1. Who we are
This website is operated by Akmalito AB (Y-tunnus 3551267-1), Helsinki, Finland. Akmalito AB is the data controller for the personal data described in this policy. You can contact us about privacy matters by email at [email protected] or through the contact form.
2. What we collect
When you use the Discovery Call form, we collect the information you choose to provide:
- your full name and business email address (required);
- your company, job title, country and area of interest (optional);
- the description of your business challenge;
- confirmation that you gave consent, with the date and time of your submission.
Please do not include sensitive personal data, such as health information, in the form.
When you visit the website, our hosting provider may also process technical information such as your IP address, browser type and the time of your request. This is needed to deliver the website securely.
3. Why we use it and our legal basis
- Responding to your enquiry and arranging a discovery call — based on your consent (Article 6(1)(a) GDPR). Where the conversation turns to a possible engagement, we also rely on taking steps at your request before entering into a contract (Article 6(1)(b)).
- Operating and securing the website — based on our legitimate interest in keeping the website available and secure (Article 6(1)(f)).
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Cookies and third-party content
This website does not use analytics, advertising or tracking cookies. Fonts are loaded from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google when a page loads. Google’s handling of that data is described in the Google Privacy Policy.
5. Who we share it with
We share personal data only with service providers that help us run this website and respond to you — our form-processing provider, Web3Forms (which delivers form submissions to our company email address, [email protected]), our email provider and our website host. They act on our instructions and are bound by data processing terms. If a project-based specialist needs to be involved in responding to your enquiry, we will only share your details with your agreement.
6. Transfers outside the EU/EEA
Some service providers may process data outside the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as a European Commission adequacy decision or the EU Standard Contractual Clauses.
7. How long we keep it
We keep enquiry data for as long as needed to respond and follow up, and delete it no later than 24 months after our last contact with you. If your enquiry leads to an engagement, the relevant data is kept for the duration of that relationship and afterwards for as long as the law requires, for example under Finnish accounting legislation.
8. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To use any of these rights, contact us by email at [email protected] or through the contact form. You also have the right to lodge a complaint with the Finnish supervisory authority, the Office of the Data Protection Ombudsman.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections to this website and restricted access to enquiry data.
10. Changes to this policy
We may update this policy when our services or legal requirements change. The date at the top shows when it was last revised.