Privacy Policy

1. Introduction

Attractor Oy (“Attractor”, “we”, “us”, or “our”), business ID: 3592322-7, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at www.attractor.fi or engage with our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Finnish data protection legislation.

2. Data Controller

Attractor Oy
Business ID: 3592322-7
Email: info@attractor.fi

3. Personal Data We Collect

We may collect the following categories of personal data:

• Contact form submissions — name, email address, company name, message content, inquiry type, and any additional information you choose to provide (e.g., preferred call times, timezone).
• Website usage data — page views, referral sources, device type, browser type, and general geographic location (country/region level). This data is collected in an anonymised or aggregated form.
• Communication data — information exchanged when you contact us directly via email or other channels.

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and communicate with you about our services.
• To analyse website usage and improve the performance and content of our website.
• To comply with legal obligations applicable to us.
• To protect our legitimate business interests, including fraud prevention and security.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Consent (Article 6(1)(a)) — when you submit the contact form or voluntarily provide your information to us.
• Legitimate interest (Article 6(1)(f)) — for website analytics to understand how our website is used and to improve our services.
• Legal obligation (Article 6(1)(c)) — when processing is necessary to comply with applicable laws.
• Performance of a contract (Article 6(1)(b)) — when processing is necessary to perform a service agreement with you.

6. Third-Party Services

We use the following third-party services that may process your data:

• Vercel Analytics — privacy-friendly website analytics. Vercel Analytics does not use cookies and does not collect personally identifiable information. Data is processed in accordance with Vercel’s Privacy Policy.
• EmailJS — email delivery service used to process contact form submissions. When you submit the contact form, your data is transmitted through EmailJS servers. Data is processed in accordance with EmailJS’s Privacy Policy.
• Vercel — our website hosting provider. Data is processed in accordance with Vercel’s Privacy Policy.

7. Cookies

Our website uses minimal cookies. Vercel Analytics is cookie-free and privacy-friendly. We do not use advertising cookies or tracking cookies from third parties.

Essential cookies may be set by our hosting infrastructure for security and performance purposes. These are strictly necessary for the operation of the website and cannot be disabled.

8. Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your personal data in accordance with the GDPR.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form data — retained for the duration of our business relationship and for a reasonable period thereafter to respond to follow-up inquiries, unless a longer retention period is required by law.
• Website analytics data — retained in anonymised and aggregated form. No personally identifiable information is stored.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure — you may request deletion of your personal data where there is no compelling reason for continued processing.
• Right to restrict processing — you may request restriction of processing in certain circumstances.
• Right to data portability — you may request to receive your data in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at info@attractor.fi. We will respond to your request within 30 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi