Privacy Notice

1. Data Controller

Who is responsible for your data

2. Data We Collect

What personal data we process

We collect personal data only when you voluntarily provide it or when it is necessary to deliver our services. This may include:

• • Contact information — name, email address, phone number, company name, and job title provided via our contact form or direct communication.
• • Communication data — the content of messages and enquiries you send us.
• • Usage data — basic, anonymised analytics data (pages visited, session duration) collected via Google Analytics when you accept cookies.

3. Purpose and Legal Basis

Why we process your data

• • Responding to enquiries — to reply to contact form submissions and direct messages. Legal basis: legitimate interest and pre-contractual steps.
• • Delivering advisory services — to fulfil engagements where a contract exists. Legal basis: contract performance.
• • Analytics — to understand how our website is used and improve it. Legal basis: consent (cookie acceptance).

4. Data Retention

How long we keep your data

Contact data from enquiries that do not lead to an engagement is retained for up to 12 months. Data related to client engagements is retained for as long as required by applicable accounting and legal obligations, typically 6 years. Analytics data is retained according to Google Analytics default settings.

5. Data Sharing

Who we share your data with

We do not sell or share your personal data with third parties for marketing purposes. We use the following service providers who may process data on our behalf:

• • Google Analytics — website usage analytics (EU data processing available; data anonymised).
• • Email and calendar services — for communication and scheduling purposes.

6. Your Rights

Your data protection rights

Under GDPR, you have the right to:

• • Access — request a copy of the personal data we hold about you.
• • Rectification — request correction of inaccurate data.
• • Erasure — request deletion of your data where no legal obligation to retain it exists.
• • Restriction — request that we limit how we use your data.
• • Objection — object to processing based on legitimate interest.
• • Portability — receive your data in a machine-readable format where applicable.

To exercise any of these rights, contact us at valtteri@fndryadvisory.fi. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

7. Cookies

How we use cookies

We use cookies only for basic, non-essential analytics (Google Analytics). No cookies are set unless you explicitly accept them via our cookie banner. You can change your cookie preferences at any time using the "Manage cookies" link in the footer.

8. Updates

Changes to this notice

We may update this privacy notice from time to time. The current version is always available on this page and as a downloadable PDF below. Material changes will be communicated where appropriate.