Last updated 8 September 2026
This page explains what personal data this website collects, how it is used, and what rights you have. I take data protection seriously, because it is the law and because it is the kind of operator I want to be.
Data controller
Sähkö-Samppa Oy, trading as STC — Samppa Turunen Consulting, is the data controller for this website. Business ID (Y-tunnus) 3322196-9, Espoo, Finland. For any data request, write to turunen.samppa@gmail.com.
What data is collected
Only what is necessary to answer you and to keep the site running:
- Messages you send through the contact form: your name, email address, company if you give one, the subject you select, and your message.
- Technical data: your IP address, hashed and kept only to limit abuse of the form, and standard server logs.
- Your language choice, stored in your own browser and never sent to the server.
Legal basis and how long it is kept
Contact messages are processed on the basis of your consent, because you send the form to start a conversation, and on my legitimate interest in replying to you. Messages are kept for 24 months unless an active business relationship needs longer. The hashed rate-limit logs are kept for 90 days and then rotated out.
Cookies
This site uses Umami, a privacy-friendly analytics tool that I host on my own server. It is cookieless: it sets no cookies, collects no personal data, does not follow you across other sites, and does not store your IP address. Because no personal data is processed, no consent banner is needed. If you change the site language, that choice is remembered in your browser only.
Your rights
Under the GDPR you have the right to see the personal data held about you, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable form. You may also complain to the supervisory authority, in Finland the Office of the Data Protection Ombudsman at tietosuoja.fi. To use any of these rights, write to turunen.samppa@gmail.com.
Other parties involved
Email that this site sends, which means the notification to me and the confirmation to you, goes out through Google's Gmail SMTP, so Google acts as a sub-processor. Analytics is self-hosted on the same server, so no third-party analytics company is involved. Hosting is provided by a European cloud provider.