Privacy Policy

Effective date: 31 January 2026

Firmon Oy (“Firmon”, “we”, “us”) is committed to protecting your privacy and handling personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, or engage with our services.

01 Data Controller

Firmon Oy
Business ID: 3588687-6
Email: [email protected]

02 Scope of this policy

This Privacy Policy applies to:

Visitors of the Firmon website
Individuals contacting us via forms, email, or consultation requests
Potential clients submitting project ideas or inquiries
Newsletter subscribers (if applicable)

This policy does not cover client data processed under separate project agreements.

03 Personal data we collect

3.1 Data you provide voluntarily

We may collect the following information when you contact us or submit a project request:

Name
Email address
Company name
Website URL
Project description or business idea
Any other information you choose to provide

Providing this information is voluntary but necessary for us to respond meaningfully.

3.2 Automatically collected data

When you visit our website, limited technical data may be collected automatically:

IP address
Browser type and version
Device type
Pages visited and usage patterns
Date and time of access

This data is used only for technical operation, security, and basic analytics. It is not used to identify you personally.

04 Purpose of processing

We process personal data for the following purposes:

Responding to inquiries and project requests
Communicating about potential or ongoing collaboration
Improving our website and services
Ensuring technical functionality and security
Complying with legal obligations

We do not sell personal data or use it for advertising without explicit consent.

05 Legal basis for processing (GDPR)

We process personal data under the following legal bases:

Consent (Article 6(1)(a)) – when you voluntarily submit information
Legitimate interest (Article 6(1)(f)) – to respond to inquiries and operate our business
Contractual necessity (Article 6(1)(b)) – when preparing or performing an agreement
Legal obligation (Article 6(1)(c)) – when required by law

06 Data retention

We retain personal data only as long as necessary:

Inquiry data is retained as long as relevant for communication or potential cooperation
Client-related data is retained according to contractual and legal requirements

Data that is no longer needed is securely deleted or anonymized.

07 Data sharing and processors

We may use trusted service providers (e.g. hosting, email delivery) to operate our services. These providers act as data processors and are contractually required to:

Process data only on our instructions
Apply appropriate security measures
Comply with GDPR

We do not share personal data with third parties for marketing purposes.

08 International data transfers

If personal data is processed outside the EU/EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved under GDPR.

09 Your rights

Under GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with a supervisory authority

Requests can be sent to <a href="mailto:[email protected]" class="text-[#358d7e] hover:underline">[email protected]</a>.

10 Cookies

We may use essential cookies required for the website to function properly. We do not use tracking or marketing cookies without explicit consent.

11 Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

12 Changes to this policy

We may update this Privacy Policy when necessary. The latest version will always be available on our website with the effective date clearly stated.

13 Contact

For questions regarding this Privacy Policy or data protection matters, contact: [email protected]