LEgal
This Privacy Policy explains how personal information is collected, used, and protected when you visit henrikosso.fi or contact me about my services.
Last updated: 12 October 2026
01
The data controller responsible for processing personal information is:
Henri Kössö
Business ID: 3191255-5
Finland
Email: hello@henrikosso.fi
Website: https://www.henrikosso.fi
For questions about how your personal information is processed, please contact us using the email address above.
02
We collect personal information that you provide when contacting us, booking a consultation, or using our services.
Depending on how you interact with our website, this may include:
Contact information: Your name and email address.
Organization details: Your company or organization name, if provided.
Enquiry details: Information you provide through our contact form, email, or other communications.
Booking information: Your name, email address, and appointment details when scheduling a consultation.
Technical information: Limited technical data processed by our website hosting and analytics providers, such as information necessary for website security, functionality, and aggregated traffic statistics.
We collect and process personal information only where necessary for legitimate business purposes or applicable legal obligations.
03
We use the personal information we collect to operate our business, communicate with you, and provide our services. This includes:
Responding to enquiries: Answering questions, discussing potential projects, and providing quotations.
Delivering services: Managing projects, communicating with clients, and providing ongoing support.
Improving our website: Understanding website performance and improving the visitor experience.
Business administration: Maintaining necessary business records, managing invoices, and fulfilling contractual obligations.
Legal compliance: Meeting applicable legal and regulatory requirements.
We process personal information only where we have an appropriate legal basis under applicable data protection laws.
04
We process personal information in accordance with the General Data Protection Regulation (GDPR). The legal basis depends on the purpose of processing.
Legitimate interests (Article 6(1)(f)): To respond to general enquiries, maintain business communications, manage customer relationships, and ensure the security and functionality of our website.
Pre-contractual measures (Article 6(1)(b)): To respond to requests for proposals, arrange consultations, and take steps requested by individuals before entering into a contract.
Performance of a contract (Article 6(1)(b)): To provide agreed services and fulfil contractual obligations where the individual is a party to the contract.
Legal obligations (Article 6(1)(c)): To comply with applicable accounting, taxation, and other statutory requirements.
Consent (Article 6(1)(a)): Where we specifically request your consent for optional processing activities. You may withdraw your consent at any time.
Where processing is based on legitimate interests, we balance those interests against your rights and freedoms.
05
We use trusted third-party service providers to operate our website, communicate with prospective customers, and manage appointments.
These include:
Framer: Website hosting, contact form functionality, and website analytics.
Google Workspace: Business email, communication, and storage of enquiries.
Google Calendar: Consultation scheduling, appointment management, and meeting invitations.
These providers process personal information as necessary to deliver their services.
We do not sell your personal information.
Where personal information is transferred outside the European Economic Area, applicable data protection safeguards are used as required by law.
06
Our website uses Framer's built-in analytics to understand website traffic and improve website performance.
Framer Analytics is designed to collect aggregated website statistics without using analytics cookies.
We do not currently use Google Analytics, Google Tag Manager, advertising pixels, or other third-party marketing tracking technologies.
Our website may use essential technologies necessary for its functionality, security, and operation.
If we introduce optional cookies or tracking technologies in the future, we will update this Privacy Policy and obtain consent where required by applicable law.
07
We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or comply with applicable legal obligations.
Our retention periods are as follows:
General enquiries: Enquiries that do not result in a customer relationship are generally deleted within 12 months of the last relevant communication, unless continued retention is justified.
Customer information: Retained for the duration of the customer relationship and afterward where necessary for legitimate business purposes or legal obligations.
Accounting records: Retained for the periods required by Finnish accounting and tax legislation.
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or disclosure.
However, no method of electronic storage or internet transmission can be guaranteed to be completely secure.
08
Under applicable data protection laws, including the GDPR, you may have the following rights:
Access: Request a copy of the personal information we hold about you.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of your personal information where applicable.
Restriction: Request that we limit the processing of your information.
Portability: Request your information in a structured, commonly used, machine-readable format where applicable.
Objection: Object to certain processing activities, including processing based on legitimate interests.
Withdrawal of consent: Withdraw previously given consent at any time.
To exercise your rights, contact us at hello@henrikosso.fi.
You also have the right to lodge a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman.
Website: https://tietosuoja.fi/en/home
09
We may update this Privacy Policy to reflect changes in our services, business operations, or applicable legal requirements.
Any updates will be published on this page with a revised last-updated date.
We encourage you to review this policy periodically.
10
If you have questions about this Privacy Policy or how your personal information is processed, please contact us.
Henri Kössö
Email: hello@henrikosso.fi
Website: https://www.henrikosso.fi
We aim to respond to privacy-related enquiries as promptly as possible and within applicable legal deadlines.