Privacy Policy

1. Introduction

Vantafunterritory ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit vantafunterritory.cloud (the "Platform").

We process personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Finnish Data Protection Act (1050/2018), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Vantafunterritory
Helsinki, Finland
Email: [email protected]

3. Data We Collect

3.1 Information You Provide

• Contact Form Data: Name, email address, subject, and message content when you submit our contact form
• Communication Data: Records of correspondence if you contact us directly

3.2 Automatically Collected Data

• Technical Data: Browser type and version, operating system, device type, screen resolution, WebGL capabilities
• Usage Data: Pages visited, time spent on pages, 3D interaction patterns, scroll depth
• Network Data: IP address, approximate geographic location (country/city level)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)): For optional analytics cookies and marketing communications
• Legitimate Interest (Art. 6(1)(f)): For platform security, performance optimization, and improving user experience
• Contract (Art. 6(1)(b)): For responding to your inquiries and providing requested services

5. How We Use Your Data

• To respond to your inquiries and provide support
• To optimize the 3D rendering experience for your device
• To analyze Platform usage and improve our services
• To ensure Platform security and prevent abuse
• To comply with legal obligations

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: Hosting providers, analytics services, and email delivery services that process data on our behalf under strict data processing agreements
• Legal Requirements: When required by law, regulation, or legal process

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Contact form submissions: 24 months
• Analytics data: 14 months
• Technical logs: 90 days

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restriction (Art. 18): Request restriction of data processing
• Right to Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time without affecting lawfulness of prior processing

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Cookies

10.1 Essential Cookies

Strictly necessary cookies required for Platform functionality. These cannot be disabled.

10.2 Analytics Cookies

Optional cookies that help us understand how visitors interact with the Platform. These are only set with your consent.

10.3 Performance Cookies

Cookies that help optimize the 3D rendering experience based on your device capabilities. Set with your consent.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for stored personal data
• Regular security audits and penetration testing
• Access controls and authentication
• Employee training on data protection

12. Children's Privacy

The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. The competent authority in Finland is:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

15. Contact

For any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].