1. Data controller
The controller of this site and the personal data related to it is:
- DiagHaus Oy (Business ID 3564138-5), domiciled in Tampere, Finland
- Verkkonova is the marketing and service name of DiagHaus Oy
- Email: verkkonova@gmail.com
For any privacy matter, contact the address above. No separate data protection officer has been appointed, as the scale of operations does not require one.
2. What data we collect
The site requires no registration or sign-in. Personal data arises in two ways.
Through the contact form you provide:
- your name
- your email address
- the content of your message and anything you choose to include in it
- the language version you used (Finnish or English)
In addition, the following is generated technically:
- your IP address, used solely to prevent abuse of the form and held in server memory for at most ten minutes
- ordinary server logs kept by our hosting provider (time of request, address, browser type)
We collect no special categories of data and do not profile visitors. No automated decision-making takes place.
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a proposal | Steps prior to entering a contract at your request (GDPR Art. 6(1)(b)) |
| Managing the client relationship if the enquiry leads to an engagement | Contract (GDPR Art. 6(1)(b)) |
| Preventing abuse and spam through the form | Legitimate interest in securing the service (GDPR Art. 6(1)(f)) |
| Measuring visitor numbers anonymously | Legitimate interest in improving the service (GDPR Art. 6(1)(f)) |
| Retaining accounting records after an engagement | Legal obligation (GDPR Art. 6(1)(c)) |
We do not send marketing messages to addresses received through the contact form without your separate consent.
4. Cookies and analytics
The site uses no tracking or advertising cookies, which is why it has no cookie banner.
One technical cookie is stored in your browser:
- vn_lang — remembers your chosen language for one year. It contains no identifying information and is not shared with anyone.
Visitor numbers are measured with Plausible Analytics, a cookieless service hosted in the EU (Germany). It does not store your IP address as such and does not link visits to an individual, so no personal data register is created.
5. Who receives the data
We do not sell or rent data. We use the following providers, which process data on our behalf:
| Service | Role | Location |
|---|---|---|
| Vercel | Site hosting and server logs | EU / United States |
| Resend | Delivering contact form messages as email | EU (Ireland) |
| Google (Gmail) | The mailbox enquiries arrive in | EU / United States |
| Plausible Analytics | Anonymous visitor measurement | EU (Germany) |
Data may also be disclosed to authorities where the law requires it.
6. Transfers outside the EU and EEA
Some of our providers are US-based. Such transfers rely on the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework. No other transfers outside the EU and EEA take place.
7. Retention periods
- Enquiries that do not lead to an engagement: up to 12 months, after which the message is deleted.
- Enquiries that lead to a client relationship: for the duration of the relationship and three years after it ends.
- Accounting material: the six years required by the Finnish Accounting Act.
- IP address used for abuse prevention: at most ten minutes.
8. How data is protected
The site runs over an encrypted HTTPS connection. Enquiries arrive in a mailbox protected by a password and two-factor authentication. Access is limited to those who need it for their work — in practice, the owner of the company.
9. Your rights
You have the right to:
- know what data we hold about you and receive a copy of it
- have inaccurate data corrected
- have your data erased when there is no longer a basis for processing it
- object to processing based on legitimate interest
- request that processing be restricted
- receive the data you provided in a portable format
Send an informal request to verkkonova@gmail.com and we will respond within one month. If you believe your data has been handled improperly, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
10. Changes to this policy
We update this policy whenever the service or the tools behind it change. The version in force is always the one on this page, and the date of the latest update is shown at the top.