Website Visitor Registry Privacy Policy
Last updated: 26.3.2025
Data Controller
Name: Musiikkikoulu Säveltie Oy
Business ID: 3449764-1
Address: Säveltie 5, 00720 Helsinki
Website: https://www.saveltie.fi
Contact Person for Data Registry Matters:
Eetu Hämäläinen
Email: eetu.hamalainen@saveltie.fi
1. Legal Basis and Purpose of Personal Data Processing
The legal basis for processing is the legitimate interest of Musiikkikoulu Säveltie Oy, which is founded on the freedom to conduct business. Personal data is processed to enhance and optimize the usability of our website and to improve the functionality of our services. We employ various technologies and services—including analytics cookies, contact forms, and services provided by HubSpot—to:
- Enable tracking and analysis of website visitors.
- Enhance the usability and content of the site by analyzing the collected data.
- Provide users with the opportunity to contact us via contact forms.
- Implement communication and customer service measures through HubSpot, which includes managing chats and form submissions.
In these contexts, data collected via HubSpot and through contact forms is used solely for appropriate communication and handling of requests. If a user submits an inquiry through a contact form, the message and the sender’s data will be deleted within one year after the conclusion of the processing, unless a longer retention period is required by law or another obligation.
2. Personal Data Collected and Data Sources
The registry collects the following information, which is gathered either automatically or through contact forms:
- Technical Data: IP address, browser information, duration of the website visit, and details of the pages visited.
- Data from Contact Forms: Information provided by the user (e.g., name, email address, and message content) through contact forms or other similar interactive services.
- Data Collected by HubSpot: Information on visits, sessions, data provided via chat and forms, as well as any data collected for deduplication and analytics. This data is transferred from HubSpot’s system to Musiikkikoulu Säveltie Oy and is used solely to support communication, analysis, and service improvements.
Data is obtained directly from the user’s device, through the use of the website, cookies, and information provided via forms.
3. Cookies, Other Tracking Technologies, and Interactive Services
Our website uses cookies and other tracking technologies to enhance and tailor the user experience, analyze website performance, and implement interactive services such as contact forms and HubSpot-based chat and form solutions.
Cookies and Tracking Technologies in Use:
Cookies and Tracking Technologies in Use:
- __cf_bm
- Domains: hs-scripts.com, hscollectedforms.net, hs-banner.com, hsadspixel.net, usemessages.com, hs-analytics.net, hubapi.com, hubspot.com, hsappstatic.net
- Description: Supports Cloudflare’s Bot Management.
- Duration: 1 hour
- Category: Necessary
- _cfuvid
- Domain: hubspot.com
- Description: Used by Calendly to ensure session consistency and deliver personalized services.
- Duration: Session
- Category: Necessary
- messagesUtk
- Domain: saveltie.fi
- Description: HubSpot identifies visitors engaging in chat.
- Duration: 6 months
- Category: Functional
- __hstc
- Domain: saveltie.fi
- Description: HubSpot’s primary cookie that tracks visitor sessions and visit details.
- Duration: 6 months
- Category: Analytics
- hubspotutk
- Domain: saveltie.fi
- Description: Used for managing communications and deduplication of contacts via HubSpot.
- Duration: 6 months
- Category: Analytics
- __hssrc
- Domain: saveltie.fi
- Description: Determines if the user has restarted their browser.
- Duration: Session
- Category: Necessary
- __hssc
- Domain: saveltie.fi
- Description: Tracks the number of sessions and session timestamps on the site.
- Duration: 1 hour
- Category: Necessary
- _fbp
- Domain: saveltie.fi
- Description: A cookie set by Facebook to track interactions.
- Duration: 3 months
- Category: Analytics
- lastExternalReferrerTime and lastExternalReferrer
- Domain: saveltie.fi
- Description: Information regarding visits from external sources.
- Duration: Not specified
- Category: Other
- wpEmojiSettingsSupports
- Domain: saveltie.fi
- Description: A WordPress cookie that ensures your browser supports proper emoji display.
- Duration: Session
- Category: Necessary
Managing Cookies and Interactive Services:
Users can disable cookies at any time by changing their browser settings or by using the cookie banner available on our website. Similarly, the use of contact forms and HubSpot-based services relies on the user’s consent or the necessity of their basic functions. If a user opts out of cookies or other tracking technologies, we will disable all non-essential functions, including analytics and interactive services (such as chat and contact forms).
For more information on cookie usage and management instructions, please visit:
https://www.viestintavirasto.fi/kyberturvallisuus/tietoturvaohjeet/palveluidenturvallinenkaytto/evasteet.html.
Browser-specific instructions:
- Microsoft Internet Explorer (IE): Instructions
- Google Chrome: Instructions
- Mozilla Firefox: Instructions
- Safari iOS: Instructions
- Safari Mac: Instructions
4. Legal Bases for Processing and Data Retention
Legitimate Interest:
Musiikkikoulu Säveltie Oy processes personal data to carry out business-related tasks and to improve the user experience on its website. The legitimate interest is based on the need to enhance website functionality and to implement improvements through data analysis. We assess that the processing does not cause significant harm to the rights and freedoms of data subjects.
Data Retention:
Data collected through analytics services is deleted from, for example, Google Analytics 14 months after a visit. Other collected data is deleted once its intended purpose has been fulfilled or is anonymized.
5. Data Recipients and Transfers
Data Recipients
Personal data is primarily processed internally by Musiikkikoulu Säveltie Oy, and access is limited only to those employees responsible for maintaining and developing the website. In the event of a security breach, data may be disclosed to authorities such as the police or data protection officials.
Data Transfers Outside the EU/EEA:
Transfers of personal data are carried out in accordance with the requirements of the EU Data Protection Regulation (GDPR). Data is primarily transferred only to countries that the European Commission has deemed to provide an adequate level of data protection. If a transfer is made to a country that has not been assessed as adequate, we use EU-approved standard contractual clauses (SCC) and other protective measures as necessary.
6. Processing of Contact Inquiries and Messages
Data received through contact inquiries (e.g., via email addresses and messages) is processed solely for the purpose of maintaining proper communication and handling requests. Our policy is to delete the message and sender data within one year after the processing of the matter is completed, unless a longer retention period is required by law or another legal obligation.
7. Data Subject Rights
Data subjects have the following rights:
- Right of Access: The right to obtain access to their personal data in the registry.
- Right to Rectification: The right to have inaccurate, unnecessary, incomplete, or outdated data corrected, deleted, or supplemented.
- Right to Restrict Processing: The right to request that processing be restricted, for example, in the case of inaccurate data.
- Right to Object: The right to object to data processing, for example, for direct marketing purposes.
- Right to Data Portability: If processing is based on the data subject’s consent, they have the right to receive their data in a transferable format.
- Right to Lodge a Complaint: The right to file a complaint with the data protection authority if they believe that data protection legislation has been violated.
Requests for access or correction should be submitted in writing or from an email address that proves your identity.
8. Security and Processing
Musiikkikoulu Säveltie Oy processes website data solely in electronic form and restricts access to the data only to employees who have the necessary permissions. Each employee has a personal username and password, and they have signed confidentiality agreements. We use appropriate technical and organizational measures to safeguard the data.
9. Other Rights Related to Data Processing
Data subjects have the right:
- To prohibit the disclosure and processing of their data for direct marketing and other marketing purposes.
- To request the anonymization of their data where applicable.
- To request complete deletion of their data, provided that this does not violate the legally mandated obligations of Musiikkikoulu Säveltie Oy.
