Effective from 14th August 2026.

1 - Who is responsible

The data controller for this website is Hallitse Oy, Rovaniemi, Finland. For privacy questions, contact email us.

2 - What we collect

By default we collect no personal data from visitors as they browse this site. If you accept analytics in the cookie banner (see section 6), Google Tag Manager loads and Google may process usage data - pages viewed, approximate location, device and browser - to help us understand how the site is used.

If you choose to email us using the contact links on this site, we receive your sender address and message contents through our email provider. We process those to reply to your enquiry - that's the entire purpose. We do not add the address to any marketing list.

3 - Lawful basis

When you email us, our processing of your message rests on our and your legitimate interest (Article 6(1)(f) GDPR) in exchanging correspondence. Analytics, if you accept it, rests on your consent (Article 6(1)(a) GDPR), which you can withdraw at any time via "Cookie settings" in the footer.

4 - Sharing

We use AWS (Amazon Web Services Ireland Ltd.) for hosting and email delivery, with data held within the EU/EEA (Stockholm / Frankfurt). If you accept analytics, Google (Google Ireland Ltd.) processes the usage data through Google Tag Manager and its analytics services, and may transfer it outside the EU/EEA under the EU-US Data Privacy Framework and standard contractual clauses. We share data only as required by law (e.g. tax / accounting), and we don't sell it.

5 - Retention

Email correspondence is retained for as long as it remains operationally relevant (typically 24 months from last contact), then deleted unless a statutory retention requirement applies (e.g. invoicing or contract evidence).

6 - Cookies

By default this site sets only the strictly-necessary technical storage your browser needs, plus a small record of your cookie choice. If you accept analytics in the cookie banner, we load Google Tag Manager, which may set analytics and advertising cookies from Google. Nothing non-essential loads until you accept, and you can change or withdraw your choice at any time via Cookie settings in the footer.

7 - Your rights

Under GDPR you have rights of access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21), and to lodge a complaint with the supervisory authority - in Finland, the Office of the Data Protection Ombudsman.

Exercise any right by emailing email us. We respond within 30 days.

8 - Changes

We may update this notice. The current version is always this page. Significant changes will be communicated to subscribers and contractual parties before they take effect.