Skip to content

Privacy

Privacy policy

What information I collect, what I use it for and what rights you have.

I collect only what is needed to answer your message and deliver your basin. The site has no advertising and no cookies. Visitor numbers are counted anonymously.

Updated 22 October 2026

This is an English translation of the Finnish privacy policy. If the two differ, the Finnish version applies.

01

Controller

Aregran (Nikolas Areva), business ID 3645759-8, based in Turku, Finland. For data protection matters, contact me by email or phone. I handle these myself; no data protection officer has been appointed, and the business is not required to appoint one.

02

What information is collected

The contact form collects your name, email address, phone number if you give one, the subject and the content of your message. If you get in touch by email or phone, what remains is what you tell me in your message.

Contact details
Name, email address and phone number if given.
Message content
The subject and whatever you write.
Order details
Delivery address and details of the basin ordered, if a sale is made.

03

What the information is used for

To answer your message, prepare a quote, handle your order and deliver your basin. The information is not used for marketing or profiling, and no automated decisions are made on the basis of it.

The legal basis for processing is the preparation and performance of a contract (GDPR Article 6(1)(b)) and the legitimate interest in answering enquiries (Article 6(1)(f)). For accounting records, the basis is a legal obligation (Article 6(1)(c)).

04

How long the information is kept

Enquiries that do not lead to an order are kept for no more than a year. Details of completed orders are kept for six years from the end of the financial year, as required by the Finnish Accounting Act.

05

Who the information is shared with

The information is not sold or shared for marketing purposes. Only the services the business needs in order to operate are involved in processing it. Some of them operate outside the EU, in which case the transfer is based on the European Commission’s standard contractual clauses or an adequacy decision.

Email
Google (Gmail). Messages are kept in the mailbox.
Website hosting
Vercel. The server stores ordinary log data, such as the IP address and a timestamp.
Form service
FormSubmit (formsubmit.co). Forwards messages sent through the form to email.
Visitor statistics
Umami (umami.is). Counts page views anonymously. Uses no cookies and does not store IP addresses.
Accounting
Invoicing details of completed orders, for bookkeeping.

06

Cookies and tracking

The site uses no cookies and stores nothing in your browser. There is no advertising network and no social media tracking pixel.

Visitor numbers are counted with Umami. It records the page address, where you came from, your browser and device type, and your country. Your IP address is not stored, and you are not recognised from one visit to the next. The data is used only to understand which pages are read. The legal basis is legitimate interest (Article 6(1)(f)).

Fonts are not loaded from outside servers; they come from the same address as the site itself.

07

Your rights

You can ask to see what information is held about you, have incorrect information corrected or ask for it to be deleted. You can also object to the processing or ask for it to be restricted, and receive the information you have provided in a portable format. A request can be made informally by email.

If you feel the matter has not been handled correctly, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland. Instructions are at tietosuoja.fi.

08

Security

The site is used over an encrypted connection. Only the business owner has access to messages and order details.

If anything here is unclear, ask. I answer myself, and I would rather clear things up in advance than sort them out afterwards.