Privacy Policy
Your privacy is important to us. This Privacy Policy explains what personal data Vossen Capital Group Oy processes, why we process it, who may receive it, how long we keep it, and what rights you have.
General:
This policy applies to personal data processed in connection with vossen.studio and vossenstudios.com, enquiries, proposals, client relationships, and our services. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and other applicable data protection law.
Vossen Capital Group Oy
Kiveriönkatu 23
15200 Lahti, Finland
info@vossen.studio
vossen.studio
Personal Data We Process:
Depending on how you interact with us, we may process:
- Your name, company name, email address, and telephone number
- Information submitted through forms, emails, and other correspondence
- Details needed to discuss a project or prepare a proposal
- Project, contractual, billing, and transaction information
- Technical information needed to operate and secure our website, such as IP address, browser information, and request data
We may also receive business contact and enquiry information from a reseller, sales partner, agency partner, or another person who introduces you to us. Where required, we provide information about the source and our processing when we receive your data indirectly.
Purposes and Legal Bases
Enquiries and proposals.
We use contact and enquiry details to respond to requests, discuss potential services, and prepare proposals. Depending on the circumstances, our legal basis is taking steps at your request before entering into a contract or our legitimate interest in responding to business enquiries.
Services and client relationships
We use project and contact information to enter into and perform agreements, communicate about projects, and provide services. When communicating with a business client’s employees or representatives, our legal basis may be our legitimate interest in managing and delivering that relationship.
Billing and legal obligations
We process invoice, accounting, and related information where necessary to comply with legal obligations.
Website and information security.
We process technical request information to protect our website, forms, and systems against spam, abuse, unauthorized access, and malicious activity. This is based on our legitimate interest in maintaining the security and reliability of our services.
Consent-based processing.
Where processing requires consent, we request it separately. You can withdraw consent at any time without affecting processing carried out before its withdrawal.
Website Analytics
We use Plausible Analytics to understand overall website usage and improve our content and performance. Plausible is designed to provide analytics without analytics cookies or persistent visitor identifiers.
Statistics may include visited pages, referral sources, approximate country, device and browser type, and visit duration.
Heatmaps and User Behaviour Analysis
We may use heatmaps and behaviour analysis technologies to understand how visitors interact with our website. Depending on the tool, this may include clicks, taps, scrolling, navigation patterns, and interactions with page elements.
We use this information to improve page structure, navigation, content placement, usability, and the experience of requesting our services.
Where these technologies require consent, they are activated only after that consent has been given.
We configure any tool we deploy to limit unnecessary collection and to exclude passwords, payment information, and sensitive form fields where technically supported. The specific provider and technology details will be identified in our Cookie Policy when the tool is enabled.
Service Providers and Third Parties
We use service providers where needed to operate, secure, maintain, and deliver our website and services. We share information relevant to their role and apply appropriate safeguards where required.
Plausible Analytics: Website usage and performance measurement.
Cloudflare: We use Cloudflare Turnstile to protect forms against automated submissions and abuse. It may process IP address, browser information, and other security signals.
bunny.net: Content delivery and website performance. Requests for website resources may involve processing technical request information.
Patchstack: Website security monitoring. Security events may include an IP address, browser information, requested URL, and related request data.
Resellers:
Authorized independent resellers may introduce prospective clients or assist with sales communication. Where an enquiry or client relationship involves a reseller, we may share your name, company, business contact details, enquiry details, and information needed to coordinate the introduction, proposal, or relationship.
A reseller’s data protection role depends on the specific arrangement.
Agency and Production Partners
We may share information needed for an agreed project with independent agency, creative, and production partners. Their work may include website development, design, photography, video, advertising, content production, or other specialist services. We limit sharing to information relevant to their assignment.
Sales Partners and Representatives
Authorized sales partners and representatives may receive limited business contact and enquiry information to assist with business development, proposals, and client communication. Their use of the information must remain within their authorized role and comply with applicable data protection requirements.
International Data Transfers
Some providers or their subprocessors may process personal data outside the European Economic Area. Where a transfer takes place, we use an applicable European Commission adequacy decision, Standard Contractual Clauses, or another lawful safeguard. You may contact us for information about the safeguards applicable to your data.
Retention of Personal Data
We keep personal data for as long as needed for the purpose for which it was collected, a client relationship, statutory record keeping, or the establishment, exercise, or defence of legal claims. When information is no longer needed, we delete or anonymize it as appropriate.
Your Rights
Subject to applicable legal conditions, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete information
- Request erasure or restriction of processing
- Object to processing based on legitimate interests
- Object to direct marketing at any time
- Request data portability where applicable
- Withdraw consent where processing is based on consent
To exercise your rights, email info@vossen.studio. We may request information reasonably needed to verify your identity.
You may lodge a complaint with a competent data protection supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to keep it working securely, remember your preferences, measure website traffic and understand how visitors interact with our pages.
Where consent is required, we ask for it before activating those technologies.
Our separate Cookie Policy provides details about the technologies used, their providers, purposes, storage periods, and consent settings.
You can change your preferences at any time using the cookie settings icon available throughout the website or the link in the footer.
Changes to This Privacy Policy
We may update this policy when our services, processing activities, technologies, or legal requirements change. The current version will be available on our website.
Last updated
17.09.2026
