Privacy notice

Notice version: 2026-10-07. Updated: 7 October 2026.

1. Controller and contact

Controller: B-IT, a Finnish sole trader, Business ID 2196002-7. Address: Lähteentie 37, 74700 Kiuruvesi, Finland. Privacy contact: katri.biss@gmail.com, telephone 044-3075923. See the company information page.

2. Information processed

The contact form asks for a name, email, company or project, website, market, selected package and message. It also sends the site/form identifier, language, privacy notice version and a record that the notice was acknowledged. The empty anti-spam field is not part of an enquiry.

Name, email address, message and acknowledgement of the privacy notice are required. Company or project name, website, market and package are optional. Contacting B-IT is voluntary. Without the required information, you cannot submit the form and B-IT cannot respond through it. You may also contact B-IT by email.

Website and server operation may create technical logs, for example the IP address, time and address requested, browser information and response code. Do not include passwords, payment details, personal identity codes, health information or another person’s confidential information in the message.

3. Purposes and legal bases

Information is used to answer a business enquiry, assess the request, prepare an offer and deliver an agreed business service. Processing a business representative’s details is based on B-IT’s legitimate interest in responding to a business request. If the person who provided the information enters into an agreement with B-IT, information needed for steps before entering into the agreement or for its performance is processed on that basis. Accounting information is processed to meet legal obligations. Security logs are processed to protect the service and investigate faults on the basis of legitimate interest.

The form is for enquiries from businesses and their representatives only. Acknowledging this notice is not consent to marketing. Form data is not added to a marketing list.

4. Recipients and service providers

The BISS form uses a dedicated n8n workflow on B-IT’s Hetzner VPS, separate from the First Customer website intake workflow. The VPS is in the European Economic Area; this notice does not name the country. Technical logs and backups included in Hetzner’s standard operations follow the provider’s practices.

The separate n8n workflow for BISS sends enquiries to the same Google Gmail inbox as First Customer. Google processes messages to deliver and store email. Google may process information outside the European Economic Area; applicable terms and safeguards depend on the account and services used. This notice will be updated before the email provider changes. Access is limited to B-IT and providers who need the information to handle the enquiry.

5. Transfers outside the EEA

The Hetzner VPS is in the European Economic Area. Google states that Google LLC is certified under the EU–US Data Privacy Framework (DPF). Google also states that it relies on Standard Contractual Clauses (SCCs) for transfers not covered by an adequacy decision; a copy of the SCCs can be requested from Google. Details and Google’s stated transfer mechanisms are available in Google’s data transfer frameworks notice. This site release does not use analytics or advertising services.

6. Retention and deletion

Enquiries that do not lead to an agreement are kept only as long as needed to respond and assess a possible engagement, and deleted no later than 12 months after the last contact. BISS enquiry threads in Gmail are reviewed and deleted no later than 12 months after the latest message. If a specific legal duty requires certain information to be retained longer, it is kept separately only for the period required by law. n8n does not save successful, failed or manual execution data for this workflow. Provider backups follow the provider’s retention practices. Accounting records are kept as required by applicable law. Technical logs and provider backups follow the provider’s retention practices.

7. Your rights and complaints

Depending on the circumstances and legal basis, you may request access, correction, deletion or restriction, object to processing based on legitimate interests, and complain to a supervisory authority. The right to data portability applies where the GDPR’s conditions are met. Contact B-IT at the email above. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

8. Analytics, advertising pixels and other external services

No analytics, advertising pixels or other optional tracking services are connected to the site at present. Your cookie choice is stored only in browser local storage and is not sent to B-IT or third parties. See the cookie notice for details. Contact form data is not used for advertising.

9. Changes

This notice will be updated before new processing methods or providers are introduced. Its structure follows Article 13 of the GDPR.