Privacy and cookie policy

This privacy policy applies to the website kallalex.fi, operated by Asianajotoimisto Kalla Oy. We process personal data in accordance with the EU General Data Protection Regulation (GDPR, 2016/679) and applicable national legislation.

1. Data Controller

Asianajotoimisto Kalla Oy
Business ID: 1623458-1

Kuopio office
Museokatu 4
70100 Kuopio, Finland

Helsinki office
Mariankatu 19 E 50
00170 Helsinki, Finland

Phone: +358 17 2887 200
Email: toimisto@kallalex.fi

For questions related to data protection, you may also contact: toimisto@kallalex.fi

2. Name of the Register

User and customer register of the Kallalex website, including analytics and marketing data collected through cookies.

3. Legal Basis and Purpose of Processing Personal Data

We process personal data on the following legal grounds:

• Legitimate interest – technical operation of the website, information security, and improvement of the user experience.
• Consent – analytics, marketing, and preference cookies are only set based on the user’s explicit consent.
• Performance of a contract – data submitted through contact forms may be used to manage the customer relationship.

Data is collected to enable the functioning of the website, improve the user experience, analyse visitor traffic, and deliver targeted marketing to users who have given their consent.

4. Data Content

The register may contain the following data:

• Name and email address (submitted via contact forms)
• IP address and device information
• Browser and operating system information
• Information about pages visited and time of visit
• Identifier and behavioural data collected via cookies
• Any information voluntarily provided by the user through forms or other contact

5. Data Sources

Data is collected primarily from the following sources:

• Directly from the website user through forms or other contact
• Automatically during use of the website via cookies and similar technologies
• From analytics services (e.g. Google Analytics), where the user has given consent
• From marketing platforms, based on consent

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations.

• Data submitted via contact forms is deleted once the matter has been handled and there is no further basis for retention – generally within 24 months.
• Analytics and cookie data is retained in accordance with each service provider’s terms (typically 13–26 months).
• Data from strictly necessary cookies is deleted at the end of the session or when the cookie expires.

7. Disclosure and Transfer of Data

We do not sell or disclose personal data to third parties for commercial purposes. Data may, however, be transferred on the following grounds:

• Service providers – we use third-party services (e.g. analytics and marketing tools) that may process data in accordance with their own policies. These parties act as data processors on behalf of the data controller.
• Transfers outside the EU/EEA – where data is transferred outside the EU/EEA, we ensure the lawfulness of the transfer, for example through the EU Standard Contractual Clauses.
• Legal obligations – we may disclose data to competent authorities upon a justified request or where required by law.

8. Rights of the Data Subject

Under the GDPR, you have the following rights regarding the processing of your personal data:

• Right of access – you may request information about what data is stored about you.
• Right to rectification – you may request the correction of inaccurate or incomplete data.
• Right to erasure – you may request the deletion of your data when there is no longer a legal basis for processing it.
• Right to restriction of processing – you may request that the processing of your data be restricted in certain circumstances.
• Right to object – you may object to the processing of your data on the grounds of legitimate interest.
• Right to data portability – you may request that data processed on the basis of consent or a contract be provided to you in a machine-readable format.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

Requests to exercise your rights can be sent to toimisto@kallalex.fi. We aim to respond within one month.

You also have the right to lodge a complaint with the Data Protection Ombudsman if you believe your personal data has been processed unlawfully. Contact details for the Office of the Data Protection Ombudsman in Finland are available at tietosuoja.fi/en.

9. Cookies

This website uses cookies and similar technologies. Cookies are small text files stored in your browser when you use the website. We use the following cookie categories:

• Strictly necessary cookies – essential for the website to function. Cannot be disabled.
• Analytics cookies – help us understand how visitors use the website.
• Marketing cookies – used to display targeted advertisements and track campaign performance.
• Preference cookies – remember your settings and preferences to provide a better user experience.

A full list of cookies used on this website is provided below:

10. Consent Management

This website uses a cookie consent banner, which is displayed to new visitors upon arrival. The banner allows you to accept or decline non-essential cookie categories according to your preferences.

You may change your cookie settings or withdraw your previously given consent at any time. Settings can be updated via the cookie management panel, typically found in the website footer, or by adjusting your browser’s cookie settings.

Please note that strictly necessary cookies cannot be declined, as they are essential for the technical operation of the website.

This privacy and cookie policy may be updated periodically to reflect changes in legislation or our practices. We recommend reviewing it regularly. Last updated: April 2025.