1. Data Controller
   Projekticon Oy
   Business ID: FI28427006

2. Contact Person Responsible for the Register
   info(at)projekticon.fi

3. Name of the Register
   Company’s marketing register and website user tracking.

4. Legal Basis and Purpose of Processing Personal Data
   The processing of personal data is based on the following legal grounds in accordance with the EU General Data Protection Regulation (GDPR):

• Consent: When an individual voluntarily provides their information, for example via a contact form.

• Legitimate interest: To ensure website security, analyze user behavior, and generate website traffic statistics.

The information is used for establishing and developing customer relationships, as well as for website optimization and marketing.

5. Data Content of the Register
   The register may contain the following personal data:

• Name of the person

• Contact details (phone number, email address, postal address)

• Information related to the customer relationship

Anonymous data collected via cookie-free Matomo Analytics includes:

• Website usage statistics (hours, days, weeks, months)

• Devices used (mobile or desktop), browser types, and screen resolutions

• Traffic sources (direct, search engine, or referral)

• Visit duration and individual page views

• IP addresses are anonymized before being stored

6. Regular Sources of Data
   Data is obtained directly from the customer via contact forms, email, phone calls, contracts, or other customer interactions.

Website user data is collected via analytics tools.

7. Cookies and Tracking Technologies
   Our website uses cookie-free Matomo Analytics tracking.

• Essential cookies: Required for website functionality (do not require consent).

• Statistical cookies: If cookies are allowed, Matomo Analytics uses the data to improve the website.

Users can manage cookie settings via their browser or the site’s cookie management interface.

8. Disclosure and Transfer of Data
   Data is not transferred outside the EU or EEA.

9. Principles of Register Protection
   The register is handled with care, and data processed through information systems is protected using appropriate technical and organizational measures. Access to personal data is limited to authorized personnel, and data is protected through secure servers, strong authentication, and encryption where appropriate. The data controller ensures that stored information and server access rights are managed confidentially and in accordance with applicable data protection regulations.

10. Right to Access and Rectify Data
    Every individual in the register has the right to access their stored personal data and request correction of any inaccurate or incomplete information.

11. Other Rights Related to Personal Data Processing
    Individuals have the right to request the deletion of their data, restrict processing, and object to the use of their data for direct marketing. To exercise your rights, please contact us at info(at)projekticon.fi. We aim to respond within 30 days.

12. Data Retention Period
    Personal data is retained for the duration of the customer relationship and up to 5 years after it ends, unless legislation or another justified reason requires longer retention. Marketing data is retained as long as the individual has given valid consent and will be deleted immediately after the withdrawal of consent. Anonymized data collected by Matomo Analytics is retained for up to 12 months, after which it is automatically deleted.

This content is published under the following license:
CC Attribution License