Privacy

Visiting the website

Our service provider Vercel stores technical request data, such as the IP address, browser and time, in order to deliver and protect the website. Vercel keeps the request logs for one day. We use Vercel Web Analytics to count page views, clicks on buttons and links, opened questions and use of the booking form. It does not receive the text you type into the form, and it does not use cookies. It tells visits apart by a short-lived identifier generated from the request, which Vercel deletes within 24 hours, and shows us only aggregated figures. The legal basis for the processing is our legitimate interest, namely maintaining and protecting the website and monitoring visitor numbers (Article 6(1)(f) GDPR).

Contacting us

If you send us an email, we use your name, email address, message and any drawings you attach in order to reply to you and to carry out the analysis you request. The legal basis for the processing is our legitimate interest in replying to you and handling your request (Article 6(1)(f)). If you contact us in your own name about becoming a customer, the legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b)). The drawings may contain the names of other people, such as designers. We use them only to handle your request, on the same terms. Send only material that you are permitted to share. We keep your email for as long as is necessary to handle your request and delete the attached drawings within 90 days of our last contact, unless you become our customer.

Providing personal data is voluntary. Without your email and drawings we cannot reply or carry out the analysis. We do not make automated decisions concerning you.

Service providers

Vercel Inc., United States (hosting and analytics), and Google Cloud EMEA Limited, Ireland (our email), process data on our behalf. If you ask us to analyse a drawing, it is also processed by Supabase, Inc. (database and file storage) and Modal Labs, Inc. (computing) in their data centres located in the EU. The service providers are US companies or have a US parent company, so data may be transferred to the United States or accessed from there. For Vercel Inc. and for Google LLC, acting as Google’s sub-processor, transfers are based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework and on the Commission’s standard contractual clauses; for Supabase, Inc. and Modal Labs, Inc., they are based on the standard contractual clauses. You can obtain a copy of the clauses from hello@tasma.ai.

Your rights

You may request access to your data, its rectification or erasure, restriction of processing and the transfer of your data from one system to another, and you may object to processing based on legitimate interest. Contact us at hello@tasma.ai. You may also lodge a complaint with the Data Protection Ombudsman (tietosuoja.fi).