Controller
Mika Lind, sole trader, Finland. I am responsible for privacy on this site and in my client work myself, so you can contact me directly about anything involving personal data.
You can reach me by email at mika@mikalind.fi.
What I process and why
Contact form
When you send the form on this site, I process your name, your email address, your message and the service package you picked. I use this to answer your enquiry and to prepare a possible agreement. The processing is based on steps taken before entering into a contract, namely Article 6(1)(b) of the GDPR, and on my legitimate interest in answering enquiries about my services, namely Article 6(1)(f).
The form sends the details to me as an email. They are not added to a marketing list or a newsletter, and I do not use them for anything other than handling your enquiry.
Analytics and advertising cookies
The site uses Google Analytics 4, Google Ads conversion tracking and the LinkedIn Insight Tag. These load only if you consent to them in the cookie banner, so without consent the site does not measure your visit. The processing is based on consent, namely Article 6(1)(a).
I use them to measure how the site is used and how many people send the form or click my email address. That tells me what is working in my advertising.
You can change or withdraw your consent at any time. Open the cookie settings from the link in the footer and adjust your choices. You can also clear your browser cookies, and the banner appears again.
Turnstile and server logs
The form uses Cloudflare Turnstile to tell people apart from bots. It passes your IP address and details about your browser to Cloudflare. The platform the site runs on also keeps ordinary request logs. The processing is based on my legitimate interest in protecting the site and the form from abuse, namely Article 6(1)(f).
Language choice
The site remembers the language you picked for 30 days in a small cookie named lang, so you do not have to choose again on every visit. The cookie is necessary for the site to work and it does not follow you to other sites.
Client account data in my own tools
In client work I process data that sits in my client's advertising and analytics accounts. When a client grants me access, I process data from their Google Ads, Google Analytics, Google Tag Manager and LinkedIn Ads accounts on their behalf. For that data the client is the controller and I act as a processor, following their instructions.
My tools run in my own Google Cloud project inside the EU, in the Finland region. Sign-in tokens are stored encrypted.
LinkedIn Lead Gen Form responses are read only when they are needed for reporting to the client who owns the account. They are not stored in a database, they are not sold, and they are not shared with anyone other than that client.
I use an AI assistant, Anthropic's Claude, to help with analysis, and it acts as a processor.
Access ends when the client removes my user role from their account.
Who receives the data
I use the following service providers, which process data on my behalf.
- Brevo sends the form messages to me by email.
- Cloudflare handles hosting the site, the Turnstile bot check and server logs.
- CookieYes shows the cookie banner and stores your consent choices.
- Google provides analytics and advertising measurement once you have consented to it.
- LinkedIn provides advertising measurement once you have consented to it.
- Anthropic provides the AI assistant I use for analysis in client work.
Data is not sold and it is not passed on for any other purpose.
Transfers outside the EEA
Some of these providers process data in the United States. The transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
Retention
Form messages are kept for as long as handling the enquiry and any client relationship that follows from it requires. I delete them no later than 24 months after the last contact.
Data collected by Google Analytics is kept for 14 months.
Cookie lifetimes are shown in the cookie banner details.
Your rights
You have the right to
- find out what data I process about you
- ask for incorrect data to be corrected
- ask for your data to be deleted
- ask for processing to be restricted
- object to processing based on legitimate interest
- receive your data in a portable format
- withdraw your consent at any time
Requests go by email to mika@mikalind.fi, and I answer them within a month.
If you are not happy with how I handle your data, you can lodge a complaint with the supervisory authority. In Finland that is the Office of the Data Protection Ombudsman, tietosuoja.fi.
Automated decision-making
I do not carry out automated decision-making, or profiling that would have legal effects for you.