Privacy Policy

Data controller

NOX Visual Oy
Business ID: 3371824-6
Address: Ratsutie 2, Ylöjärvi
Data protection: info@noxvisual.fi

Purposes of processing

• Responding to enquiries submitted via the contact form
• Following up on enquiries and managing customer service

Legal basis for processing

We process personal data on the basis of legitimate interests (GDPR Art. 6(1)(f)). We have a legitimate interest in responding to enquiries sent to us. A person submitting an enquiry has a reasonable expectation of a reply, and processing is limited to what is necessary.

Completing the form is voluntary. Without your contact details, however, we cannot respond to your enquiry.

Personal data collected

• Name (first and last name)
• Email address
• Message content (free-form text)
• Technical log data (IP address and browser information recorded automatically in hosting and database logs)

Recipients of data

We use the following sub-processors that process data on our behalf:

• Resend Inc. (USA) — Email delivery service — forwards enquiries to the controller
• Vercel Inc. (USA) — Web hosting platform running the site
• Neon Inc. (USA) — PostgreSQL database storing form submissions

Transfers outside the EU

Data is transferred outside the EU/EEA (to the USA) with the following safeguards: Vercel Inc. participates in the EU–US Data Privacy Framework (DPF), and Standard Contractual Clauses (SCCs, 2021/914) are in place with Neon Inc. The transfer safeguard for Resend Inc. is based on its Data Processing Agreement (DPA).

Retention period

Data submitted via the contact form is retained for 24 months from the date of the last contact, after which it is deleted or anonymised. Infrastructure logs are retained in accordance with the providers’ own policies.

Your rights

As a data subject you have the following rights:

• Right of access (Art. 15) — You may request a copy of the data we hold about you.
• Right to rectification (Art. 16) — You may request correction of inaccurate data.
• Right to erasure (Art. 17) — You may request deletion of your data when there is no longer a basis for processing it.
• Right to restriction (Art. 18) — You may request restriction of processing, e.g. while disputing the accuracy of the data.
• Right to data portability (Art. 20) — We will provide your data in a machine-readable format on request.
• Right to object (Art. 21) — You may object to processing based on legitimate interests; we will stop unless we have compelling grounds to continue.
• Right not to be subject to automated decision-making (Art. 22) — We do not make significant automated decisions about you.

To exercise your rights, send a request by email to the controller. We will respond within one month (GDPR Art. 12). We may ask you to verify your identity.

You have the right to lodge a complaint with the supervisory authority: the Finnish Data Protection Ombudsman (tietosuoja.fi), PO Box 800, FI-00531 Helsinki, Finland.

Cookies

This website uses essential cookies only. A normal visit sets no tracking or analytics cookies. Admin login sets a session-scoped `payload-token` cookie (HTTP-only). No cookie consent banner is required (Traficom/ePrivacy: essential only).