Privacy Policy
Last updated: 19.10.2026
This Privacy Policy explains how Besights ("I", "me", "my") collects, uses, and protects your personal data when you visit www.besights.fi (the "Website") or contact me through it. I take privacy seriously and collect only what I need.
1. Who is responsible for your data
The data controller is:
Besights Company Oy
Business ID: 3552961-7
Email: elina.korpela(at)besightscompany.com
If you have any questions about this policy or your data, contact me at the email above.
2. What data I collect
Information you give me
Contact and booking: when you email me, fill in a contact form, or book an intro call, I receive your name, email address, company, phone number (if provided), and the content of your message.
Information collected automatically
Technical and usage data: when you visit the Website, basic data such as your IP address, browser type, device type, referring page, pages viewed, and time of visit may be processed by my hosting and analytics providers.
Cookies and similar technologies: see section 6.
I do not intentionally collect special categories of personal data (such as health data or political opinions) and ask that you do not send them to me.
3. Why I use your data, and on what legal basis
PurposeLegal basis (GDPR)Responding to your enquiries and booking callsPre-contractual steps / legitimate interest (Art. 6(1)(b) and (f))Providing and delivering my services if we work togetherPerformance of a contract (Art. 6(1)(b))Operating, securing, and improving the WebsiteLegitimate interest (Art. 6(1)(f))Analytics and non-essential cookies (where used)Your consent (Art. 6(1)(a))Sending newsletters or updates (only if you sign up)Your consent (Art. 6(1)(a))Meeting legal and accounting obligationsLegal obligation (Art. 6(1)(c))
Where I rely on consent, you can withdraw it at any time (see section 8). Withdrawing does not affect processing done before.
4. Who I share data with
I do not sell your personal data. I use trusted service providers (processors) who handle data on my behalf under data processing agreements:
Framer (Framer B.V., the Netherlands): website hosting and publishing [and form handling, if used].
[Email provider, e.g. Google Workspace / Microsoft 365 / Proton]: email and communication.
[Scheduling tool, e.g. Calendly / Cal.com / Google Calendar]: booking intro calls.
[Analytics tool, e.g. Framer Analytics / Plausible / Google Analytics]: understanding how the Website is used.
[Newsletter tool, if any]: sending updates to subscribers.
I may also disclose data where required by law or to protect legal rights.
5. International transfers
Some providers may process data outside the EU/EEA, for example in the United States. Where this happens, I make sure appropriate safeguards are in place, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. Cookies and similar technologies
Cookies are small files stored on your device. On this Website:
Strictly necessary cookies keep the Website working and secure. These do not require consent.
Analytics and other optional cookies are used. They are set only after you give consent through the cookie banner, and you can change your choice at any time via the "Cookie settings" link in the footer.
You can also block or delete cookies in your browser settings, though parts of the Website may then work less well.
7. How long I keep your data
Enquiries and correspondence: up to 48 months after our last contact, unless we start working together.
Client and contract data: for the duration of the relationship and afterwards as required by accounting and tax law (in Finland, generally 6–10 years depending on the record).
Analytics data: 48 months, or as set by the analytics provider.
Newsletter subscriptions: until you unsubscribe.
8. Your rights
Under the GDPR you have the right to:
Access the personal data I hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten") in certain cases
Restrict how I process your data in certain cases
Data portability: receive your data in a structured, commonly used format
Object to processing based on legitimate interest
Withdraw consent at any time, where processing is based on consent
To use any of these rights, email me at elina.korpela(at)besightscompany.com. I may need to verify your identity first.
You also have the right to lodge a complaint with a supervisory authority.
9. Visitors outside the EU/EEA
This policy applies to all visitors. If you are located outside the EU/EEA, for example in the UK, Switzerland, or the United States, you may have similar or additional rights under your local law (such as the UK GDPR or certain US state privacy laws). I will honour valid requests as far as local law requires; contact me using the details above. I do not sell or share personal data for cross-context behavioural advertising.
10. Security
I use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and the use of reputable providers. No system is completely secure, but I work to keep your data safe.
11. Children
The Website is intended for business audiences and is not directed at children under 16. I do not knowingly collect data from children.
12. Links to other websites
The Website may link to third-party sites (for example LinkedIn). I am not responsible for their privacy practices, so please read their policies.
13. Changes to this policy
I may update this policy from time to time. The "Last updated" date at the top shows the latest version. For significant changes, I will make this clear on the Website.
14. Contact
Besights Company Oy
Business ID: 3552961-7
Email: elina.korpela(at)besightscompany.com