Privacy policy
This explains what data we process, what it is used for and what your rights are. If anything is unclear, ask by email.
Data controller
Evex Creative, Suomi, Finland. Contact person Justus Berner, justus@evexcreative.com.
You can get in touch by email about anything concerning data protection. We answer within a week.
What data is collected
When you contact us by email, we process your name, your email address and the contents of your message. If you give a phone number or company details, we process those too.
Web analytics are collected about visitors through Google Analytics: where the visitor came from, which pages they viewed and on what device. This only happens if you accept analytics cookies.
We do not collect sensitive data, and we never ask for a national identity number or payment details through the website.
What the data is used for
Answering enquiries and running the customer relationship. If we sign an agreement, the data is used to deliver the work and to invoice it.
Analytics are used to improve the site: which content is useful and where visitors find us.
We do not sell data to third parties, and we do not use it for profiling or automated decision-making.
Legal basis for processing
Processing enquiries is based on legitimate interest: you contacted us and expect an answer. Once an agreement is in place, the basis is performance of that contract.
The basis for analytics is consent, which you give in the cookie banner. You can withdraw it at any time through your browser's cookie settings.
Keeping accounting records is based on a statutory obligation.
How long data is kept
Enquiries are kept for two years from the last message, after which they are deleted.
Customer relationship data is kept for the duration of the agreement and then for the six years required by Finnish accounting law.
Analytics data stays in Google Analytics for 14 months and is then deleted automatically.
Who the data is disclosed to
We use service providers who process data on our behalf: the technical platforms for email and for the website, and Google Analytics. They act as processors and are bound by contract.
Some of these services are located outside the EU. Those transfers rely on the standard contractual clauses approved by the Commission.
Data may be disclosed to an authority where the law requires it.
Cookies
The site uses necessary cookies, which are required for it to work. Those do not require consent.
Analytics cookies are set only with your consent. We use Google Consent Mode, so no measurement starts before you accept.
You can change your choice by clearing the site's cookies in your browser settings, after which the banner asks again.
Your rights
You have the right to see what data we hold about you, to ask for it to be corrected or deleted, to restrict processing and to object to it. You also have the right to have the data transferred to another service.
Requests go by email to justus@evexcreative.com. We verify your identity before releasing any data.
If you believe we process your data unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Security
The site uses an encrypted connection. Email and customer data sit behind password-protected services, and we use two-factor authentication wherever it is available.
We handle credentials to a customer's site only for as long as the work takes, and we ask the customer to change them afterwards if they wish.