Privacy policy.

This policy explains how Visa Rikala processes the personal data of website visitors, people who get in touch and newsletter subscribers.

Updated October 1, 2026.

1. Controller and contact details

Visa Rikala, Tampere, Finland.
Email: contact@visarikala.com
Phone: +358 40 582 5710

2. What data is processed and why?

Contact and customer relationship

In the contact form you give your name, email address and message and, if you wish, company and project details. The data is obtained from you and is used to reply to your message, prepare a quote and manage the customer relationship. The legal basis is pre-contractual steps taken at your request, performance of a contract, or a legitimate interest in replying to other inquiries. Data related to accounting is processed on the basis of a legal obligation.

Name, email address and message are needed in the form to reply to your inquiry. The other fields are optional. You can also get in touch by email or phone. Contacting me does not add you to the newsletter list.

Newsletter

In the newsletter Visa Rikala tells about AI experiments, new work and his own services. When you subscribe, the email address, time of joining, source of joining, consent and subscription status are processed. The data is obtained from you. Sending is based on your separate, voluntary consent. The email address is needed to deliver the newsletter.

You can cancel the subscription at any time from the unsubscribe link in the message or by contacting the controller. Accepting cookies does not mean subscribing to the newsletter.

Site use and visitor statistics

Only with your consent do Vercel Web Analytics and Google Analytics 4 collect data about the pages viewed, the referring site, the device, the browser and approximate location. The data is used to develop the site's functionality, content and usability, and the legal basis is consent. Google Analytics uses cookies to link page views to the same browser. Vercel Analytics does not use analytics cookies. Vercel distinguishes visitors with an identifier formed from the web request, which has a lifetime of at most 24 hours. Statistics are presented in aggregate. The site's own analytics code removes query parameters and anchors from the page address before sending. Names, email addresses or messages from forms are not sent to analytics. Visitor statistics are not used for ad personalization.

Marketing and ad measurement

Only with your separate consent does the site load Meta Platforms Ireland Limited's Meta Pixel. With it, Visa Rikala measures which Facebook and Instagram ads bring visitors and inquiries, and can target and exclude advertising. Meta receives information about the pages viewed and about the contact form being sent, as well as browser identifiers (the cookies _fbp and _fbc). When you send the contact form, information about the successful submission is also sent to Meta from the server (Conversions API) together with a hashed version of your email address, your IP address and browser details, so that measurement stays reliable. The form's message and other fields are not sent to Meta. The ad's campaign details (UTM parameters and Meta's click identifier fbclid) are stored in the browser's local storage under the key visa-attribution-v1 for at most 180 days and attached to the contact message you send, so that Visa Rikala knows which ad you came from. The legal basis is consent. Meta's processing may involve transferring data outside the EU/EEA, and Meta also acts as an independent controller for its own data (Meta's privacy policy).

Vercel processes the technical data needed to deliver pages and for security, such as the IP address and web request data. The purpose is to provide a working and secure web service, and the basis is the controller's legitimate interest. No automated decisions based on personal data with legal or similarly significant effects are made on this site.

3. Cookies and data stored in the browser

You can use the site without optional tracking. The Vercel Web Analytics or Google Analytics programs are not loaded before your approval. Accepting and rejecting are equally easy to access. Advertising cookies (Meta) are enabled only with the separate Marketing choice.

• Consent choice: Visa Rikala stores your choice in the browser's local storage under the key visa-consent-v1. The validity period is 180 days. This storage keeps a record of your cookie choice.
• Page transition state: the keys vr-page-transition and vr-loader-seen in the browser's session storage control the page transition and make the intro animation show once in the same tab. The data disappears when the tab is closed and is not sent to a server or used for visitor tracking.
• Optional visitor statistics: Vercel Web Analytics does not store analytics cookies in the browser. Google Analytics uses the cookies _ga and _ga_6DSEH6KF3R, whose maximum lifetime is 180 days. Both analytics programs are loaded only after approval.
• Optional marketing: Meta Pixel sets the cookies _fbp (for at most 90 days) and _fbc (when you arrive via a Facebook or Instagram ad). In addition, the ad's campaign details are stored in the browser's local storage under the key visa-attribution-v1. The program is not loaded and no data is stored before your approval.

You can change your choice and withdraw your consent to visitor statistics and marketing at any time from the Cookie settings link at the bottom of the page. Withdrawing stops further tracking and removes the Analytics and Meta cookies available on this site, as well as the stored campaign details. Withdrawing does not affect the lawfulness of processing carried out on the basis of consent before that.

Open cookie settings

4. Service providers and data transfers

The site and its images and videos are published on Vercel. Vercel and Google process visitor statistics data only if you accept it. The Resend email service has been prepared for forwarding inquiries. Newsletter subscriber data is stored in Google Sheets under the contact@visarikala.com workspace account. The forms tell you if sending or subscribing is not yet available; a failed submission is not confirmation that a message or subscription was received.

Vercel and Google may also process data outside the EU and EEA, for example in the United States. Processing outside the EU/EEA requires a lawful transfer basis, such as the standard contractual clauses approved by the EU or an applicable adequacy decision. More information and the providers' safeguards: Vercel's privacy policy, Vercel's data processing agreement, Google's privacy policy and Resend's privacy policy. You can ask the controller for more information about the applicable transfer safeguards.

Data is not sold. It may be disclosed to authorities if the law requires it. When you open an external booking or social media service, your personal data is also processed according to that service's own privacy policy.

5. Data retention and security

Contact data is kept for as long as it takes to resolve the matter and handle a possible quote. When a customer relationship begins, the need for retention is determined by performing the contract and by legal obligations such as accounting. Unnecessary data is deleted.

For sending the newsletter, the address is used for as long as the subscription is valid. After cancellation the address is removed from distribution. Data needed to demonstrate consent and to honor the cancellation may be kept only for as long as is necessary for those purposes.

Vercel's visitor identifier disappears after at most 24 hours. Aggregated statistics are kept according to the service plan in use on Vercel. More information: Vercel Web Analytics privacy.

Google Analytics' retention period for event data is 2 months and for user data 14 months. The retention period for user data starts over with new user activity. These settings do not usually affect standard reporting based on aggregated data. The 180-day lifetime of a cookie is a different matter from the retention period of data on the server.

Access to personal data is limited to those who need it in their work. Data is protected with access rights and an encrypted network connection.

6. Your rights

You can request access to your data, its rectification or erasure, and restriction of processing. When the legal conditions are met, you have the right to transfer data from one system to another and to object to processing based on legitimate interest on grounds relating to your particular situation. You can always object to direct marketing and withdraw the consent you have given.

Send your request to contact@visarikala.com. We may ask for information to verify your identity if needed. If you feel your data is being processed incorrectly, you can lodge a complaint with the Office of the Data Protection Ombudsman.