Privacy policy

Altum Vista Oy ("Altum Vista," "we," "us," or "our") is committed to protecting the privacy of our website visitors and clients. This Privacy Notice outlines our practices for collecting, using, and safeguarding your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller and Processor

Altum Vista Oy is the data controller for the personal data collected through this website. We utilize Cloudflare Pages for website hosting and Google Workspace for services such as email and document storage. Cloudflare and Google, acting as data processors, host data primarily within EU/EEA data centers. We also employ Google Analytics and Cloudflare Web Analytics to analyze website traffic. These analytics tools are loaded only after you provide consent through our cookie banner. Google's privacy policy is available at policies.google.com/privacy (opens in new tab).

2. Personal Data We Collect

We may collect the following categories of personal data:

Identity and Contact Data: Name, email address, phone number, and address (if provided).
Professional Data: Job title and company (if provided).
Financial Data: Billing information for services rendered (clients only).
Technical Data: IP address, browser type, operating system, referring website, pages visited, and website interactions. This information is collected through cookies and similar technologies (see Section 9).
Usage Data: Information about how you utilize our services.

3. How We Use Personal Data

We use your personal data solely to respond to inquiries, provide and enhance our services, and fulfill our contractual obligations. We do not sell or share your data with third parties for marketing or any other purposes, except as described in this Privacy Notice. Specifically, we use personal data for the following purposes:

Providing advisory and consultancy services.
Responding to inquiries and providing support.
Billing and contract management (clients only).
Complying with legal obligations, including tax laws and data protection regulations.

4. Legal Basis for Processing

We process personal data based on the following lawful grounds:

Performance of a contract: To provide the services you have requested.
Legitimate interests: To improve our services, conduct business analysis, and communicate with you about relevant offerings.
Compliance with legal obligations: To fulfill our legal responsibilities.
Consent: Where necessary, we will obtain your explicit consent for specific processing activities.

5. Data Sharing

We may share your personal data with the following categories of trusted third parties:

Service providers: We engage service providers, such as Google Workspace for email and document storage, Google Analytics and Cloudflare Web Analytics for website analytics, Resend (operated by Resend Inc., with EU/Ireland data residency) for transactional email delivery from our contact form, Cloudflare (including Cloudflare Pages for hosting and Cloudflare Turnstile for form spam protection), and others for IT support, cloud storage, and payment processing.
Professional advisors: Legal, accounting, or other consultancy services.
Authorities: We may disclose your personal data as required by law or legal process.

We ensure that all third parties with whom we share personal data adhere to strict confidentiality and data protection standards in compliance with the GDPR.

6. Data Retention

To comply with legal requirements in Finland (Finnish Accounting Act 655/2003) and Portugal (Portuguese Commercial Code and Decree-Law No. 28/2019), we retain business records, including those that may contain personal data, for a period of 10 years. This retention period encompasses documents such as invoices, purchase orders, and other records relevant to financial transactions. This practice ensures adherence to legal and fiscal obligations, supports accurate financial reporting and auditing, and protects the company's legitimate interests. We implement appropriate security measures to safeguard these records and ensure that only necessary data is retained. Secure disposal procedures are employed upon expiration of the required retention period.

7. Your Rights

Under the GDPR, you have the following rights:

Access: Request access to your personal data.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data (right to be forgotten).
Restriction: Request restriction of processing of your data.
Objection: Object to the processing of your data.
Data Portability: Request a copy of your data in a portable format.
Withdrawal of Consent: Withdraw your consent at any time.

To exercise your rights, please contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. These measures include data encryption, access controls, and regular security assessments.

9. Cookies

Our website uses cookies to enhance your browsing experience and analyze website traffic. Cookies are small text files that are not executable code and pose no security risk. They cannot be used to distribute viruses. Cookies enable the website to remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time, so you do not have to keep re-entering them whenever you return to the site or browse from one page to another. More about cookies see aboutcookies.org (opens in new tab).

We use the following types of cookies:

Essential cookies: Necessary for the website to function properly, enabling basic functions like page navigation and access to secure areas.
Analytics cookies: Used by Google Analytics and Cloudflare Web Analytics to collect information about how visitors use our website, helping us to improve the website and your browsing experience. Analytics cookies are loaded only after you provide consent through our cookie banner, and you can change your preferences at any time. You can learn more about how Google uses your data at policies.google.com/privacy (opens in new tab).

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. However, if you do this, you may have to manually adjust some preferences every time you visit a site, and some services and functionalities may not work.

10. Contact Us

If you have any questions or wish to exercise your rights, please contact us at [email protected].

Altum Vista's Board of Directors
6 January 2025