policy describes how Taitomaalari Eve Männik Oy collects and processes personal data when you contact us through our website. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.
1. Controller
Taitomaalari Eve Männik Oy Business ID: 3537502-1 Porslahdentie 26C, 00980 Helsinki
For data protection matters, contact: Email: info@taitomaalari.fi Phone: +358 41 7425503
2. What data we collect
We collect only the information you give us yourself when you fill in the contact form on the site:
- name
- email address
- phone number (optional)
- the content of your message
When the form is sent we also store the time of sending and the IP address for technical reasons. These are used only to prevent spam and misuse.
We do not collect sensitive data belonging to special categories of personal data on the site. Sending the contact form is always voluntary.
3. Why and on what basis we process data
We process the data so that we can:
- reply to your enquiry and your questions
- prepare the quote or estimate you have asked for
- carry out the work and manage the customer relationship
The legal basis for processing is the preparation and performance of a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to enquiries and developing our service (Article 6(1)(f) GDPR). Processing related to spam prevention is based on our legitimate interest in protecting the service against misuse.
4. Where the data comes from
We receive personal data directly from you when you send the contact form. We do not obtain data from outside sources.
5. Recipients and processors of the data
We do not sell or rent your personal data and we do not disclose it to third parties for marketing purposes. We use reliable service providers who process the data on our behalf:
- Email delivery: the message from the contact form is delivered to us through an email service (Maileroo).
- Website server environment: the site is hosted on a secure server (Hetzner, Germany).
- Visitor analytics: we use privacy-friendly, self-hosted visitor analytics.
All service providers process the data on our instructions and under a binding agreement. We may also disclose data to the authorities if the law requires it.
6. Transfers of data outside the EU or the EEA
We do not transfer personal data outside the EU or the EEA.
7. Retention period
We keep data relating to an enquiry only for as long as is necessary to deal with the matter and for any customer relationship, typically no more than 24 months from the last contact. After that the data is deleted. Data relating to completed assignments may be kept longer to the extent that the law (for example the Finnish Accounting Act) requires it.
8. Cookies and visitor analytics
The site does not use cookies intended for tracking or advertising, nor third-party advertising cookies. We use privacy-friendly, cookie-free visitor analytics that collects only anonymous, aggregated statistics on the use of the site (for example page views and general location at country level). An individual visitor cannot be identified from this data. The fonts on the site are loaded from our own server, so no external font services are in use.
9. Data security
The connection to the site is encrypted (HTTPS). Personal data is handled only by those whose work requires it, and access to the data is protected by appropriate technical means. We keep the data in a secure environment and delete it when it is no longer needed.
10. Your rights
The GDPR gives you rights over your own personal data. You have the right to:
- find out what data we process about you, and to receive a copy of it
- ask for incorrect data to be corrected
- ask for your data to be deleted
- ask for processing to be restricted, or object to processing
- receive the data you have given us in a transferable format
- withdraw your consent to the extent that processing is based on consent
You can exercise your rights by contacting info@taitomaalari.fi. We may ask you to verify your identity if necessary.
11. Right to lodge a complaint
If you consider that we process your personal data contrary to data protection legislation, you have the right to lodge a complaint with the data protection authority. In Finland the supervisory authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).
12. Changes to this policy
We may update this privacy policy as our operations or the legislation change. The current version is always available on this page, and the date of the last update is shown at the top of the page.