This privacy policy has been drawn up in accordance with the Personal Data Act (523/1999, sections 10 and 24) and the EU General Data Protection Regulation (GDPR).
Updated: 2 September 2024
1. Data Controller and Contact Information
Valakia Interactive Oy (2718405-7)
Kauppaneliö 13
60120 SEINÄJOKI,
Finland
📧 info@valakia.fi
📞 050 553 5944
(hereinafter “Valakia”)
Contact person:
info@valakia.fi
050 553 5944
2. Name of the Register
Valakia customer and user register
3. Purpose of the Register
Personal data is processed for the following purposes:
- producing, delivering, and developing our products and services
- fulfilling our contractual obligations and legal requirements
- invoicing and financial administration
- managing and maintaining customer relationships, customer service, and acquiring new customers
- supporting marketing and sales, and identifying and analysing leads (HubSpot and Leadfeeder)
- analysing visitor numbers, traffic sources, and online behaviour (Google Analytics)
- developing customer service (Crisp Chat)
- ensuring and improving information security (WordFence, Jetpack)
- enabling website maintenance and administration (WordPress)
4. Legal Basis for Processing
The processing of personal data is based on:
- the legitimate interests of the data controller in managing customer relationships and delivering services
- the performance of a contract
- the explicit consent of the data subject (e.g. cookies and marketing tracking)
5. Personal Data We Process
We process only personal data that is necessary for our operations. The register does not contain sensitive personal data.
Data processed may include:
- basic details: name, email address, phone number
- company details: company name, business ID, address
- invoicing data and invoicing history (in accordance with accounting legislation)
- information submitted via contact forms (HubSpot forms)
- technical data: IP address, browser information, traffic source
- user account details (username, display name)
IP addresses may also be processed to improve information security and identify malicious traffic.
Without the necessary personal data, we are unable to deliver our products and services safely and as agreed.
6. Data Retention
We retain personal data only for as long as necessary:
- to manage the customer relationship
- to deliver the service
- to fulfil legal obligations
Invoicing and accounting data is retained for the period required by accounting
legislation.
Google Analytics data is anonymised and deleted after a maximum of 26
months.
Crisp Chat, WordFence, HubSpot, and Leadfeeder data is retained in accordance
with each provider’s GDPR policies.
7. Data Collection
We receive data primarily from the data subject themselves, for example:
- via contact forms (HubSpot)
- during the customer relationship
- through the use of the website
Data may also be collected from public sources (e.g. the Finnish Business Information System, YTJ).
HubSpot forms used on the website store submitted information in HubSpot’s CRM
system.
Website traffic is also monitored using Leadfeeder, which identifies
company visitors based on IP address. Leadfeeder does not identify private individuals.
8. Disclosure of Personal Data
We do not sell or disclose personal data to third parties for marketing purposes.
Data may be
processed on behalf of Valakia by third-party service providers (e.g. HubSpot, Leadfeeder, Google),
who act as data processors.
9. Data Transfers Outside the EU/EEA
Some of the services we use (e.g. HubSpot and Leadfeeder) may process data outside the
EU/EEA.
All such transfers are carried out in accordance with the safeguards required by the
GDPR, such as the EU Standard Contractual Clauses (SCC).
10. Use of Cookies
This website uses cookies to ensure its functionality, for analytics, marketing, and consent management.
Necessary Cookies
- PHPSESSID – maintains the user’s session
- cmplz_banner-status, cmplz_policy_id, cmplz_functional – manages cookie preferences
Consent Management (Complianz)
- cmplz_preferences, cmplz_statistics, cmplz_marketing, cmplz_consented_services
Analytics (Google Analytics)
- _ga, _ga_SENPVHKW1K
Marketing and Lead Tracking
HubSpot:
- hubspotutk, __hstc, __hssc, __hssrc
Leadfeeder:
- _lfa, _lfa_test_cookie_stored
Traffic Source Tracking (Sourcebuster)
- sbjs_current, sbjs_current_add
- sbjs_first, sbjs_first_add
- sbjs_session, sbjs_udata, sbjs_migrations
Other
- pum-23897 – Popup Maker cookie
The use of cookies is based on the user’s consent and is managed through the cookie banner.
11. Security of the Register
Personal data is protected by appropriate technical and organisational measures (firewalls, SSL,
passwords, backups).
Data is only accessed by employees for whom it is necessary as part of their
work.
12. Automated Decision-Making
We do not carry out automated individual decision-making or profiling within the meaning of Article 22 of the GDPR.
13. Rights of the Data Subject
The data subject has the right to:
- access their personal data
- request correction or deletion of their data
- restrict or object to processing
- data portability
- withdraw their consent
- lodge a complaint with a supervisory authority
Requests should be submitted to the contact details provided in section 1.
14. Changes to This Privacy Policy
We reserve the right to update this policy. The most current version is always available on our website.