Privacy Policy

Last updated: 23 December 2025

This Privacy Policy describes how personal data is collected, used, and protected when you visit or interact with the website https://hilda.kunnola.com (the “Website”).

1. Data Controller

The data controller responsible for the processing of personal data is:

Hilda Kunnola
Professional Harpist
Finland
Email: harpisti@kunnola.com

2. Personal Data We Collect

2.1 Data You Provide Voluntarily

When you submit a form on the Website, we may collect:

  • Name
  • Email address
  • Telephone number

This data is provided voluntarily by you.

2.2 Data Collected Automatically

When you visit the Website, certain data may be collected automatically, including:

  • IP address (processed in anonymised form where possible)
  • Device and browser information
  • Pages visited and interaction data
  • Date and time of visits

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes and legal bases under the GDPR:

Purpose

Legal Basis

Responding to enquiries and contact requests

Legitimate interest

Communicating about services or performances

Legitimate interest

Website analytics (Google Analytics 4)

Consent

Improving website usability and content

Legitimate interest

Analytics data is processed only after consent has been given.

4. Cookies and Google Analytics 4

This Website uses cookies and Google Analytics 4 (GA4) to analyse website usage and improve performance.

Google Analytics 4 collects information such as:

  • Pages visited
  • Time spent on pages
  • General location (country/city level)
  • Device and browser information

Google Analytics data is processed in aggregated form and is not used to directly identify individual users.

Analytics cookies are used only with your consent, which can be withdrawn at any time via the cookie banner or browser settings.

For more information on how Google processes data, see Google’s privacy policy.

5. Data Recipients and Third Parties

Personal data may be processed by trusted third parties that support the Website’s operation, such as:

  • Website hosting providers
  • Google (analytics services)

These parties process data only in accordance with applicable data protection laws and appropriate contractual safeguards.

Personal data is not sold or shared for commercial purposes.

6. International Data Transfers

Google Analytics data may be transferred outside the EU/EEA. In such cases, appropriate safeguards are applied, including:

  • Standard Contractual Clauses (SCCs)
  • Other safeguards approved under GDPR

7. Data Retention

Personal data is retained only for as long as necessary:

  • Contact form data: retained for the duration of communication and follow-up
  • Analytics data: retained according to Google Analytics retention settings

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, contact: harpisti@kunnola.com

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman.

9. Data Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, or misuse.

10. Changes to This Privacy Policy

This policy may be updated from time to time. The latest version will always be published on this page.