Privacy Policy
Last updated: 23 October 2026
This policy explains how Kuore Lab Oy processes personal data when you visit kuorelab.fi or contact us through it. We collect as little as possible: the site has no analytics, no advertising, no tracking and no third-party embeds.
1. Data controller
Kuore Lab OyBusiness ID 2991564-2
Ruohotie 4, 48800 Kotka, Finland
E-mail: info@kuorelab.fi
Phone: +358 46 89 03764
Questions about privacy and requests concerning your data can be sent to the e-mail address above.
2. What data we process and why
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Visiting the website | IP address, date and time, requested page, browser user agent, referring page | Delivering the site, keeping it secure, investigating abuse and errors | Legitimate interest, Art. 6(1)(f) |
| Sending the contact form | E-mail address, name, your message, IP address, time and page of sending | Answering your enquiry and any follow-up; preventing spam | Steps prior to a contract at your request, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f) |
| E-mailing or calling us | Contact details and the content of your message | Answering you and handling the matter | Art. 6(1)(b) and 6(1)(f) |
Giving us your details is voluntary, but we cannot answer a message without a way to reach you. Please do not send special categories of data (for example health information) through the form.
We do not sell personal data, do not use it for marketing without your consent, and do not make automated decisions or profiles about you.
3. How long we keep data
- Web server logs: 30 days, then deleted automatically.
- Contact form submissions: 24 months from sending, then deleted automatically. Messages flagged as automated spam are deleted after 30 days.
- E-mail correspondence: as long as needed to handle the matter and, if it leads to a contract, for the periods required by Finnish accounting and other law.
4. Who processes data for us
We do not disclose personal data to third parties. The following service providers process data on our behalf under data processing agreements:
- Hetzner Online GmbH (Germany) – server hosting. The server is located in Finland.
- Migadu (Switzerland) – e-mail hosting; contact form messages are delivered to us by e-mail.
Switzerland is recognised by the European Commission as providing an adequate level of data protection (adequacy decision). Data is not transferred to any other country outside the EU/EEA.
All files of the website, including fonts and images, are served from our own server; your browser does not contact any third party when you view the site. The Facebook and LinkedIn icons are plain links: those services receive data only if you follow the link, under their own policies.
5. Cookies and local storage
This website does not use cookies. It uses no analytics, advertising or social media trackers, so we do not ask for cookie consent.
Two small values are kept in your own browser only for the site to work; they contain no identifier and are never sent to us:
| Name | Type | Purpose | Duration |
|---|---|---|---|
visited | Session storage | Plays the page fade-in animation only on the first page view | Until you close the tab |
kl_notice_closed | Local storage | Remembers that you closed the privacy notice | Until you clear site data |
Our previous website was hosted on the Tilda platform, which set its own cookies
(tildauid, tildasid, TILDAUTM). This site deletes them from your
browser automatically if they are still there.
6. Your rights
Under the GDPR you have the right to:
- get access to the personal data we hold about you and a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict processing of your data;
- object to processing based on our legitimate interest;
- receive data you gave us in a machine-readable format (data portability).
To use these rights, e-mail info@kuorelab.fi. We answer within one month. We may ask for information to confirm your identity before handing out data.
You also have the right to lodge a complaint with the supervisory authority, the Office of the Data Protection Ombudsman in Finland, or with the authority of your country of residence in the EU.
7. Security
The site is served only over encrypted HTTPS connections. Personal data is stored on our own server, which only authorised administrators can access.
8. Changes to this policy
If we change how we process personal data, we update this page and the date at the top.