Privacy policy

1. Controller

Finvenum Group (sole proprietorship)
Business ID 3568372-9
c/o Mäklöörinkatu 5 A 3, 15240 Lahti, Finland
Email: support@finvenum.com

You can send any privacy questions or requests to the same address.

2. What data we process

• Enquiries: When you send us a message through the contact form or by email, we process your name, email address, the content of your message, the topic and reply language you choose, and any other details you choose to share (for example your company name or phone number). On the form, company and phone number are optional.
• Form spam protection: The form uses Cloudflare Turnstile, which checks that the sender is a person and not an automated program. To do this, Turnstile processes technical data such as your IP address, browser details and a technical fingerprint of the connection (TLS fingerprint). We pass your IP address to Cloudflare for this check but do not store it.
• Customers: If you become a customer, we process the data needed for the contract, invoicing and bookkeeping.
• Technical website data: When you open the website, our provider Cloudflare processes technical data such as your IP address and browser details to deliver the site and protect it from attacks.

We currently use no visitor tracking, no advertising and no marketing cookies.

3. Purpose and legal basis

Purpose	Legal basis (EU General Data Protection Regulation, Article 6)
Replying to enquiries and preparing offers	Legitimate interest and steps prior to a contract
Protecting the form from spam and abuse	Legitimate interest
Managing a customer contract	Contract
Invoicing and bookkeeping	Legal obligation
Delivering and securing the website	Legitimate interest

4. How long we keep data

• A message you send through the form is forwarded to our email through the email service Resend. The website itself does not store form data.
• Resend keeps forwarded messages and their log data for 30 days, after which they are deleted.
• Enquiries that do not lead to a customer relationship are deleted within 12 months at the latest.
• Customer data is kept for the duration of the customer relationship and afterwards for as long as the law requires. Bookkeeping records are kept as required by the Finnish Accounting Act, generally 6–10 years.
• Cloudflare’s technical log data and Turnstile check data are kept according to the provider’s own practices.

5. Who receives the data

We do not sell your data or share it for marketing. We use trusted service providers who process data on our behalf:

• Google (Google Workspace): email
• Cloudflare: website hosting and security, and form spam protection (Turnstile)
• Resend (Plus Five Five, Inc.): forwarding form messages to our email
• Accountant: customers’ invoicing and bookkeeping data

For Turnstile, Cloudflare mainly acts on our behalf (as a processor). Cloudflare also uses the same technical data for its own purposes (as a controller) to improve bot detection. Read more: Turnstile Privacy Addendum.

Data may be disclosed to authorities where the law requires it.

6. Transfers outside the EU and EEA

Google, Cloudflare and Resend are US companies, so data may also be processed outside the EU and EEA. Resend stores form messages in the United States. All three companies are certified under the EU-U.S. Data Privacy Framework, and where needed, transfers are based on the European Commission’s Standard Contractual Clauses.

7. Your rights

You have the right to:

• know what data we process about you
• ask us to correct inaccurate data
• ask us to delete your data
• ask us to restrict processing
• object to processing based on legitimate interest
• receive the data you gave us in a machine-readable format

Send your request to support@finvenum.com. We will reply within one month at the latest.

8. Right to complain

If you believe we process your data unlawfully, you can file a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi/en).

9. Security

The website has no database. Contact form details are forwarded encrypted to our email through an email service, and the website itself does not store them. The connection to the site is encrypted (HTTPS). We protect data with appropriate technical and organisational measures.

10. Automated decision-making

We do not make automated decisions with legal or similarly significant effects, and we do not profile users. The Turnstile check is automatic, but its only job is to stop spam. If the form does not work for you, you can email us at support@finvenum.com.

11. Changes

We update this policy when our practices change, for example when we introduce new services. The latest update is shown at the top of the page.