Skip to content
Järvenpää Digital Solutions

Privacy policy

This policy explains what personal data Järvenpää Digital Solutions processes in connection with this website and its client relationships, for what purpose and on what legal basis. It fulfils the duty to inform under Article 13 of the EU General Data Protection Regulation (GDPR).

Last updated 20 September 2026.

Controller

Järvenpää Digital Solutions (Tommi Järvenpää), Business ID 3656691-1.

Email: tommi@jarvenpaadigitalsolutions.fi. Phone: +358 45 634 6793.

No data protection officer has been appointed, as the GDPR does not require one for activity of this kind. All questions about this policy are answered by the contact above.

Data processed

Contact form. The form collects your name, email address, the content of your message and your consent to be contacted. A company name may be given if you wish. The language of the message, the time of submission and whether the resulting notification was delivered are also stored.

Spam protection. The form uses Cloudflare Turnstile to tell humans apart from automated traffic. It processes your IP address and technical browser data at the moment of submission. Turnstile does not track you across sites or profile you for advertising.

Server logs. The technical platform hosting this site records ordinary request data such as the IP address, timestamp, requested address and browser identifier. This data is used to deliver the site, to investigate faults and to prevent abuse.

Client relationship. If an enquiry leads to an engagement, I also process the data required for the contract and invoicing: the contact person's name and contact details, the company name, business ID and billing details, along with correspondence relating to the engagement.

Data is obtained from you or from the company you represent, apart from the technical data described above, which arises from your visit to the site.

Purpose and legal basis

  • Responding to enquiries and preparing a quote. The basis is pre-contractual measures taken at your request (GDPR Art. 6(1)(b)) together with the consent you give on the form (Art. 6(1)(a)).
  • Carrying out an engagement and client communication. The basis is the contract (Art. 6(1)(b)).
  • Invoicing and accounting. The basis is a legal obligation (Art. 6(1)(c)), in particular the Finnish Accounting Act and Value Added Tax Act.
  • Spam prevention and site security. The basis is the legitimate interest (Art. 6(1)(f)) of keeping the contact form usable and the site operational.

Data is not used for direct marketing. No profiling or automated decision-making takes place.

Retention

  • Enquiries that do not lead to an engagement: deleted once the matter has been dealt with, at the latest 24 months after the enquiry.
  • Data relating to an engagement: for the duration of the contractual relationship and afterwards for as long as needed to handle liabilities or any disputes.
  • Accounting records: the six years required by the Finnish Accounting Act from the end of the calendar year in which the financial year ends.
  • Server logs and spam protection data: according to the service provider's own retention practice, typically no more than a few months.

Disclosure

Data is not sold or disclosed for marketing purposes. The following service providers process data on my behalf under the processing agreements required by the GDPR:

  • Cloudflare — the technical platform, the database storing enquiries, and the spam protection on the form.
  • Resend — delivering the email notification when the form is submitted.
  • Google (Gmail) — receiving and storing email.
  • OP — invoicing and handling of accounting records through its light entrepreneur service.

Data may also be disclosed to authorities where the law requires it.

Transfers outside the EU

Some of the providers listed above are based in the United States and may process data outside the EU and EEA. Such transfers rely on the standard contractual clauses approved by the European Commission or on the EU–US Data Privacy Framework.

Cookies

This site uses no tracking, analytics or marketing cookies, and there is no visitor analytics in place. The form's spam protection may store technical data in your browser that is strictly necessary for it to work. No cookie consent is therefore requested.

Security

The site and the form run over an encrypted HTTPS connection. Enquiries are stored in a database managed by the service provider, accessible only to the controller using personal credentials. No paper records are kept.

Your rights

You have the right to:

  • know whether I process personal data concerning you, and to receive a copy of it
  • request the correction of inaccurate or incomplete data
  • request the erasure of your data
  • request the restriction of processing, or object to processing
  • receive the data you have provided in a machine-readable format and transfer it to another controller
  • withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Requests can be sent by email to tommi@jarvenpaadigitalsolutions.fi. I respond within one month. Where necessary, I may verify your identity before acting on a request.

Right to lodge a complaint

If you consider that your personal data is not being processed lawfully, you may lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Changes to this policy

I update this policy if the operation of the site or the services used change. The version in force is always on this page, and the date of the last update is shown at the top.