Privacy Notice
Updated 29 October 2026
This notice explains how I process personal data when you use henrivalkeinen.com, contact me or are my client. It is based on the EU General Data Protection Regulation (2016/679).
1.Controller
Henri Valkeinen (sole trader), Business ID 2555612-8
Email: henri@henrivalkeinen.com
Phone: +358 400 449 996
You can use these contact details for all matters related to data protection.
2.What data I process
- Details you provide via the contact form or email: name, company or organisation, email address, phone number and the content of your message.
- Client relationship data: contact person details, quotes, agreements, invoicing details and project-related communication.
- Technical log data, such as IP address, browser details and time of visit, collected by the website hosting service to keep the service running and secure.
3.Purposes and legal bases
- Replying to enquiries and preparing quotes. Basis: steps prior to entering into a contract and legitimate interest (GDPR Article 6(1)(b) and (f)).
- Carrying out assignments, client communication and invoicing. Basis: performance of a contract (Article 6(1)(b)).
- Bookkeeping and other statutory obligations. Basis: legal obligation (Article 6(1)(c)).
- Website maintenance and security. Basis: legitimate interest (Article 6(1)(f)).
I do not use the data for automated decision-making or profiling.
4.Retention
Enquiries are kept as long as necessary to reply and to manage a possible client relationship. Client relationship data is kept for the duration of the relationship and afterwards as long as needed, for example for later video updates or complaints. Accounting records are kept for the period required by the Finnish Accounting Act. Data that is no longer needed is deleted.
5.Recipients
I do not sell or disclose personal data to third parties for marketing. The data is processed on my behalf by service providers I need to run the website and my business:
- Netlify, Inc. (United States): website hosting and contact form messages.
- Email, invoicing and file transfer services for client communication and delivering material.
Data may be disclosed to authorities where required by law.
6.Transfers outside the EU/EEA
Netlify, Inc. also processes data in the United States. Transfers are based on the EU–U.S. Data Privacy Framework, to which Netlify has committed, and on the European Commission's standard contractual clauses.
7.Cookies and embedded videos
The website does not use analytics or marketing cookies, and visitors are not tracked. The website fonts are served from the website's own server.
The background video on the front page and the showreel are YouTube videos embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com). When the videos load and play, YouTube (Google Ireland Limited) may process your IP address and store information on your device in accordance with Google's privacy policy. You can limit this in your browser settings.
8.People being filmed
When I film on behalf of a client, the client is responsible for obtaining the necessary consents from the people being filmed and acts as the data controller for its own personnel (see section 7 of the terms and conditions).
9.Your rights
You have the right to:
- know what data I process about you and receive a copy of it
- request correction of inaccurate data
- request erasure of your data or restriction of its processing
- object to processing based on legitimate interest
- transfer the data you have provided to another system where processing is based on a contract.
You can exercise your rights by emailing henri@henrivalkeinen.com. If you believe your data is processed in breach of data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).
10.Security and changes
The website uses an encrypted HTTPS connection. Data is protected with appropriate technical and organisational measures, and access to it is restricted. I update this notice when needed, and the current version is always on this page.