Privacy policy

Controller

Amarald (Aaro), Finland
Email: hei@amarald.io

Send any privacy questions or requests to the address above.

Cookies and analytics

This site uses no cookies, no analytics, no ad tracking and no third-party embeds or fonts. Every file is loaded directly from the amarald.io server.

If you switch the page language yourself, your choice is saved in your browser's local storage (localStorage) so the site never switches language against your choice. It stays in your own browser and is never sent anywhere. You can remove it by clearing this site's data in your browser settings.

Server logs (Google Firebase Hosting)

This site is hosted on Google Firebase Hosting. When you open a page, the server records technical details about the request, as any web server does:

• IP address
• date and time
• requested page and response status
• browser and operating system identifier (user agent)
• referring page, if your browser sends it

Purpose: delivering the site, keeping it working and keeping it secure, for example detecting abuse. I don't use logs to identify, profile or market to visitors.

Legal basis: legitimate interest (GDPR Article 6(1)(f)) – the site cannot be delivered without this data.

Processor and transfers: Google (Google Ireland Limited / Google LLC) acts as a data processor. Data may also be processed outside the EU/EEA. Transfers rely on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Retention: logs are kept only for a limited time under Google's service policies.

Email enquiries

When you email hei@amarald.io, I receive your name, email address, the content of your message and anything else you choose to share. Email runs on Google Workspace.

Purpose: replying to you, preparing a quote and managing a possible customer relationship.

Legal basis: steps prior to entering a contract and performing a contract (Article 6(1)(b)), and the legitimate interest of answering enquiries (Article 6(1)(f)).

Retention: I delete messages when they are no longer needed, at the latest two years after our last contact. If an enquiry leads to a customer relationship, invoicing records are kept for the period required by the Finnish Accounting Act.

I never sell, rent or pass your data on for marketing.

Links to other sites

This site links to other services (for example PageSpeed Insights, Harvard's CS50 and Creative Commons). When you follow a link, you leave this site, and that service's own privacy policy applies there.

Your rights

Under the GDPR you have the right to:

• know what data about you is processed and get a copy of it
• have incorrect data corrected
• have your data erased
• restrict processing
• object to processing based on legitimate interest
• receive the data you provided in a portable format

Send your request to hei@amarald.io. I will reply within one month.

If you believe your data is processed unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi.