Privacy Policy
Last updated: 26 May 2026
1. Data Controller
Insight Dataz ("we", "us") operates the website insight-dataz.com and is the data controller for personal data processed through it. Our registered address is Firdonkatu 1–2, Pasila, 00520 Helsinki, Finland. For any privacy matter you can contact us at privacy@insight-dataz.com.
2. Legal Framework
We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the Finnish Data Protection Act and the ePrivacy Directive as implemented in Finland.
3. Legal Basis for Processing
We rely on a specific legal basis for each processing activity. Contact forms are processed on the basis of our legitimate interests (Art. 6(1)(f)) in responding to enquiries; newsletter sign-ups on the basis of your consent (Art. 6(1)(a)); meeting scheduling on the basis of taking steps prior to entering a contract (Art. 6(1)(b)); and accounting records on the basis of our legal obligations (Art. 6(1)(c)).
| Processing | Purpose | Legal basis |
|---|---|---|
| Contact forms | Responding to enquiries | Art. 6(1)(f) |
| Newsletter | Marketing | Art. 6(1)(a) |
| Meeting scheduling | Service delivery | Art. 6(1)(b) |
| Accounting | Compliance | Art. 6(1)(c) |
4. Categories of Data Collected
Depending on how you interact with us we may collect: identification and contact data (name, email, company), the content of messages you send us, scheduling details, and technical data such as IP address, browser type and pages viewed. We do not knowingly collect special categories of personal data.
5. Retention Periods
Contact enquiries are retained for up to 24 months after the last contact. Newsletter data is kept until you unsubscribe. Meeting and contractual records are kept for the duration of the engagement and up to 6 years thereafter for accounting purposes. Technical logs are retained for up to 12 months.
6. Recipients & International Transfers
We share data only with processors who support our operations (e.g. hosting and email providers) under data processing agreements. Where data is transferred outside the EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (SCCs) together with supplementary measures.
7. Your Rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing (Art. 21) and the right to withdraw consent at any time (Art. 7(3)). To exercise any right, contact privacy@insight-dataz.com.
8. Security Measures
We apply appropriate technical and organisational measures including TLS 1.3 encryption in transit, access controls on a need-to-know basis, regular patching and the principle of data minimisation.
9. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR.
Responsible AI and the EU AI Act
In AI-related engagements we follow the principles of the EU AI Act (Regulation (EU) 2024/1689). We classify use cases by risk, document data and models, ensure human oversight, and disclose transparently when content is AI-generated. We do not use personal data to train models without an explicit legal basis.
Data Breach Notification
In the event of a personal data breach, we will notify the supervisory authority within 72 hours of becoming aware of it, in accordance with Article 33 GDPR, unless the breach is unlikely to result in a risk to your rights. Where a breach is likely to result in a high risk, we will also notify you without undue delay (Article 34). We maintain an internal breach register.
Processors and Sub-processors
We use carefully selected processors (e.g. hosting, email and analytics providers) with whom we have entered into data processing agreements under Article 28 GDPR. Processors may only process data on our documented instructions. An up-to-date list of processors is available on request at privacy@insight-dataz.com.
Children's Data
Our services are directed at businesses, not children. We do not knowingly collect personal data from anyone under 16. If we learn that we have collected such data without guardian consent, we will delete it without delay.
Accuracy and Rectification
We aim to keep the personal data we process up to date and accurate. You have the right to request rectification of inaccurate data and completion of incomplete data. You may make a request to privacy@insight-dataz.com, and we will handle it without undue delay, at the latest within one month.
Profiling and Safeguards
We do not carry out profiling that produces legal or similarly significant effects on you. Where we use analytics to understand usage, we do so in aggregate and, where possible, anonymised form. You are not required to consent to optional analytics, and the core functions of the service are available without it.
Right to Complain and Remedies
If you believe we process your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority (in Finland, the Office of the Data Protection Ombudsman) and to pursue other legal remedies. We would, however, appreciate the chance to address your concern first.
10. Changes to this Policy
We may update this policy from time to time. The current version and its effective date are always published on this page.
11. Supervisory Authority
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki.
12. Contact
For any question regarding this policy or your personal data, please contact privacy@insight-dataz.com.