Privacy Policy

1. Data controller

KARAPÄÄ & CO. is a consulting and advisory brand operated by SimplyCon Oy in Finland. SimplyCon Oy ("we", "us") is the operating company and the data controller for personal data processed through this website.

Business ID: To be provided. Registered address: To be provided. These details will be added once verified.

2. Contact information

For any questions about this privacy notice or the processing of your personal data, contact us at info.simplycon@gmail.com.

3. Personal information we collect

We process only the information necessary to operate this website and respond to enquiries:

• Contact form submissions: your name, email address and the message you choose to send.
• Direct contact: if you contact us by email, WhatsApp or LinkedIn, we process the contact details and message content you provide.
• Website analytics: with your consent, anonymised usage information such as pages visited and interactions with the site.

4. Purposes and lawful bases of processing

We process personal data for the following purposes:

• Responding to business enquiries and communicating with you (legitimate interest / steps prior to a possible agreement).
• Developing and improving the website and our services, based on your consent to analytics cookies.
• Marketing measurement, only where you have given consent to marketing cookies.

5. Website analytics

With your consent, we use website analytics (Google Analytics 4) to understand how visitors use the site. Analytics cookies are disabled by default and are only activated after you accept them in the cookie settings. You can change or withdraw your consent at any time via the Cookie Settings link in the footer.

6. Advertising and marketing technologies

With your consent, marketing technologies (such as the Meta Pixel) may be used to measure the effectiveness of our communications. These technologies are inactive until you give marketing consent.

7. Third-party service providers

We use carefully selected service providers to operate this website, including website hosting and, with your consent, analytics and marketing providers (Google and Meta). These providers process data on our behalf and in accordance with their own privacy terms.

8. International data transfers

Where service providers process data outside the EU/EEA, transfers are safeguarded by appropriate mechanisms under the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.

9. Data retention

We keep enquiry-related personal data only as long as necessary to handle the enquiry and any resulting cooperation, and no longer than applicable law requires. Analytics data is retained according to the retention settings of the analytics service.

10. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Restrict or object to processing.
• Request data portability, where applicable.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

11. Right to lodge a complaint

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) if you believe your personal data has been processed unlawfully.