Website visit
The hosting and security services may process your IP address, requested page, request time, browser and device information, routing and referrer data, and security-cookie information to deliver and protect the site.
Privacy
Privacy notice.
This notice explains how Brandbase Oy processes personal data when you visit brandbase.fi or contact us about our services.
This notice covers the Brandbase corporate website and enquiries sent to Brandbase Oy. External websites linked from this site, including brandradio.eu, apply their own privacy information.
01 · Controller
Brandbase Oy is responsible for the processing described here.
- Company
- Brandbase Oy
- Business ID
- 3364718-5
- Address
- Karvaamokuja 3 A, 00380 Helsinki, Finland
- Privacy contact
- info@brandbase.fi
02 · Personal data
Data depends on how you use the site.
Enquiries
If you send an email, we may receive your name, organisation, work email address, procurement or project stage, target outcome, message, attachments and ordinary email metadata.
Sources
Enquiry data comes from you. Technical request data is generated when your browser connects to the website and is processed by the website delivery and security infrastructure.
03 · Purposes and legal bases
We process only what is needed for defined purposes.
PurposeUseLegal basis
Website delivery and securityTo provide the site, maintain availability, diagnose faults and prevent misuse.Legitimate interests: operating a secure and reliable public website (GDPR 6(1)(f)).
Business and procurement enquiriesTo respond, assess fit, organise follow-up and manage relevant business communication.Legitimate interests in handling business communications (GDPR 6(1)(f)).
Requested pre-contract stepsTo take steps you request before entering into a contract, where applicable.Steps prior to a contract (GDPR 6(1)(b)).
Legal obligations and claimsTo meet applicable statutory duties and establish, exercise or defend legal claims.Legal obligation (GDPR 6(1)(c)) or legitimate interests (GDPR 6(1)(f)), as applicable.
Brandbase does not use enquiry data for profiling or decisions based solely on automated processing. Website traffic may be evaluated automatically to detect bots and security threats, but this does not determine access to Brandbase services or contracts.
04 · Contact form
The form prepares an email on your device.
The contact form does not submit or store the text you enter on brandbase.fi. It opens a pre-filled message in your own email application. Brandbase receives the information only if you review and send that email. Once sent, the message is processed in Brandbase’s email service.
05 · Cookies
Only necessary security technology is currently used.
Brandbase has not configured analytics or advertising cookies on this website. The site uses Cloudflare security technology to distinguish legitimate requests from automated traffic.
Cloudflare may set other strictly necessary security cookies when a browser must complete a security challenge.
Read Cloudflare’s cookie information06 · Recipients and transfers
Access is limited to people and providers who need the data.
Within Brandbase, personal data is available only to people who need it to operate the website or handle the relevant enquiry.
Brandbase uses OpenAI’s site-hosting service and Cloudflare’s content-delivery and security infrastructure. Email enquiries are also processed by Brandbase’s email-service provider. These providers process data for the purposes of delivering their services and are subject to applicable contractual and data-protection duties.
We may disclose information to authorities or other recipients when required by law or necessary to establish, exercise or defend legal claims.
If a provider processes personal data outside the European Economic Area, Brandbase requires a lawful GDPR transfer mechanism, such as an adequacy decision or the European Commission’s standard contractual clauses, as applicable.
07 · Retention and security
Data is kept only while there is a justified need.
- The website does not retain values entered into the email-preparation form.
- The Cloudflare __cf_bm security cookie expires after 30 minutes of inactivity.
- Technical logs are retained only for the time needed to provide and secure the website, investigate faults or abuse, and meet applicable contractual or legal obligations.
- Enquiry emails and related correspondence are retained while the matter is handled and thereafter only for a justified business, contractual or legal need. Data is then deleted or anonymised.
Brandbase and its service providers use access controls and technical and organisational safeguards appropriate to the nature of the data and the risks of the processing.
08 · Your rights
You can ask how your personal data is used.
Depending on the processing and its legal basis, you may have the right to access, correct or erase your data, restrict processing, object to processing based on legitimate interests and receive data in a portable format where applicable. Send requests to info@brandbase.fi. We may ask for information needed to verify your identity.
You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland.
Read about data-subject rightsOffice of the Data Protection OmbudsmanChanges to this notice
We update this notice when the website, service providers or processing practices change. The effective date above identifies the current version.