Privacy notice

Last updated: 17 May 2026

This notice explains how Mininvest Oy processes personal data submitted through this website. It is provided in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018).

1. Controller

Mininvest Oy
Business ID 1027348-3
Finland
Email: office@mininvest.fi

Mininvest Oy has not appointed a Data Protection Officer, as the company does not engage in large-scale processing of personal data within the meaning of Article 37 GDPR.

2. What data we process

When you use the contact form on this website, we process the following information that you provide voluntarily:

  • Name
  • Organisation (optional)
  • Email address
  • The contents of your message
  • Technical metadata associated with the submission (timestamp, IP address) that our form processor records for spam prevention and audit purposes

This website does not use cookies, analytics, or tracking technologies. We do not collect personal data passively.

3. Purpose and legal basis

We process the data described above solely to respond to your inquiry and to maintain a record of the correspondence where this is necessary for legitimate business, auditing, or compliance reasons.

The legal basis for the processing is our legitimate interest under Article 6(1)(f) GDPR in handling inquiries directed to us. Where processing relates to statutory record-keeping (for example, communications with auditors or financial counterparties), the legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

4. Recipients and processors

Contact form submissions are transmitted and stored by our form processor, Formspree, Inc. (United States), which acts as a data processor on our behalf under a data processing agreement.

Beyond this processor, we do not share personal data submitted through the form with third parties, except where disclosure is required by law or is necessary to establish, exercise, or defend legal claims.

5. Transfers outside the EEA

Because Formspree, Inc. is established in the United States, personal data submitted through the contact form is transferred outside the European Economic Area. The transfer is safeguarded by the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, as applicable. A copy of the safeguards in place is available on request.

6. Retention

Inquiries are retained for as long as necessary to handle the correspondence and any follow-up, and for up to 24 months thereafter for documentation purposes. Communications that are part of statutory accounting records are retained for the period prescribed by the Finnish Accounting Act (typically six or ten years).

7. Your rights

Under the GDPR, you have the right to:

  • Request access to personal data we hold about you (Article 15)
  • Request correction of inaccurate data (Article 16)
  • Request erasure where the conditions of Article 17 are met
  • Request restriction of processing (Article 18)
  • Receive your data in a portable format (Article 20)
  • Object to processing based on legitimate interests (Article 21)

To exercise these rights, please contact us at office@mininvest.fi. We will respond within one month of receiving a verified request.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi) if you consider that the processing of your personal data infringes the GDPR.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, and destruction. Form submissions are transmitted over encrypted connections (HTTPS).

9. Changes to this notice

We may update this notice from time to time to reflect changes in our practices or in applicable law. The date of the most recent revision is shown at the top of this page.

A Finnish-language version of this notice is available at tietosuojaseloste.html.