Privacy Policy
Drifting Clouds ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (driftingclouds.fi) and services, in compliance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.
1. Data Controller
Drifting Clouds
Turku, Finland
Email: info@driftingclouds.fi
Phone: +358 44 041 1200
2. What Data We Collect
2.1 Information You Provide
- Contact information: name, email address, phone number, and company name when you fill in our contact form or communicate with us
- Project information: details about your business needs and requirements shared during consultations
- Payment information: billing details processed securely through our payment provider (Stripe). We do not store your full credit card details on our servers
2.2 Information Collected Automatically
- Usage data: pages visited, time spent, referring URLs, browser type, and device information
- IP address: for security and analytics purposes
- Cookies: see Section 5 below for our cookie policy
3. How We Use Your Data
We process your personal data for the following purposes:
- Service delivery: to provide our IT consulting, AI solutions, and software development services
- Communication: to respond to your inquiries and provide customer support
- Billing: to process payments and send invoices
- Legal obligations: to comply with Finnish tax and accounting requirements
- Website improvement: to analyse usage patterns and improve our website
4. Legal Basis for Processing
We process your data based on:
- Contractual necessity: processing required to fulfil our service agreements
- Legitimate interest: website analytics and business development
- Consent: when you voluntarily submit information through our contact form
- Legal obligation: tax and accounting compliance under Finnish law
5. Cookies
Our website uses cookies to ensure basic functionality and analyse traffic. We use:
- Essential cookies: required for the website to function properly
- Analytics cookies: to understand how visitors interact with our website (anonymised)
You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.
6. Third-Party Services
We share data with the following third parties, each bound by their own privacy policies and GDPR obligations:
- Stripe: payment processing — Stripe Privacy Policy
- Google Fonts: typography delivery — font files are served with minimal data collection
We do not sell your personal data to third parties.
7. Data Retention
- Contact form submissions: retained for up to 12 months, unless a business relationship is established
- Client project data: retained for the duration of the engagement plus 3 years for warranty and support purposes
- Billing records: retained for 6 years as required by Finnish accounting legislation
- Website analytics: aggregated and anonymised data retained for up to 26 months
8. Your Rights Under GDPR
As an EU/EEA resident, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate personal data
- Right to erasure: request deletion of your personal data ("right to be forgotten")
- Right to restrict processing: request limitation of how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest
- Right to withdraw consent: withdraw consent at any time where processing is consent-based
To exercise any of these rights, contact us at info@driftingclouds.fi. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmission
- Secure hosting infrastructure within the EU
- Access controls and authentication procedures
- Regular security assessments
10. International Data Transfers
Your data is primarily processed within the EU/EEA. If any data is transferred outside the EEA, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions by the European Commission).
11. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Turku, Finland
tietosuoja.fi
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
13. Contact Us
For questions about this Privacy Policy or your personal data, contact us at:
Drifting Clouds
Email: info@driftingclouds.fi
Phone: +358 44 041 1200
Turku, Finland