Privacy Policy

1. Data controller

The controller responsible for personal data processed through this website is:

Fotoyks - Pasila (trading as Gamdling 24)
Pasilanraitio 10, 00240 Helsinki, Finland
Email: contact@gamdling24.com
Phone: +358 10 436 8076

Please send any privacy request to the email address above with the subject line "Privacy request".

2. Data we collect

Contact form

When you use the contact form we collect your name, email address, the topic you select, the content of your message and the fact that you ticked the consent box. Please do not include sensitive personal data (for example health information) in your message.

Email and phone

If you email or call us, we process your contact details and the content of the conversation as needed to respond.

Technical data

Our hosting provider automatically records standard server log data such as IP address, date and time of the request, the page requested, browser type and referring URL. These logs are used for security and troubleshooting.

Client relationships

If you become a client, we also process the names, business contact details and billing information of your contact persons, and any data you give us access to in your marketing accounts, under a separate agreement.

3. Purposes and legal bases

• Replying to enquiries sent through the form: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time, and steps taken at your request before entering into a contract (Art. 6(1)(b)).
• Providing services to clients: performance of a contract (Art. 6(1)(b)).
• Bookkeeping and invoicing: compliance with legal obligations under the Finnish Accounting Act (Art. 6(1)(c)).
• Website security and server logs: our legitimate interest in keeping the website secure and working (Art. 6(1)(f)).

We do not use your data for automated decision-making or profiling, and we do not sell personal data.

4. Retention

• Contact form messages and related emails: up to 24 months after our last exchange, unless they lead to a client relationship.
• Client contact and contract data: for the duration of the contract and up to 3 years after it ends, to handle any claims.
• Accounting records: as required by the Finnish Accounting Act, generally 6 to 10 years.
• Server logs: normally no longer than 30 days.

5. Recipients and processors

We share personal data only with service providers that help us run the website and our business, such as our web hosting and email provider and our accounting software provider. They act as processors under written data processing agreements and may only use the data on our instructions. We may also disclose data where required by law, for example to authorities.

6. Transfers outside the EEA

We aim to keep data within the European Economic Area. If a provider processes data outside the EEA, the transfer is based on an adequacy decision of the European Commission or the Commission's Standard Contractual Clauses, together with any additional safeguards needed.

7. Cookies and local storage

This website does not use analytics, advertising or tracking cookies. Fonts are loaded from Google Fonts, which means your browser connects to Google servers and your IP address is shared with Google for that purpose. If we introduce analytics in future, we will ask for your consent first and update this policy.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where there is no longer a reason to keep it;
• restrict or object to processing based on legitimate interest;
• receive data you gave us in a portable format, where processing is based on consent or contract;
• withdraw your consent at any time, without affecting processing that took place before the withdrawal.

We respond to requests within one month. We may ask you to confirm your identity before acting on a request.

9. Complaints

If you believe we process your data unlawfully, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), P.O. Box 800, 00531 Helsinki, tietosuoja.fi. You may also contact the authority in your own EEA country of residence.

10. Security

The website is served over an encrypted connection (HTTPS). Access to enquiries and client data is limited to the people who need it for their work, and accounts are protected with strong passwords and two-factor authentication where available.

11. Changes to this policy

We may update this Privacy Policy when our services or the law change. The date at the top shows when it was last updated. Significant changes will be highlighted on this page.