Privacy Policy
Updated: 16 Oct 2026
Controller: Anatolii, HÄRKÄ VISION, Joensuu, Finland. I operate as a light entrepreneur and invoice through the Ukko.fi service. Contact by email or the form.
What data is collected
Via the contact form: name, email or phone (WhatsApp), service choice, situation/message (optional) and a note that you have read this privacy policy. If you pick a preferred day in the calendar, it is sent with the message. Quick review: your site address, name and email or WhatsApp number. Checklist download: name, email and a separate consent. Project brief (/fi/aloitetaan): company and project details, contact details, optional files (logo, photos), billing details (optional) and separate permissions for portfolio use or a review. A name and one contact detail are needed so I can reply. Without them I cannot reply. Other fields are optional unless the form says required. Technical server logs (IP, browser) only for security and abuse prevention.
How the data is used
To reply to messages, prepare quotes and fulfil contracts. Checklist: the file on this site and a possible reply on that topic. No newsletter or marketing list without a new, separate consent.
Legal basis (GDPR)
Contact and quick review: legitimate interest (GDPR 6.1.f), meaning I reply when you ask something. Quote and order: contract (GDPR 6.1.b). Project brief and billing details: contract and the steps before it that you ask for (GDPR 6.1.b). Checklist and permission for portfolio use or a review: consent (GDPR 6.1.a). Server logs: legitimate interest, meaning site security and abuse prevention (GDPR 6.1.f). Google Analytics and Microsoft Clarity: consent (GDPR 6.1.a), given for each one separately. You can withdraw analytics consent in the cookie settings. You can withdraw checklist, portfolio and review consent by email to harka.nettisivut@outlook.com. Withdrawal does not affect what was done before it. Cookies are explained in the banner and on the cookies page.
Retention period
Contact messages, quick reviews and project briefs kept for 24 months at most, unless a longer need arises from an ongoing client relationship. Checklist details for 24 months at most, or until you ask for erasure. Invoices are kept by Ukko.fi under the Accounting Act. Server logs are deleted automatically within a few days. Google Analytics data is kept for 14 months at most. Microsoft Clarity recordings are kept for 30 days, click summaries and labelled recordings for 9 months at most.
Who receives the data
Form messages and intake files are delivered to me through a Telegram bot (api.telegram.org) so I can reply. Telegram is the carrier of the message, not a marketing partner. The site runs on Cloudflare, Inc. servers. Cloudflare processes technical details of page requests and passes forms through the server. I reply by email (Microsoft) or WhatsApp (WhatsApp Ireland Limited), depending on what you choose. When a job is invoiced, I pass the billing details to the Ukko.fi service, which sends the invoice. If you allow Google Analytics, visitor data is processed by Google Ireland Limited. If you allow Microsoft Clarity, pages, clicks and scrolling are processed by Microsoft Corporation. Form fields are masked in the recording. I do not sell data.
Transfers outside the EU/EEA
Cloudflare, Inc. is a US company, and data may be processed in the United States. Cloudflare is certified under the EU-US Data Privacy Framework. Telegram Messenger Inc. operates outside the EU/EEA. According to Telegram, data of users registered from the EU/EEA is stored in the Netherlands, and intra-group transfers use EU standard contractual clauses: telegram.org/privacy/eu. Google Analytics and Microsoft Clarity data may be transferred to the United States. Google and Microsoft are certified under the EU-US Data Privacy Framework.
Your rights
Access, rectify, erase, restrict and object to processing, and request data portability. Send a request by email and I reply within a month. I do not make decisions about you based solely on automated processing (GDPR Article 22). Complaints to the Finnish Data Protection Ombudsman: tietosuoja.fi
Cookies
Essential storage for the site to work. Google Analytics 4 and Microsoft Clarity load only if you allow them. You can allow them separately and withdraw your choice at any time. Cookies are governed by Finland's Act on Electronic Communications Services (205 §), with guidance from Traficom. See the cookies page.