Privacy notice
Updated 18 October 2026. EU General Data Protection Regulation (GDPR), Articles 13 and 14.
Controller
Miki Suhonen (sole trader, business ID 3572452-7), Finland. Email miki@mikisuhonen.fi.
What data is collected and why
The contact form collects your name, company, email, phone number, the topics you choose and your message. The data is used only to reply to your enquiry and to prepare a possible assignment. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)) and the legitimate interest of replying to your message (Article 6(1)(f)).
Where the data goes
The form content reaches me in a Discord channel (Discord Inc., United States), as a WhatsApp message (Meta Platforms Ireland) and as email through the Resend service (Resend Inc., United States). The data is not sold or passed on to anyone else. The site runs on Vercel's servers (Vercel Inc., United States). Transfers outside the EU rely on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
The site agent
When you type a question to the site agent (Ask the agent), the message is sent to Anthropic's AI service (Anthropic PBC, United States) to form the answer. I do not store the conversations. Do not type anything to the agent that you do not want to send.
Retention
Messages are kept as long as handling the enquiry and a possible client relationship require, at most two years from the last contact.
Analytics and cookies
The site uses Vercel Web Analytics visitor statistics only if you accept it in the cookie notice. It stores no cookies and does not identify you as a person. You can change your choice from the Cookie choices link at the bottom of the page.
Your rights
You have the right to know what data about you is stored, to have it corrected, to ask for it to be erased, to restrict its processing and to object to it. Send requests by email to the address above. If you think the processing breaks the law, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the data protection authority of the EU country where you live.