Data controller
eirammaria Oy, Finnish Business ID 3659069-8. Website: eirammaria.com. Privacy enquiries: eira.maenrinta@gmail.com. Official billing and contract details are provided with the proposal.
Back to homepage
Privacy
Privacy notice for enquiries, proposals and website use.
This notice explains how information submitted through contact, proposal and media kit requests is processed, and how the website is measured anonymously without cookies.
Updated 9 October 2026
What information is processed?
An enquiry, proposal request or media kit request may include your name, company, email address, selected service or partnership type, and any objective, timing, channel, budget or usage-rights information you choose to provide. Technical request data, such as an identifier pseudonymised from an IP address, may also be processed to protect the service.
Purpose and legal basis
Information is used to deliver the requested media kit, respond to your enquiry, assess a potential partnership, prepare a proposal, manage a client relationship and prevent abuse. Processing is necessary to fulfil your request and take steps before entering into a contract, and supports the controller's legitimate interests in responding to business enquiries and protecting the service. Requesting a media kit does not add your email address to a marketing list.
Service providers
Formspark delivers form submissions to the controller. Resend delivers requested media kit emails and PDF attachments. Upstash is used to prevent abuse of media kit requests and stores pseudonymised IP and email identifiers plus request counters for up to one hour. Umami Cloud provides cookieless website analytics. These providers process data on the controller's behalf under their applicable privacy notices and contractual terms.
Processing locations and transfers outside the EEA
Formspark states that it stores form data in Ireland and Germany. Other providers or their subprocessors may also process data outside the European Economic Area, particularly in the United States. In those cases, transfers are protected by an applicable European Commission adequacy decision, such as the EU–US Data Privacy Framework, or by the Commission's Standard Contractual Clauses as described in the provider's data processing agreement.
Cookies and analytics
The site uses Umami Cloud to measure page views and key conversion events without cookies, fingerprinting or cross-site tracking. Data may include the page path, referrer, timestamp, browser, operating system, device type, approximate country and events such as opening or requesting the media kit or successfully sending an enquiry. Names, email addresses, company names, budgets and message content are not sent to analytics. The site does not use marketing cookies.
Retention
Enquiries and proposal requests are reviewed regularly and deleted no later than 24 months after the last contact, unless they are needed for an ongoing client relationship or a legal claim. If a client relationship is formed, contract and accounting data is retained for the periods required by law. The Upstash identifiers used to prevent abuse expire within one hour. Formspark retains active submissions until the controller deletes them; a deleted submission remains recoverable for 30 days, and submitter IP and location data is retained for 12 months under its current policy. Technical email-service records are retained under the provider's current privacy policy.
Your rights
You may request access to, correction of or deletion of your personal data. Where applicable, you may also request restriction, object to processing and receive data you provided in a portable format. Send requests to the controller's email address. You also have the right to lodge a complaint with a supervisory authority; in Finland, this is the Office of the Data Protection Ombudsman.
Automated decision-making
Personal data is not used for automated decision-making or personal profiling.