Privacy

Controller and contact details

Havubit Oy
Business ID: 3666590-1
Oulu

For enquiries about privacy or your personal data, contact contact@havubit.fi.

What data do we process and why?

Email enquiries

When you email us, we receive your email address and the information you provide, such as your name, company, phone number, message and any attachments. We obtain this information directly from you.

We use this information to respond to your message, explore opportunities to work together and communicate with you. Processing is based on our legitimate interest in handling enquiries addressed to our company and business communications (Article 6(1)(f) GDPR). If you ask us to prepare a contract with you personally, processing may be based on taking steps at your request before entering into a contract (Article 6(1)(b)).

Providing information is voluntary. We need valid contact details to reply. Please do not send unnecessary sensitive personal data.

Website operation

Delivering the website to your browser requires the processing of technical connection data, such as your IP address. Hosting services may also process the time of a request, the requested URL and technical information sent by your browser to deliver the website, maintain security and investigate problems. Processing is based on our legitimate interest in providing a functioning and secure website.

Aggregate traffic statistics

We monitor traffic volumes and technical performance using aggregate metrics produced by the content delivery service. These metrics show request volumes, data transfer volumes and error rates. We do not use these aggregate metrics to identify individual visitors or track their browsing paths. We do not add identifiers to your browser or send separate tracking requests from it for these statistics.

How long do we retain data?

We delete ordinary enquiry emails no later than 12 months after the relevant conversation ends. If an enquiry leads to a customer relationship, we retain the information needed to manage that relationship for its duration and afterwards only as long as required by contractual obligations, legal obligations or the establishment, exercise or defence of legal claims.

Any technical website access logs managed by Havubit are retained for no more than 30 days. Information necessary to investigate a particular security incident may be retained longer for the investigation and any related legal claims. Data is removed from service provider backups in accordance with the services’ deletion and backup policies.

Service providers and data transfers

We use email, cloud and hosting service providers for company email and website hosting. These providers and their subprocessors may process personal data to provide their services under the applicable data processing agreements. Information may also be disclosed to authorities where required by law.

Service providers’ operations may involve processing personal data outside the EU and EEA. Transfers are subject to safeguards under the services’ data processing agreements, such as the European Commission’s standard contractual clauses. You can contact us for further information about the applicable safeguards and to request a copy.

Cookies and tracking

The website itself does not set cookies or use browser local storage. We use the aggregate service metrics described above, but the website has no browser-based analytics, advertising tracking, external embeds or contact form. The email link opens your own email application.

The website does not carry out profiling or automated decision-making based on personal data.

Your rights

Subject to the applicable conditions, you have the right to:

• access your personal data and information about its processing;
• request correction of inaccurate information;
• request erasure of your data or restriction of processing;
• object to processing based on legitimate interests on grounds relating to your particular situation;
• receive your data in a portable format where processing is automated and based on consent or a contract with you.

If processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Send your request to contact@havubit.fi. We may request additional information necessary to verify your identity. We normally respond within one month. If the complexity or number of requests requires more time, this period may be extended by up to two further months. We will inform you of the extension and its reasons within the first month.

You can lodge a complaint with a supervisory authority if you believe your personal data is being processed unlawfully. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

Changes to this notice

We update this notice when our personal data processing or services change. The current version is available on this page, with the update date shown at the beginning.