Privacy without the fog.

Controller

The controller is Elias Hakamies. For privacy questions or requests, contact elias@hakamies.com.

What is processed

• Technical delivery and security: the hosting stack may process limited connection metadata such as IP address, time, requested path, response status, user-agent and referrer when needed to deliver, secure and troubleshoot the site.
• Voluntary email contact: if you email the address above, the sender address, message, attachments and the information you choose to include are processed to answer the request and, where relevant, discuss a potential engagement.

Do not send passwords, payment data, health data, confidential customer material or other sensitive information through the public email link.

Purposes and legal bases

• Site delivery, abuse prevention and security: legitimate interest under GDPR Article 6(1)(f).
• Replying to a request or taking steps before a possible contract: GDPR Article 6(1)(b) and, where appropriate, Article 6(1)(f).
• Keeping records required by law: GDPR Article 6(1)(c).

Retention

Connection data is kept only for the short operational period needed for security and troubleshooting. The public site is configured without analytics profiles or marketing databases. Email correspondence is kept for up to 24 months after the last meaningful contact unless a shorter period is appropriate or a contract, accounting rule, dispute or other legal obligation requires longer retention. Data is then deleted or anonymised.

Recipients and transfers

The site is hosted on an EU-region Oracle Cloud virtual machine in Sweden and served through Caddy over HTTPS. An email sent to the contact address is handled by the email infrastructure serving hakamies.com; the provider's own terms and transfer safeguards apply to that delivery. No visitor data is sold or shared for advertising.

Your rights

Subject to the GDPR conditions, you may request access, correction, deletion, restriction, objection and data portability where applicable. You may also complain to the supervisory authority, in Finland the Office of the Data Protection Ombudsman. Use the contact address above to make a request; please include enough information to identify the request without sending unnecessary personal data.

Cookies, profiling and AI

This site has no non-essential cookies, analytics, advertising pixels, newsletter system, login or automated visitor scoring. The day/night choice is stored locally in this browser's localStorage as a device-specific display preference; it is not a cookie and is not sent to the server. The portfolio is not an AI system making decisions about visitors. Some copy and visual prototyping may be AI-assisted and human-reviewed; consulting work is assessed case by case for security, privacy and EU AI Act obligations.

Security and changes

HTTPS, restrictive browser headers, minimal client-side JavaScript and access-controlled hosting are used as proportionate safeguards. No internet service can promise absolute security. This notice may be updated when the site, contact process or legal requirements change; the date above identifies the current version.