Privacy notice
Updated 16 October 2026. This notice concerns the use of the artplus.fi website and enquiries and requests for quotations sent to ArtPlus Design Oy.
1. Data controller and contact details
ArtPlus Design Oy
Business ID: 3658497-6
Contact person: Arto Huhta
Email:
Telephone:
2. What information we process
When you contact us through the form, by email or by telephone, we process the information you provide: your name, email address, any telephone number, the subject of your enquiry and the content of your message. The message may also contain information about your business and the planned work. We receive this information from you or the organisation you represent.
Required form fields are marked with an asterisk. Providing a telephone number is optional. Without the contact details needed to reply, we may be unable to handle your request. Do not send personal identity codes, passwords, health information or other sensitive information through the form.
Operating and securing the website also involves processing technical information, such as your IP address, browser details, the requested page and the time of the request. Spam protection uses short-lived protected hashes derived from IP and email addresses to limit submission volumes.
3. Purposes and legal bases for processing
We use enquiry information to respond to your message, clarify the work required, prepare a quotation and carry out any resulting assignment. Processing is based on preparing or performing a contract when you are a party to the contract. Processing the information of business contact persons and general enquiries is based on our legitimate interest in managing business communications.
Ensuring website operation, preventing misuse and combating spam are based on our legitimate interest in protecting the service. Accounting records relating to a client relationship are processed to meet statutory obligations. Submitting the contact form does not add you to a marketing list.
4. Recipients and protection of information
Contact form messages are delivered to ArtPlus Design Oy’s email inbox. The form does not store message content in a separate WordPress contact register. Information is processed by people who need it for their work, and by website maintenance, hosting and email providers to deliver their services. Information may be disclosed to an authority to meet a legal obligation.
The website connection is encrypted using HTTPS. Administration is restricted to authenticated, authorised users. Information is not sold.
5. Google reCAPTCHA and international processing
The contact form uses Google’s reCAPTCHA service to prevent automated spam. The service processes technical information, such as IP addresses, browser and device details, and interaction with the verification. Google may set the _GRECAPTCHA cookie used for risk analysis.
In connection with Google’s service, information may be transferred outside the EU or EEA, for example to the United States. Google describes its transfer mechanisms and safeguards on its international data transfers page. Further information: Google Privacy Policy and Terms of Service. If you do not wish to use reCAPTCHA, you can contact us directly by email or telephone.
6. Cookies and visitor analytics
The cookie notice at the bottom of the page lets you accept all optional purposes, reject them or choose purposes individually. Optional settings are off by default. You can change your choices and withdraw consent at any time using Cookie settings in the footer.
The necessary artplus_consent cookie (ArtPlus, 180 days) stores your cookie choices, their timestamp and the notice version. It contains no name or contact details. WordPress login and settings cookies apply to signed-in administrators; ordinary visitors do not need to sign in. Contact form spam protection uses Google reCAPTCHA as described in section 5.
Remembering your language preference is optional. If allowed, the pll_language cookie (ArtPlus / Polylang, up to 1 year) remembers the last language you used. Without permission, you can still use the site and switch language using FI and EN.
External YouTube and Vimeo videos load in an embedded player only with your permission and only when you open a video. You can give permission in Cookie settings or next to the video. The provider then receives information such as your IP address, may process data outside the EU/EEA and may use its own cookies or similar technologies. Without permission, you can open the video on the provider’s website. Detailed cookie information and durations are available under More about video cookies in Cookie settings and in the providers’ descriptions: Google cookies and Vimeo cookies.
Withdrawing consent stops new loading of external players. You can also delete cookies and other data previously stored by providers using your browser settings. Withdrawal does not affect the lawfulness of processing carried out with consent before its withdrawal.
Google Analytics 4 measurement starts only if you allow the Visitor measurement purpose. Processing is based on your consent. We measure information such as page views, visit duration, device types and traffic sources to improve the website. For the demoreel, we measure player openings, playback starts, progress, playback time, the proportion of content viewed, pauses, seeks, the position when the player is closed and the end of the video. Google processes technical information such as browser and device details and cookie-based identifiers. The message and contact details you enter in the contact form are not sent to Analytics. The provider is Google Ireland Limited; data may also be processed outside the EU/EEA using the safeguards described in section 5. ArtPlus _ga and _ga_* cookies last up to 1 year. Advertising tracking, Google Signals and ad personalization are not used. See Google’s privacy policy. Withdrawing consent stops measurement and removes this website’s Analytics cookies from your browser. After opening a link to an external website, that service’s privacy policy applies.
7. Retention periods
Enquiries and requests for quotations are retained for the time needed to handle the matter and any necessary follow-up. Retention needs depend, for example, on the validity of the quotation, the progress of the work and the resolution of any contract matter or claim. When the purpose and any statutory retention obligation end, the information is deleted. Accounting records relating to client relationships are retained for the period required by law.
Temporary counters used to limit form submissions expire within 24 hours. This does not delete an email message already sent. Retention of technical logs and backups depends on providers’ practices and on ensuring service operation and security. You can obtain more information about the retention of your own enquiry from the data controller.
8. Your rights
You can request access to your personal data and correction of inaccurate information. Where the conditions laid down by law are met, you can request erasure, restriction of processing or transfer of data from one system to another. You can object to processing based on legitimate interests on grounds relating to your particular situation. If processing is based on your consent, you can withdraw it at any time; withdrawal does not affect the lawfulness of earlier processing.
Send privacy-related requests to . We may request the information necessary to verify your identity before fulfilling the request. Some information cannot be deleted where, for example, there is a statutory obligation to retain it. ArtPlus does not use enquiry information for automated decision-making or profiling.
If you consider that your personal data is being processed in breach of data protection rules, you can lodge a complaint with the Office of the Data Protection Ombudsman.