Privacy policy

Controller

The controller for any personal data processed through this website is Petterik Oy, business ID 3102728-1, VAT FI31027281, with address at Lekkerikallio 5, 02400 Kirkkonummi, Finland. This policy applies to information processed in connection with this website and direct business communication initiated through the contact details provided on the site.

What data this site processes

The website itself is a static site. It does not include analytics, advertising tools, newsletter systems or embedded tracking scripts.

If you use the contact form on the site, the information you submit may include your name, email address, company, topic and the contents of your message. That information is used only to review the inquiry, respond to it and, where relevant, continue a business discussion.

If you choose to contact Petteri directly by email or through LinkedIn instead, the data you provide in that communication may likewise be processed in order to respond to your inquiry or continue a business conversation.

Depending on the nature of the contact, this may include your name, organisation, contact details, role, the contents of your message and any project-related information that you choose to share.

Purpose and legal basis

Personal data is processed only for legitimate and proportionate purposes, such as answering inquiries, assessing potential cooperation, managing existing business relationships, fulfilling legal obligations or protecting the security and reliability of the website and related communications.

The legal basis for processing may therefore include legitimate interest, steps taken prior to entering into a contract, contractual necessity or compliance with applicable legal obligations, depending on the context of the interaction.

Cookies and analytics

This website does not set non-essential cookies and does not use analytics or advertising trackers. Because of that, no cookie consent banner is required for the current setup.

Server logs

The hosting provider may still process technical server logs such as IP addresses, request times and user-agent data for security, reliability and abuse prevention. Those logs are handled by the hosting provider under its own infrastructure and retention policies.

Recipients and processors

Data is not sold or disclosed for advertising purposes. Where necessary, limited personal data may be processed by infrastructure or service providers that support hosting, email, communications, contact-form delivery or professional operations. Such providers act under their own terms or under appropriate data processing arrangements where applicable.

At the time of writing, contact-form submissions are routed through Web3Forms before being forwarded to the email inbox used for handling business inquiries. Hosting and email providers may also process limited technical or communication data as part of normal service operation.

International transfers

Some service providers used in the course of communications or hosting may process data outside your country of residence. Where that happens, the intention is to rely on appropriate safeguards required by applicable data protection law.

According to Web3Forms' public documentation, its service infrastructure is located in the United States and it states that form submissions are processed for forwarding rather than stored as a submission archive, although limited technical logs may exist for service and abuse-prevention purposes.

Data retention

Personal data sent through direct communication channels is retained only as long as needed to manage the conversation, any contractual relationship, legal obligations or legitimate business follow-up.

The exact retention period depends on the nature of the matter, the sensitivity of the information, possible legal obligations and whether a commercial relationship is ongoing or reasonably expected.

Security

Reasonable technical and organisational measures are used to reduce the risk of unauthorised access, misuse, loss or alteration of information. No internet-based service can be guaranteed to be completely secure, but the overall website setup is intentionally kept simple and low-risk.

Your rights

Subject to applicable law, you may have the right to request access, rectification, erasure, restriction of processing or information about the data held in connection with direct communications.

You may also have the right to object to certain processing based on legitimate interest and to lodge a complaint with the competent supervisory authority if you believe your data has been handled unlawfully.

Children's data

This website is not intended for children and is presented as a professional and commercial profile site. It does not knowingly seek or collect personal data from children.

Updates

This policy can be updated if the website setup changes, for example if analytics, forms or other third-party services are added later.

Material changes will be reflected by updating the text on this page and, when relevant, by adjusting the site's technical setup accordingly.