PRIVACY POLICY

Last updated: May 8, 2025

This privacy policy applies to the website www.noorakoivumies.com.

Controller:
Noora Koivumies
Email: noora.koivumies@gmail.com

1. Personal Data Processed

The following personal data may be processed on the website:

  • Name, email address, and message (via contact form)

  • IP address, browser information (via cookies)

  • Username and password (on password-protected pages)

2. Purposes of Data Processing

  • Responding to contact requests

  • Ensuring the security and functionality of the website

  • Analyzing website traffic and improving the service via cookies

3. Legal Basis for Processing

  • Contact form data: performance of a contract or legitimate interest

  • Cookies: consent

  • Password-protected pages: legitimate interest or contractual relationship

4. Cookies

The website uses cookies to enhance the user experience and analyze traffic.

Types of cookies may include:

  • Essential cookies (necessary for site operation)

  • Analytics cookies (e.g., Google Analytics)

The site is built on the Squarespace platform, which may set its own cookies. Third-party cookies may also be used.

User consent for cookies is requested on the first visit.
You can manage or change your cookie preferences.

Google Analytics may anonymize IP addresses to ensure data protection compliance.

5. Data Retention

Personal data is retained only as long as necessary for the specified purposes or as required by law.

6. Data Transfers Outside the EU/EEA

Personal data may be transferred outside the European Union or European Economic Area, e.g., to servers operated by Squarespace or Google.

All transfers comply with GDPR requirements, such as the use of Standard Contractual Clauses (SCCs) or other adequate safeguards.

7. Data Subject Rights

You have the following rights regarding your personal data:

  • Right to access your data

  • Right to request correction or deletion

  • Right to object to or restrict processing

  • Right to withdraw consent (e.g., for cookies)

  • Right to data portability (where applicable)

  • Right to lodge a complaint with a supervisory authority (in Finland: Office of the Data Protection Ombudsman)

To exercise your rights, contact: noora.koivumies@gmail.com
We aim to respond within 30 days.

8. Automated Decision-Making and Profiling

No automated decision-making or profiling is carried out on this website.