Privacy Policy
Updated: 30 August 2026
1. Controller
PalveMax Oy (Business ID 3479337-9), Saturnuksenkatu 2 B 18, 11130 Riihimäki, Finland. Email: info@palvemax.fi
2. Data we collect
- Name, phone, email — from the contact form
- City and service — for processing your request
- Photos — if you attach them
- Technical data: IP address, browser type — via analytics (with consent only)
3. Purposes and legal bases
Handling your request — performance of a contract or steps taken prior to entering into a contract (GDPR Art. 6(1)(b)).
Site analytics — consent (GDPR Art. 6(1)(a)), collected through the cookie banner and revocable at any time.
4. Retention
Request data is kept for 2 years after the last contact. Accounting records are kept for 7 years as required by the Finnish Accounting Act. Technical logs: up to 12 months.
5. Recipients and transfers outside the EEA
| Recipient | What data | Where processed | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. | Site hosting: IP address and server logs | EU (Frankfurt) and USA | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Contact form content: name, phone, email, city, service, message and attached photos | USA | Standard Contractual Clauses |
| Telegram Messenger Inc. | New request notification: name, phone, email, city, service and message | Outside the EEA | Standard Contractual Clauses. Photos are not sent through this channel. |
| Google Ireland Ltd. (Google Analytics 4) | Visit data and truncated IP address — only with cookie consent | EU and USA | EU–US Data Privacy Framework, Consent Mode v2 |
We do not sell your data or share it for marketing purposes. The companies listed act as data processors on our behalf under contract and the EU Standard Contractual Clauses. You may request a copy of the transfer safeguards by email.
6. Your rights
- Access to your data and a copy of it (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability in a machine-readable format (Art. 20)
- Objection to processing on grounds relating to your situation (Art. 21)
- Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal. Cookie consent can be changed from the button in our cookie policy.
We do not carry out automated decision-making or profiling. Providing your details is voluntary, but without a name and phone number we cannot process a request.
To exercise your rights, contact info@palvemax.fi; we reply within 30 days. You may also lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi.