Legal

Privacy Notice

This Privacy Notice explains how pixelspotlogix ("we", "us", or "our"), operated by pixelspotlogix Oy, collects, uses, and manages information when you use our website. We are committed to processing data responsibly and in alignment with relevant UK data protection principles, including the UK GDPR, the Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR).

1. Identity of the Data Controller

For the purposes of applicable data protection laws, the Data Controller responsible for your personal information is:

pixelspotlogix Oy
Mannerheimintie 12 B
00100 Helsinki, Finland

If you have any questions regarding this privacy notice, you may contact our designated Data Protection Officer via our main contact form.

2. Information We Collect (Data Minimisation)

We practice strict data minimisation. The only personal data we actively collect is the information you choose to provide via our contact forms and standard email communications:

  • Identity Data: First name and last name.
  • Contact Data: Email address and phone number (if provided).
  • Professional Data: Organisation Type, Business Challenge details, and professional context.
  • Message Content: Any additional context or free-text information you submit.

We do not collect special categories of personal data (e.g., details about race, religion, political affiliations) and kindly ask that you do not submit such sensitive information through our channels.

3. Legal Basis for Processing

Under the GDPR (and UK GDPR), we must have a legal basis to process your personal data. We rely on the following bases:

  • Contractual Necessity: Processing your data is necessary to provide you with requested service information or to take steps at your request prior to entering into a contract.
  • Legitimate Interests: We may process data for our legitimate business interests, such as improving our website, preventing fraud, or maintaining the security of our IT systems, provided these interests do not override your fundamental rights.
  • Consent: In circumstances where you have explicitly opted in (e.g., subscribing to a newsletter), we rely on your active consent, which you can withdraw at any time.

4. Purpose Limitation

We process this contact form handling data solely for the following purposes:

  • To respond to your specific inquiry and fulfill requests.
  • To evaluate if our consulting services match your operational requirements.
  • To communicate regarding potential or active business engagements.
  • To maintain internal administrative and operational records safely.

5. Data Retention Period

We do not hold data indefinitely. We follow these standard retention guidelines:

  • Inquiries not leading to business: Data is purged from our active systems 12 months after the last communication.
  • Active Client Data: Maintained for the duration of the engagement, plus up to 6 years following the conclusion of the contract to comply with tax and legal obligations.

6. Technical Data and Analytics

Our website collects basic technical data (such as browser type, generic location, IP addresses, and page navigation patterns) necessary for the secure and functional delivery of the website. For specific information regarding tracking technologies, please review our Cookie Policy.

7. Your Data Subject Rights

Subject to relevant legislation, you maintain robust rights regarding your information:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to Erasure ('Right to be Forgotten'): You can ask us to delete your personal data where there is no good reason for us continuing to process it.
  • Right to Restriction: You can ask us to suspend processing of your personal data under certain scenarios.
  • Right to Data Portability: You can request the transfer of your personal data to you or a third party in a structured, machine-readable format.
  • Right to Object: You can object to processing where we rely on legitimate interests.

To exercise these rights, please submit a request through our contact form. We aim to respond to all legitimate requests within 30 days.

8. How We Share Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with trusted third-party IT service providers (such as hosting partners or CRM platforms) who assist us in operating our website and business, provided that those parties agree to keep this information confidential and comply with strict data protection addendums.

9. International Data Transfers

While we are headquartered in Finland and focus on the UK market, our digital infrastructure may involve servers located across the European Economic Area (EEA) and the UK. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or ensuring the destination country holds an adequacy decision, to maintain the protection of your personal data.

10. Data Security Measures

We implement a variety of security measures to maintain the safety of your personal information. These include encrypted transmission (SSL/TLS), role-based access controls, robust password policies, and regular security reviews. However, please be aware that no method of transmission over the internet is entirely infallible.

11. Complaints to Supervisory Authorities

If you believe our processing of your personal data infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In the UK, this is the Information Commissioner's Office (ICO). In Finland, it is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

12. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal obligations. We will post the revised notice on this page with an updated revision date.

Last updated: October 2023