GRANSKATRUTH IN DOCUMENTATION
GRANSKATRUTH IN DOCUMENTATION
How we collect, use, and protect personal data.
GRANSKA
Finland
Email: info@granska.fi
Company registration (osakeyhtiö) is in progress with the Finnish Trade Register; this page will be updated with the registered legal name and Business ID (Y-tunnus) upon completion.
When you use the contact form we collect your name, email address, company (optional), and the message you write. Nothing else.
If you contact us directly, we process the contact details and content you choose to share.
For contracted work we process business contact details, engagement records, and the documents you submit for review, which may themselves contain personal data (for example, names on test certificates).
If you accept the cookie banner, we use Google Analytics to measure visits and traffic sources. If you reject or ignore it, no analytics cookie is set. We never use this data for advertising or profiling, and we do not run advertising pixels. Full details are in our Cookie Policy.
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Responding to enquiries | Legitimate interest |
| Conflict-of-interest screening before engagements | Legitimate interest |
| Delivering contracted services | Contract performance |
| Invoicing and accounting records | Legal obligation (Finnish Accounting Act) |
We do not use personal data for automated decision-making or profiling, and we do not send marketing communications without your consent.
| Provider | Purpose | Location |
|---|---|---|
| Web3Forms | Contact form delivery to our inbox | United States, transfers safeguarded under GDPR Chapter V mechanisms |
| Hostinger | Email hosting (info@granska.fi) | EU |
| Netlify | Website hosting (server logs incl. IP addresses, retained briefly for security) | EU/US, transfers safeguarded under GDPR Chapter V mechanisms |
We do not sell, rent, or trade personal data. Providers act under data processing terms and process data only for the purposes above.
| Data | Retention |
|---|---|
| Contact form submissions and enquiry emails | 12 months after last contact |
| Client engagement records | 6 years (Finnish Accounting Act) |
| Documents submitted for review | Deleted 90 days after engagement completion, unless agreed otherwise |
Under the GDPR you may request access to, rectification or erasure of your data, restriction of processing, data portability, or object to processing (Articles 15–21), and withdraw any consent at any time. Email info@granska.fi. We respond within 30 days.
You may also lodge a complaint with the Finnish supervisory authority: Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman), Lintulahdenkuja 4, 00530 Helsinki. tietosuoja.fi.
Documents submitted for review may contain personal data. We process such data solely to deliver the contracted services; the client remains the data controller and we act as data processor where applicable (GDPR Article 28). Data processing terms are included in our engagement documentation.
The site is served over HTTPS. Client documents are stored with access controls and are not shared with third parties. No internet transmission is completely secure, but we take reasonable and proportionate precautions.
We may update this policy; material changes are communicated on this page. Check the version date above.
Questions about this policy or our data handling: info@granska.fi. See also our Terms and Cookie Policy.