Privacy Policy

This is the Privacy Policy of Rautanen Yhtiöt Oy in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Rautanen Yhtiöt Oy (Business ID: 3264539-9) Luukintie 4 B 02940 Espoo, Finland

Contact person for privacy matters: Jaakko Rautanen, Email: jaakko@rautanen.io

2. What personal data do we collect and from where?

We primarily collect personal data directly from the user via the contact form on our website. We collect the following data:

  • Contact form data: Name, email address, and any additional information the user voluntarily includes in their message.

  • Technical data (Cookies): Our website hosting provider (Squarespace) automatically collects certain technical data, such as IP addresses, browser types, and device information, to ensure the secure and proper functioning of the site.

3. Purpose and legal basis for processing

We process the personal data collected via the contact form solely for the purpose of responding to inquiries and providing customer service.

Legal basis for processing: The legitimate interest of the data controller (customer service and communication) or the performance of a contract (if the inquiry leads to measures taken at the user's request).

4. Data retention period

We retain personal data received through the contact form only for as long as is necessary to handle and resolve the inquiry. Once the matter is closed, and provided there is no other legal obligation to retain the data, it will be routinely deleted.

5. Regular data transfers and transfers outside the EU/EEA

We do not sell, rent, or regularly disclose personal data to third parties.

Our website is hosted on the Squarespace platform. Squarespace acts as a data processor on our behalf by providing the technical infrastructure for the website. Because Squarespace is a US-based company, technical data and information submitted through the form may be transferred outside the EU/EEA. Such transfers are carried out in compliance with applicable data protection laws, utilizing mechanisms such as the Standard Contractual Clauses (SCCs) approved by the European Commission or the EU-US Data Privacy Framework to ensure an adequate level of data protection.

6. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access and processing. Our website uses SSL encryption (HTTPS) to secure the data traffic between the user's browser and our server. Access to the collected data is restricted strictly to those employees whose job duties require it.

7. Cookies

Our website operates on the Squarespace platform, which uses cookies. Cookies are small text files that are saved on the user's device by the browser.

  • Essential cookies: Squarespace uses certain cookies that are strictly necessary for the secure and proper functioning of the website (e.g., site navigation).

  • Analytics cookies: The platform may use cookies to analyze and understand website traffic. You can manage or disable the use of cookies through your browser settings.

8. Rights of the data subject

Under the GDPR, you have the right to:

  • Request access to the personal data we hold about you.

  • Request the rectification of inaccurate or incomplete data.

  • Request the erasure of your data ("right to be forgotten") if there is no longer a legal justification for processing it.

  • Restrict or object to the processing of your data in certain situations.

  • Withdraw your consent at any time, if the processing is based on consent.

You can exercise your rights by contacting us using the details provided in Section 1.

If you believe that your personal data is being processed in violation of data protection laws, you have the right to lodge a complaint with a supervisory authority (in Finland, the Office of the Data Protection Ombudsman, www.tietosuoja.fi/en).