Privacy Policy

Controller

Petri Lahdelma (Digitaltableteur) Helsinki, Finland Email: mail@digitaltableteur.com

What is this policy for?

This Privacy Policy describes how Digitaltableteur collects and processes personal data about potential clients, website visitors, contact form users and newsletter subscribers. This data is collected to respond to inquiries, provide design and development services, improve the website and communicate about current offerings. The aim is to be transparent about these practices.

What data is collected and how is it used?

Contact form users & potential clients

If you get in touch via the forms or email, the following is collected:

• Your name and contact information (email, phone number if provided)
• Message content and any attachments you send
• Information relevant to your inquiry or project request
• Communication history between you and Digitaltableteur

This data is used to respond to your inquiries, process project requests, provide services and maintain the business relationship with you. Digitaltableteur has a legitimate interest to process this data based on your direct contact and the need to manage customer relationships.

Website visitors

When you visit this website, the following is collected automatically:

• Technical data (IP address, browser type, device information)
• Usage data (pages visited, time spent, navigation patterns)
• Referral source (how you found this site)

This data is used with your consent (via cookie banner) to analyze site usage, improve user experience and optimize services. You can withdraw consent at any time through your browser settings or by clearing this site's cookies.

Website AI assistant users

When you use Donny, the message text and recent conversation context are sent to the configured model service to generate a reply. The chat route does not write the transcript to a Digitaltableteur application database. Your browser keeps a temporary sessionStorage copy until you clear the conversation or close the tab. The service provider may retain operational or abuse-monitoring records under the applicable account terms. Do not submit sensitive personal data.

Legal basis for processing

Digitaltableteur processes your personal data based on: (1) Your consent when you submit forms or accept cookies; (2) Legitimate interest in managing business relationships, improving services and responding to inquiries; (3) Contractual necessity when providing services you requested; (4) Legal obligations where required by Finnish or EU law.

Data sharing and third parties

Digitaltableteur does not sell your personal data. Data is only shared with trusted service providers necessary to operate the website and services:

• Resend: for delivering contact form submissions
• Vercel: for website hosting and analytics
• Google Analytics: for website usage statistics (with your consent)
• OpenAI, directly or through Vercel AI Gateway: to process website-chat messages and generate replies

All service providers are bound by data processing agreements and comply with GDPR requirements. Your data is not shared outside these purposes unless required by law or public authorities.

Transfers outside the EEA

Some service providers (Vercel, OpenAI) may process data outside the European Economic Area. Lawful transfers are ensured through appropriate safeguards including standard contractual clauses approved by the European Commission, adequacy decisions or equivalent mechanisms compliant with GDPR Article 46.

Cookies and analytics

This website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. Some are necessary for the website to function; others help reveal usage patterns.

When you access this website, your consent is asked to store the following cookies:

• Necessary cookies: required for basic site functionality (cookie consent choice, session management)
• Analytics cookies: Google Analytics to measure visitor behavior, traffic sources and popular pages. This helps improve the site.
• Performance cookies: to monitor site speed and identify technical issues

You can control cookies through the banner or your browser settings. Disabling non-essential cookies may limit some features but won't prevent basic site access. For more details, see the Cookie Policy.

How long is your data stored?

Personal data is retained only as long as necessary for the purposes described or as required by law. The browser copy of an AI-chat transcript lasts for the current tab session or until you clear it; the chat route does not create a server-side transcript database. Provider operational or abuse-monitoring records follow the configured account terms. Contact form submissions are kept for up to 2 years or until you request deletion. Analytics data is anonymized after 14 months. Data no longer needed is regularly reviewed and deleted. If you have an active business relationship with Digitaltableteur, relevant data is retained for the duration of that relationship plus any legally required retention period.

What rights do you have concerning your data?

Under GDPR, you have the following rights:

• Right to access: request a copy of the personal data held about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: request limits on how your data is used
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: withdraw your consent at any time (e.g., for cookies or newsletters)

To exercise any of these rights, contact mail@digitaltableteur.com. Digitaltableteur will respond within one month.

If you believe your data has not been handled properly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (www.tietosuoja.fi) or your local data protection authority.

How is your data secured?

All personal data is considered confidential and protected with appropriate security measures:

• Access controls: only authorized personnel can access personal data when necessary for their work
• Encryption: data is transmitted over HTTPS and stored securely
• Network security: the infrastructure and partners in use apply industry-standard protections against unauthorized access, loss or alteration
• Service provider agreements: all third-party processors are contractually bound to maintain confidentiality and security standards

While every effort is made to protect your data, no method of transmission over the internet is 100% secure. Security practices are continuously reviewed and updated.

Changes to this Privacy Policy

This Privacy Policy may be updated as the website, services and practices improve. Any changes will be posted on this page with an updated "Last updated" date. You are encouraged to review this policy periodically. Continued use of this website after changes constitutes acceptance of the updated policy.

Contact

For questions, requests or concerns about this Privacy Policy or your personal data, contact: mail@digitaltableteur.com or +358 45 657 4469