1. Data Protection Regime
This document details the data collection procedures operated by Käsityöverkko Oy ("the Publisher"). As an entity headquartered in Finland, all data processing operations are governed by the General Data Protection Regulation (GDPR) and the Finnish Data Protection Act. We operate strictly on the principle of data minimization, collecting only information required to facilitate site functionality and respond to user inquiries.
2. Data Collection Operations
Information is collected via specific mechanical interactions on the site infrastructure:
- Direct Submissions: Data provided actively through the contact form, including operator names, email addresses, and detailed textual inquiries.
- Technical Logs: Automated logging of server-side requests, encompassing IP addresses, browser classification strings, and timestamp data necessary for security audits and infrastructure stability.
- Local Storage: State preferences recorded directly on the user device, governing the suppression or display of operational notices (such as the cookie banner).
3. Authorized Processors
The infrastructure utilizes authorized third-party processing services strictly for hosting and secure transmission. These processors are contractually obligated to adhere to GDPR standards. No personal data is sold, bartered, or distributed to advertising networks or external data brokers under any circumstances.
4. Retention Timetables
Data persistence is managed according to the following operational timetable:
- Direct form submissions are purged thirty days following the resolution of the inquiry.
- Technical access logs are maintained on rolling 14-day cycles, subsequently overwritten automatically.
- Local device storage variables persist strictly according to browser configurations determined by the user.
5. Operational Rights
Users operating within the European Economic Area possess statutory rights to request comprehensive logs of their data, mandate immediate erasure of non-essential records, or formally object to continued processing. Requests activating these rights must be directed to the designated privacy contact below. Validation of identity may be required prior to execution.
6. Privacy Contact Parameters
To initiate a data request or report an infrastructure vulnerability regarding personal data, submit a formatted inquiry to [email protected]. Ensure the subject line specifies "Data Protection Request" to facilitate correct routing to the administrative operator.