Privacy Policy

Updated 20 August 2026

  1. Controller

    Kitkaton Oy (business ID 3624656-3), Helsinki, Finland. For privacy matters, please use the address below.

  2. What we collect

    We use Google Analytics 4 to measure how the site is used. It collects the following, and only if you have given your consent:

    • IP address, anonymised
    • Browser and device information
    • Page views and session duration
    • Referring site

  3. What we do not collect

    We run no advertising tracking and no profiling. The signals that identify a Google account, and ad personalisation, are switched off, so analytics does not tie your visit to a person or to other devices. We do not sell or pass on data.

  4. Contact form

    When you send the form, we process what you entered: name, email address, an optional phone number and company, and your message. It is sent as email to yhteydenotot@kitkaton.fi, and you receive a confirmation at the address you gave. Nothing is stored in a database and nothing is used for marketing.

    The legal basis is answering your enquiry, that is legitimate interest (GDPR art. 6(1)(f)). Messages stay in our mailbox for as long as handling the matter requires, at most 24 months.

    To prevent abuse, the server checks where the request came from and limits how often it can be sent. No cookies and no tracking are involved.

  5. Purpose and legal basis

    Analytics data is used solely to analyse and improve how the site is used. The legal basis is consent (GDPR art. 6(1)(a)). You are not obliged to give it, and the site works in full without analytics cookies.

  6. Processors and transfers

    Analytics data is transferred to Google LLC, which has committed to the EU standard contractual clauses (SCC). Data may be processed outside the EU, including in the United States.

    The site and the contact form run on Google cloud services. The form is processed inside the EU (Finland), and email is sent through Google Workspace.

  7. Retention

    Google Analytics data is kept for 14 months and then deleted automatically. Contact enquiries are kept for at most 24 months.

  8. Your rights

    You have the right to:

    • Withdraw consent at any time by clearing your browser cookies and local storage
    • Request access to the data concerning you
    • Request that data be corrected or erased
    • Object to processing based on legitimate interest
    • Lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi)

  9. Cookies

    Google Analytics sets cookies only after you have consented. Your choice is stored in your browser local storage under the key cookie_consent. You can withdraw consent by clearing your browser cookies and local storage.