Privacy policy

This privacy policy describes how PI & Ha tick tweezers (PI & Ha Innovations Oy) processes personal data via the website punkkipinsetit.fi. Processing complies with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.

Controller

PI & Ha Innovations Oy Business ID: 3149483-2 Helsinki, Finland

Contact: myynti@punkkipinsetit.fi

What information we collect

Contact form

When you send us a message via the website’s contact form, we process the information you provide:

• name
• email address
• message content

The information is used solely to reply to your enquiry.

Site usage analytics

We use Plausible Analytics (Plausible Insights OÜ, Estonia) to measure site usage. Plausible collects:

• the page address
• the referring page
• browser type and device type
• country and city (approximate location based on IP address)

Plausible does not set cookies and does not collect personally identifiable information. The data is anonymous and aggregated, and individual visitors cannot be identified.

Cloudflare Turnstile

The contact form is automatically protected by Cloudflare Turnstile. Turnstile may collect short-lived technical information from your browser (browser type, screen resolution, IP address) to verify that the form is being submitted by a human and not an automated system. This information is not personal data within the meaning of the GDPR and is not linked to other data.

Purpose and legal basis

Processing	Purpose	Legal basis (GDPR Art. 6)
Contact enquiry content	Replying to your enquiry	Consent (Art. 6.1.a)
Plausible analytics	Improving site usability	Legitimate interest (Art. 6.1.f)
Turnstile verification	Preventing spam	Legitimate interest (Art. 6.1.f)

Disclosure to third parties

• MailChannels Inc. (United States): contact form messages are sent via the MailChannels service. MailChannels operates under the EU Standard Contractual Clauses.
• Plausible Insights OÜ (Estonia): analytics data. Plausible operates within the EU and does not transfer data to third countries.
• Cloudflare (United States): the site is hosted on Cloudflare Pages, and the contact form API uses Cloudflare Pages Functions. Cloudflare operates under the EU Standard Contractual Clauses.

We do not sell or rent personal data for marketing purposes.

Retention period

• Contact form messages are retained for at most 12 months after a reply has been sent, unless you ask for them to be deleted earlier.
• Plausible analytics data is retained in aggregated form without a time limit, because it does not contain personal data.

Rights of the data subject

The GDPR gives you the following rights:

• Right of access — you can request information about what data we process about you
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your data (“right to be forgotten”)
• Right to restrict processing
• Right to object — you can object to processing based on legitimate interest
• Right to data portability

You can exercise your rights by contacting us at myynti@punkkipinsetit.fi.

Right to lodge a complaint

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman if you consider that the processing of your personal data violates the law. Office of the Data Protection Ombudsman: tietosuoja.fi.

Changes to this privacy policy

This privacy policy is updated as needed. The update date is shown at the top of the page.