This notice explains clearly what personal data Unelma uses, why it is used, and who may process it.

1. Controller

Controller: Magdalena Hosko, operating under the name Unelma.
Address: Lammaslammentie 10 A 1, 01710 Vantaa, Finland
Phone: +358 40 255 0119
Email: magdalena@unelma.eu
Website: unelma.eu

2. What data may be collected

Depending on how you contact or use the service, Unelma may process:

• name and email address;
• city or country of residence;
• preferred language;
• the general type of private appointment or practical support you are considering;
• the message you send and related communication history;
• the agreed package, scope, price and service dates if you become a client;
• billing information that is necessary to issue or manage an invoice.

Unelma does not ask for medical records, X-rays, diagnosis details or other sensitive health information through the website contact form.

3. Why the data is used

Personal data is used only for purposes connected with the enquiry or service, including:

• responding to enquiries and taking steps requested by you before a service agreement;
• agreeing and providing the practical coordination service;
• communicating with you and, where needed, with a provider involved in arrangements you have requested;
• invoicing, accounting and other legal obligations;
• keeping necessary records, preventing misuse and handling possible complaints or legal claims.

4. Legal bases

Depending on the situation, processing is based on:

• steps requested before a contract and performance of a contract, for enquiries, service planning, communication and delivery of the agreed service;
• legal obligations, for example accounting or other records required by law;
• legitimate interests, where necessary to maintain appropriate business records, protect the service from misuse or establish, exercise or defend legal claims, provided your rights do not override those interests;
• consent where consent is specifically required, for example for an optional disclosure that is not otherwise necessary for the service.

5. Formspree, hosting, email and other processors

The website contact form is processed using Formspree. Form submissions are stored in the Formspree service and may also be delivered to Unelma by email. Formspree states that its services are hosted on Amazon Web Services infrastructure in the United States and that it relies on EU Standard Contractual Clauses as a data processor for GDPR transfers.

Unelma also uses website hosting and email providers to operate the site and communicate with clients. If an external invoicing or accounting provider is used, the minimum billing data needed for that purpose may be shared with that provider.

6. Sharing data with clinics or other providers

Unelma shares only the minimum personal data needed to carry out practical arrangements you have requested. Before information is shared with a clinic, restaurant, accommodation provider or another provider, you will be told what needs to be shared and why. Where consent is legally required, Unelma asks for it separately.

Unelma does not sell personal data and does not give contact-form data to third parties for their own marketing.

7. Sensitive health information

Please do not send medical records, X-rays, diagnosis details or other sensitive health information to Unelma through the contact form. If a clinic needs such information, send it directly to the clinic using its secure process. If sensitive health information is received by mistake, Unelma will avoid using it and will delete it where reasonably possible.

8. International transfers

Because Formspree uses infrastructure in the United States, contact-form data may be processed outside the European Economic Area. Formspree states that it uses Standard Contractual Clauses for GDPR transfers. Other providers will be assessed and appropriate safeguards used where required by law.

9. Retention

Enquiries that do not become client relationships are normally kept for no longer than 12 months after the last meaningful contact, unless there is a specific reason to keep them longer.

For clients, service and billing records are kept for as long as needed to provide the service and afterwards for the periods required by accounting, tax or other applicable law, or for as long as reasonably necessary to handle a complaint or legal claim.

10. Your rights

Depending on the legal basis and circumstances, you may have the right to access your data, correct inaccurate data, request deletion or restriction, object to certain processing, receive data in a portable form, and withdraw consent where processing is based on consent. Withdrawal of consent does not affect processing that was lawful before withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

11. Automated decisions and marketing

Unelma does not use contact-form data for automated decision-making or profiling. Contact details are not used for marketing unless there is a separate lawful basis for doing so.

12. Cookies and Google Ads measurement

The website uses Google Ads conversion tracking only if you accept it in the cookie notice. Without your consent, the Google tag is not loaded and no advertising cookies are stored. Your choice is saved in your browser’s local storage so that the notice is not shown on every page.

If you accept, Google Ireland Limited may store cookies and process information on whether you arrived via a Google ad and whether you submitted the contact form. Unelma uses this only to assess whether the ads lead to enquiries. The website does not use remarketing and does not send the content of the form to Google. Google may also process data outside the EU or EEA. More information: Google Privacy Policy.

The legal basis is your consent. You can change your choice at any time via the Cookie settings link at the bottom of the page.

13. Contact

Questions or requests concerning personal data can be sent to magdalena@unelma.eu.