Privacy Policy

1. Controller and Contact Information

FHATAL Oy ("we")
Business ID: 3546336-3
Email: support@fhatal.com

We have not appointed a data protection officer, as we are not required to do so under GDPR Article 37. Privacy matters are handled at support@fhatal.com.

2. Scope

This policy applies to the fhatal.com website, its forms, and support channels where personal data is collected for customer relationship management, sales, communication, and site development. It also covers our Finnish-language site at fhatal.fi, which is operated by the same controller. It does not cover third-party sites we link to, including our clients’ and our own product sites.

3. Purposes and Legal Bases (GDPR Art. 6)

• Inquiries and customer communication: contact forms and quote requests, based on pre-contractual measures or legitimate interest.
• Service production and development: usage statistics and error logs, based on legitimate interest.
• Marketing communication: based on consent.
• Security: reCAPTCHA verification and fraud prevention, based on our legitimate interest in protecting the site and our contact form from abuse.

4. Data Categories

• Contact information: name, email, and message content.
• Usage data: page views, events, referral sources, and rough location data.
• Technical data: IP addresses and device identifiers. Google Analytics 4 does not log or store full IP addresses; it uses them only to derive coarse location and then discards them.
• Cookie data: essential and analytics identifiers.

5. Cookies and Consent Management

Essential storage activates by default; analytics cookies require consent via the cookie banner. The essential reCAPTCHA cookie _GRECAPTCHA is set only once you begin filling in the contact form, not on page load. The analytics cookies _ga and _ga_4DDZ42L1R1 are set only after you accept analytics, and retain data for approximately 2 years. Our cookie policy lists each item in full.

6. Recipients and Processors

• Formspree: processor for contact forms, using Standard Contractual Clauses.
• Google reCAPTCHA v2: independent controller for spam prevention.
• Google Analytics 4: processes usage data only after you consent to analytics. Advertising signals (ad storage, ad user data, ad personalisation) are denied at all times.

7. International Transfers

Data transfers outside the EU/EEA utilize EU Standard Contractual Clauses and additional safeguards as necessary.

8. Retention Periods

• Contact form messages: 2 years, unless a customer relationship is formed.
• Customer data: for the duration of the customer relationship. Records we are required to keep under the Accounting Act are retained for the statutory period after that.
• GA4 event data: 14 months.
• Technical logs: a maximum of 6 months.

Our data processing page describes these periods and their legal bases in more detail.

9. Your Rights

You have the right to access your data, and the rights to rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. You may withdraw consent at any time and lodge a complaint with Finland’s Office of the Data Protection Ombudsman at tietosuoja.fi. Exercise your rights by contacting support@fhatal.com.

10. Profiling and Automated Decisions

We do not engage in profiling or automated decision-making with legal effects.

11. Security

Security measures include HTTPS encryption, restricted environment access, data minimization, and regular security updates.

12. Children’s Data

Our services are not directed toward children under 13, and we do not intentionally collect their data.

13. Changes to This Policy

Updates are published on this site, with the date at the top of this page reflecting the latest revision.

14. Platform-Specific Details

Formspree Form

The form endpoint processes name, email, and message forwarding under pre-contractual measures or consent.

Google reCAPTCHA v2

Serves spam prevention. The widget and its _GRECAPTCHA cookie load only once you begin filling in the contact form, not on page load.

Google Analytics 4 + Consent Mode v2

Loads only after you accept analytics. Withdrawing consent stops collection and deletes the analytics cookies already stored on your device.

15. Cookie Management

You can modify your consent via the "Manage Cookies" option and delete cookies through your browser settings in Chrome, Firefox, and Safari. See also our cookie policy.

16. Contact for Exercising Rights

Contact support@fhatal.com for all privacy matters.

Annex A: Cookie List