Skip to main content
Digitaltableteur

Privacy Policy

Digitaltableteur respects your privacy and is committed to protecting your personal data. This policy explains what information is collected, how it is used and your rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Last updated:

Controller

Petri Lahdelma (Digitaltableteur) Helsinki, Finland Email: mail@digitaltableteur.com

What is this policy for?

This Privacy Policy describes how Digitaltableteur collects and processes personal data about potential clients, business contacts, partners and recruiters, website visitors, contact form users and newsletter subscribers. This data is collected to respond to inquiries, provide design and development services, improve the website and communicate about current offerings. The aim is to be transparent about these practices.

What data is collected and how is it used?

Contact form users and potential clients

If you get in touch via the forms or email, the following is collected:

  • Your name and contact information (email, phone number if provided)
  • Message content and any attachments you send
  • Information relevant to your inquiry or project request
  • Communication history between you and Digitaltableteur

This data is used to respond to your inquiries, process project requests, provide services and maintain the business relationship with you. Digitaltableteur has a legitimate interest to process this data based on your direct contact and the need to manage customer relationships.

Website visitors

When you visit this website, the following is collected automatically:

  • Technical data (IP address, browser type, device information)
  • Usage data (pages visited, time spent, navigation patterns)
  • Referral source (how you found this site)

This data is used with your consent (via cookie banner) to analyze site usage, improve user experience and optimize services. You can withdraw consent at any time with “Cookie preferences” in the site footer.

Website AI assistant users

When you use Donny, the message text and recent conversation context are sent to the configured model service to generate a reply. The chat route does not write the transcript to a Digitaltableteur application database. Your browser keeps a temporary sessionStorage copy until you clear the conversation or close the tab. The service provider may retain operational or abuse-monitoring records under the applicable account terms. Do not submit sensitive personal data.

Business contacts, partners and recruiters

If you work with Digitaltableteur as a client contact, partner, broker or recruiter or are named as the contact person in an assignment that Digitaltableteur may respond to, the following is processed:

  • Your name, work email, phone number, organisation and role
  • Email, calendar invitations and chat messages exchanged with Digitaltableteur
  • A record of the business relationship: contact dates, message subject lines, the status of assignments and proposals and notes
  • If you are named in an assignment posting: your name and role as published plus the posting text

The data comes from you, from your employer, from partners who introduce you and from assignment postings that brokers share.

It is used to answer you, prepare, deliver and invoice work, keep track of open assignments, follow up at the right time and contact you about assignments you have published. The legal basis is Digitaltableteur’s legitimate interest in running and developing its business (GDPR Article 6(1)(f)); where you are yourself the contracting party, the contract (Article 6(1)(b)). A summary of the legitimate-interest assessment is available on request.

The record of the business relationship is deleted 24 months after the last contact. Correspondence about an offer, contract or invoice is kept for six years from the end of the year, as Finnish bookkeeping law requires. Other correspondence is deleted 24 months after the last contact.

You can object at any time by writing to mail@digitaltableteur.com. Your data is then removed from the record of the business relationship and you will not be contacted about assignment postings again. Records that bookkeeping law requires are kept until their period ends.

Legal basis for processing

Digitaltableteur processes your personal data based on: (1) Your consent when you accept cookies; (2) Legitimate interest in managing business relationships, improving services and responding to inquiries, including messages sent through the contact form; (3) Contractual necessity when providing services you requested; (4) Legal obligations where required by Finnish or EU law.

Data sharing and third parties

Digitaltableteur does not sell your personal data. Data is only shared with trusted service providers necessary to operate the website and services:

  • Resend: for delivering contact form submissions
  • Vercel: for website hosting and delivery
  • Google Analytics: for website usage statistics (with your consent)
  • OpenAI, directly or through Vercel AI Gateway: to process website-chat messages and generate replies
  • MongoDB Atlas: for storing contact form submissions and records of data deletion requests
  • Microsoft 365: business email and calendar
  • Anthropic (Claude): AI assistance when working with business records such as contact details and message subject lines
  • Sentry (Germany): error reports with no form contents. Performance traces and masked session recordings only with your analytics consent, and never on client intake pages.
  • Ahrefs Analytics: website usage statistics (with your consent)
  • Cal.com (EU): the booking calendar. It loads only when you open the “Book a call” tab, sets its own security cookie and receives what you enter when you book.

Service providers that act as processors for Digitaltableteur are bound by data processing agreements. Your data is not shared outside these purposes unless required by law or public authorities.

Transfers outside the EEA

Some service providers (Vercel, OpenAI, Resend, Microsoft, Anthropic, Google, Ahrefs) may process data outside the European Economic Area. Lawful transfers are ensured through appropriate safeguards including standard contractual clauses approved by the European Commission, adequacy decisions or equivalent mechanisms under GDPR Articles 45 and 46.

Cookies and analytics

This website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. Some are necessary for the website to function; others help reveal usage patterns.

When you access this website, your consent is asked to store the following cookies:

  • Necessary cookies: required for basic site functionality (cookie consent choice, session management)
  • Analytics cookies: Google Analytics to measure visitor behavior, traffic sources and popular pages. This helps improve the site.
  • Performance monitoring: Sentry performance traces and masked session recordings, to monitor site speed and identify technical issues. These run only with your analytics consent.

You can change your choice at any time with “Cookie preferences” in the site footer. Clearing cookies alone does not withdraw consent, because the choice is stored in your browser’s local storage. Disabling non-essential cookies may limit some features but won’t prevent basic site access.

How long is your data stored?

Personal data is retained only as long as necessary for the purposes described or as required by law. The browser copy of an AI-chat transcript lasts for the current tab session or until you clear it; the chat route does not create a server-side transcript database. Provider operational or abuse-monitoring records follow the configured account terms. Contact form submissions are kept for up to 2 years or until you request deletion. Analytics data is anonymized after 14 months. Data no longer needed is regularly reviewed and deleted. Business correspondence and records of business relationships follow the periods under “Business contacts, partners and recruiters” above.

What rights do you have concerning your data?

Under GDPR, you have the following rights:

  • Right to access: request a copy of the personal data held about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your personal data (“right to be forgotten”)
  • Right to restrict processing: request limits on how your data is used
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests or for marketing purposes
  • Right to withdraw consent: withdraw your consent at any time (e.g., for cookies or newsletters)

To exercise any of these rights, contact mail@digitaltableteur.com. Digitaltableteur will respond within one month.

You can also delete your contact form and chat data yourself: Delete your data

If you believe your data has not been handled properly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (www.tietosuoja.fi) or your local data protection authority.

How is your data secured?

All personal data is considered confidential and protected with appropriate security measures:

  • Access controls: only authorized personnel can access personal data when necessary for their work
  • Encryption: data is transmitted over HTTPS and stored securely
  • Network security: the infrastructure and partners in use apply industry-standard protections against unauthorized access, loss or alteration
  • Service provider agreements: all third-party processors are contractually bound to maintain confidentiality and security standards

While every effort is made to protect your data, no method of transmission over the internet is 100% secure. Security practices are continuously reviewed and updated.

Changes to this Privacy Policy

This Privacy Policy may be updated as the website, services and practices improve. Any changes will be posted on this page with an updated “Last updated” date. You are encouraged to review this policy periodically.

Contact

For questions, requests or concerns about this Privacy Policy or your personal data, contact: mail@digitaltableteur.com or +358 45 657 4469