Tietosuojaseloste
TODO: Lead paragraph – what this privacy policy covers (quote requests and site visits). In-text link to the home page.
Rekisterinpitäjä
TODO: the controller Aretum Oy (Y-tunnus 3643135-5) and a contact address from config (operator.email is still empty). In rented mode also the renter as a recipient. Facts: docs/privacy-facts.md → Controller.
Mitä tietoja käsittelemme
TODO: the form fields, consent time, page, referrer and UTM values, the salted IP hash and Turnstile. Facts: docs/privacy-facts.md → What is collected and why.
Mihin tietoja käytetään ja millä perusteella
TODO: purpose (handling the quote request, spam prevention, billing) and the legal basis (still to decide). Facts: docs/privacy-facts.md → What is collected and why.
Kenelle tiedot luovutetaan
TODO: requests go to partner drainage contractors (in rented mode the renter); processors Cloudflare (D1 in the EU) and Resend. Facts: docs/privacy-facts.md → Who receives leads, Where it is stored, Processors.
Kuinka kauan tietoja säilytetään
TODO: 24 months, then the personal data is erased; IP hashes for rate limiting about an hour. Facts: docs/privacy-facts.md → Retention.
Sinun oikeutesi
TODO: the data subject's rights and how to use them, incl. the right to complain to the Data Protection Ombudsman (tietosuoja.fi). Facts: docs/privacy-facts.md → Data subject's rights.
Evästeet ja kävijätilastot
TODO: no cookies; Cloudflare Web Analytics (cookieless) only if enabled; sessionStorage holds only the visit's UTM values. Facts: docs/privacy-facts.md → Cookies and browser storage.