This policy explains how Hontola Oy processes personal data when you visit hontola.com or get in touch with us. Last updated: 18 September 2026.
Who we are
Hontola Oy (business ID 3621413-1), a company registered in Finland, is the data controller for the personal data described in this policy. You can reach us at [email protected] or +358 44 957 1935.
What we collect and why
- Contact form. If you use the contact form, we receive your name, email address, phone number (optional), whether you are a business or an individual, the services you are interested in, your estimated budget and your message. We use this to reply to your inquiry and prepare a quote. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering business inquiries. The form is delivered to us by email; the website does not keep a copy of submissions in its database.
- Email and phone. If you email or call us, we process the details you share (such as your name, contact details and the content of your message) in order to respond.
- Visitor statistics. We measure page views with our own first-party analytics. For each page view we record the page visited, the referring page, your browser, operating system and device type, and the time. To count unique visitors we create a one-way hash of your IP address, browser identifier, the date and a secret key; the hash changes every day and cannot be reversed, so it cannot be used to recognise you over time. We do not store your IP address in the statistics, do not use cookies or third-party analytics, and we respect your browser’s “Do Not Track” setting. Legal basis: our legitimate interest in understanding and improving the website.
- Security and server logs. Our web server records technical request data (IP address, browser user agent, requested address and time) to keep the site secure and to troubleshoot problems, and failed login attempts to the site’s administration area are logged with the IP address to block break-in attempts. Legal basis: our legitimate interest in keeping the website secure.
Providing your details through the contact form is voluntary, but we cannot reply without a way to contact you. We do not use automated decision-making or profiling.
Cookies
This website does not set cookies in your browser and does not use advertising or tracking technologies, so there is no cookie banner. Our security provider (Cloudflare, see below) may set a strictly necessary security cookie if it shows you a security check.
Who we share data with
We do not sell personal data. We use a small number of service providers who process data on our behalf:
- Oracle Cloud Infrastructure — hosting of the website, in the EU (Frankfurt, Germany).
- Cloudflare — content delivery and security. Traffic to the site passes through Cloudflare, which processes visitors’ IP addresses and request data to deliver and protect it.
- Resend — email delivery service used to send contact form submissions to us.
Cloudflare and Resend are US-based companies. Where personal data is transferred outside the EU/EEA, it is protected by safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep data
- Contact form and email correspondence: as long as needed to handle your inquiry and for the duration of any resulting business relationship. Correspondence that does not lead to a customer relationship is deleted once it is no longer needed.
- Invoicing and accounting records for customers: as required by Finnish accounting law.
- Server logs: 14 days.
- Visitor statistics: kept for site statistics; they contain no directly identifying information.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- request erasure of your data;
- restrict processing, or object to processing based on our legitimate interests;
- receive your data in a portable format.
To exercise these rights, email [email protected]. If you are not satisfied with our response, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows the latest revision.