1. Controller
Jämsän Laskentatoimi Oy
Business ID: 0416007-9
Säterintie 4, 42100 Jämsä, Finland
Email: director@jamsanlaskentatoimioy.com
Phone: +358 40 301 7228
2. Data we collect
We collect the following personal data when you use the contact form on this website:
- Full name — required
- Email address — required
- Phone number — optional
- Message text — required
When you visit the website, our hosting provider automatically processes technical data needed to deliver the pages to you and keep the service secure, such as your IP address, browser type, requested page and time of the request (server logs).
We do not collect sensitive personal data (such as health, financial or identification data) through this website.
3. Purposes and legal bases
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your enquiry | Name, email, phone, message | Legitimate interest (Article 6(1)(f) GDPR) — responding to a request you have submitted |
| Delivering the website securely (server logs) | IP address, browser data, requested page, time | Legitimate interest (Article 6(1)(f) GDPR) — operating and securing the website |
4. Retention
Enquiry data is retained for as long as necessary to handle your request and any follow-up. We delete enquiry data no later than two years after the last contact. If you become a client, your data is handled under the engagement agreement and applicable accounting legislation.
5. Recipients and processors
The following service providers receive visitor or form data when you use this website:
- Vercel Inc., USA (website hosting) — hosts and delivers this website, processes server logs and handles contact-form submissions. Pages are delivered through Vercel's global network (including EU locations), and the website's server application runs in Vercel's Washington, D.C. (USA) region, so data is transferred to the United States. The transfer is based on the EU-US Data Privacy Framework and, in addition, the EU Standard Contractual Clauses in Vercel's data processing agreement.
- Namecheap, Inc., USA (Private Email — email service) — hosts our company mailbox and receives enquiries and emails sent to us. Data may be stored or accessed outside the EEA, including in the United States. The transfer is based on the EU Standard Contractual Clauses in Namecheap's data processing agreement.
Web fonts are served from our own website; no data is sent to font providers.
We do not sell personal data. We do not share personal data with third parties for advertising or marketing.
6. Your rights
Under the GDPR you have the right to:
- Access — request a copy of personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data where there is no compelling reason to keep it.
- Restriction — ask us to limit how we use your data while a dispute is resolved.
- Objection — object to processing based on legitimate interest.
- Portability — receive your data in a machine-readable format where processing is based on consent or contract.
- Withdrawal of consent — withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).
To exercise any right, contact us at director@jamsanlaskentatoimioy.com. We will respond within one month.
7. Supervisory authority
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).