Privacy policy

Privacy Policy | tommitoija.com | 30.6.2025

1. Data Controller
Badbadboy Oy
ID 3285284-9
Tommi Toija
tommi@tommitoija.com
Helsinki, Finland

2. Registered Users
Individuals who have submitted their data via a form on this website.

3. Purpose and Legal Basis for Processing Personal Data
Legal basis: Consent
Purpose: Maintaining customer relationships or delivering a service that has been ordered.

4. Personal Data Stored in the Register (at maximum)

  • Company name and business ID

  • Customer name

  • Email address

  • Phone number

5. Rights of the Data Subject
The data subject has the following rights. Requests to exercise these rights should be sent to: tommi@tommitoija.com

  • Right of Access: The data subject may request to view the personal data we have stored about them.

  • Right to Rectification: The data subject may request correction of incorrect or incomplete data.

  • Right to Object: The data subject may object to the processing of their personal data if they believe it is being processed unlawfully.

  • Right to Prohibit Direct Marketing: The data subject has the right to prohibit the use of their data for direct marketing.

  • Right to Erasure: The data subject may request the deletion of their data if it is no longer necessary. We will process the request and either delete the data or provide a justified reason why it cannot be deleted.
    Please note that the data controller may have a legal obligation or other right to retain certain data. For example, bookkeeping records must be retained for 10 years in accordance with the Finnish Accounting Act (Chapter 2, Section 10). Therefore, such data cannot be deleted before the retention period has ended.

  • Right to Withdraw Consent: If the processing of personal data is based solely on consent (and not, for example, on a customer relationship), the data subject may withdraw their consent.

  • Right to Lodge a Complaint: The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they believe that their data is being processed in violation of data protection legislation.

  • Right to Restrict Processing: The data subject may request a restriction of processing while a disputed matter is being resolved.

Contact information for the Data Protection Ombudsman:
tommi@tommitoija.com

6. Regular Sources of Data
Customer information is obtained directly from the customer via a web form.

7. Regular Disclosures of Data
Data will never be disclosed to third parties for marketing purposes. The data controller ensures that all service providers comply with data protection laws. Regularly used service providers: Squarespace & Google.

8. Duration of Processing
Personal data is processed for one year or for the duration of the customer relationship.

9. Data Processors
The data controller processes personal data.

10. Data Transfers Outside the EU
Data is regularly transferred outside the EU or European Economic Area. When data is transferred outside the EU/EEA, we ensure an adequate level of data protection by agreeing on data confidentiality and processing in accordance with legal requirements. We have also ensured this with all our partners.

11. Automated Decision-Making and Profiling
Personal data is not used for automated decision-making or profiling.

12. Cookies
This website uses cookies to function and to analyze website traffic. Personal data is not used for marketing purposes without separate consent.