Legal
Privacy Policy
How Etelä-Savon Kiinteistönotariaatti Oy handles personal data under Regulation (EU) 2016/679 (GDPR) and the Finnish Data Protection Act (1050/2018).
Last updated: 8 September 2026
The company behind this website
- Legal name
- Etelä-Savon Kiinteistönotariaatti Oy
- Business ID
- 0453186-1
- EU VAT
- FI04531861
- Registered address
- Mikonkatu 8 A 15, 50100 Mikkeli, Finland
Contact: info@kiinteistonotariaatti.com · Full register record on the company & register page.
1. Who is the controller
Etelä-Savon Kiinteistönotariaatti Oy, Business ID 0453186-1, Mikonkatu 8 A 15, 50100 Mikkeli, Finland, is the controller for personal data collected through this website. Data-protection enquiries go to info@kiinteistonotariaatti.com. We have not appointed a Data Protection Officer, because the scale and nature of our processing does not meet the conditions in Article 37 that would require one.
2. What we collect, why, and on what basis
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Consultation form: company name, contact person, email, phone, Y-tunnus, service, invoice volume, message | To answer your enquiry and describe what an engagement would involve | Art. 6(1)(a) consent; Art. 6(1)(b) steps before a contract | 24 months from last contact |
| Contact form: name, email, organisation, phone, subject, message | To reply to you | Art. 6(1)(a) consent | 24 months from last contact |
| A salted one-way hash of your IP address, and your browser user agent | To rate-limit the forms and evidence that consent was given | Art. 6(1)(f) legitimate interest in preventing abuse | 24 months, alongside the submission |
| Cookie choice (stored in your browser, not on our servers) | To remember your decision and not ask again | Art. 6(1)(c) — the ePrivacy rules require us to record it | 12 months, or until you clear it |
| Estimator inputs | Computed in your browser; sent to our server only if you choose to attach them to a request | Art. 6(1)(a) consent, at the point you attach them | With the request, 24 months |
We never store your raw IP address. It is hashed with a secret salt the moment a request arrives, which lets us block repeated abuse without keeping an identifier we could reverse.
Using the estimator on its own creates no record of you at all. It runs entirely in your browser unless you deliberately attach the result to a request.
3. Who else sees your data
Our hosting provider and our email provider process data on our behalf as processors, under written agreements that meet Article 28. We do not sell personal data, we do not share it with advertising networks or data brokers, and we do not use enquiry data to build advertising audiences.
Where this website is hosted. The server is operated by Namecheap, Inc. and is physically located in Los Angeles, California, United States — outside the European Economic Area. We state this plainly rather than imply European hosting we do not have. Anything you submit through a form on this site is therefore transferred to the United States, where the transfer relies on the European Commission's Standard Contractual Clauses together with the technical measures described below: the connection is encrypted with TLS, your IP address is hashed before storage, and the database is not reachable from the public internet.
This concerns the website only. Client accounting records are not held on this server and are not processed outside Finland; they are governed by the engagement agreement described in section 5.
4. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time without affecting processing already carried out. Email info@kiinteistonotariaatti.com and we will respond within one month.
If you are not satisfied, you may complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi), or to the supervisory authority where you live.
5. Client accounting records
This policy covers the website. Personal data inside client accounting material — payroll records, invoices, ledgers — is processed under the engagement agreement, where we act as processor and the client is controller. Retention there follows the Accounting Act (1336/1997): accounting records are kept for the statutory period, which is generally ten years for financial statements and six years for vouchers.
6. Security
The site is served over TLS. Form submissions are rate-limited, validated on the server, and stored in a database that is not reachable from the public internet. Access is limited to the people who need it to answer enquiries. No system is perfectly secure, and we will notify you and the supervisory authority of a breach where the GDPR requires it.
7. Changes
If this policy changes materially, the date above changes and — where the change affects cookies — you will be asked for your choice again rather than having an old decision carried over.