Privacy notice

Iippo Paaso

iippo@iippopaaso.fi

Phone: 044 200 1616

Business ID: 3394664-4

When you submit the form, I handle your name or company name, message, selected contact method or methods, and the email address and/or phone number you provide. The form data is forwarded by email from the site server to iippo@iippopaaso.fi. The site application does not store message contents in a database. If you contact me directly by email, I handle your sender details and message contents to respond to you.

To limit spam, the site application processes a hashed identifier derived from your IP address and timestamps. Technical information related to email delivery may include the sender, recipient, send time, routing information and delivery result.

I use your information to respond to your message and handle requests about my services. If you ask for a quote or another step before entering a contract, the basis is Article 6(1)(b) GDPR: taking steps at your request before entering a contract. I rely on legitimate interests under Article 6(1)(f) GDPR to respond to other enquiries and prevent abuse of the contact channel. These interests are to respond to relevant messages and protect the form from spam.

Providing information and contacting me are voluntary. To submit the form, you must provide your name or company name, a message and at least one contact method. If you choose email or phone, you must provide that contact detail; if you choose both, both details are required. Without the required information, you cannot submit the form. You can also email me directly. Please do not include sensitive information that is not needed.

The site does not set cookies or use analytics, advertising tracking or tracking pixels. It contains an external LinkedIn link. LinkedIn processes browser information only if you follow the link to its service.

The site and my email account are hosted by Polar55. Contact form messages are forwarded through the hosting provider’s email system to my mailbox. Polar55 is part of Nordicway ApS. Polar55’s terms and data processing agreement, updated 4 September 2026, state that its servers are in Germany. The terms say hosting backups are stored in the EU for 14 days and mirrored to another EU country for three months.

Polar55’s subprocessor list names Hetzner for servers, NSEC Solutions for server operations and Sampedro ApS for support. Its published agreement says data is not transferred outside the EU/EEA without the customer’s written consent.

I delete an enquiry email from my mailbox once the matter has been handled and the message is no longer needed. If the enquiry leads to a client relationship or another contractual or legal need to keep information, I retain only what is necessary for that period. Deleting a message from my mailbox does not immediately remove the provider’s backups: Polar55’s terms state that backups are kept in the EU for 14 days and a mirrored copy in another EU country for three months.

The site’s spam protection uses a rolling one-hour window. Expired timestamps are cleaned up when later form requests are processed, so cleanup may happen later if no new requests arrive. The IP-derived identifiers do not contain form messages.

Email delivery metadata is retained for 10 days.

Where applicable, you can ask to access your personal data, correct it, erase it or restrict its processing. You can object to processing based on legitimate interests and, in certain situations, request data portability. You can lodge a complaint with the Office of the Data Protection Ombudsman.

The site does not make decisions about you based on automated processing of personal data.

For data protection questions or to exercise your rights, email iippo@iippopaaso.fi.