Privacy policy
Updated 16 September 2026
This policy explains how Visio Design Oy processes personal data when you use our website, contact us or work with us as a client. We process data in accordance with the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (1050/2018).
1. Controller and contact details
Visio Design Oy, Eerikinkatu 4, 20100 Turku
For any privacy-related questions, email us at visio@visiodesign.fi.
2. What data we process
Enquiries and quote requests. When you send a message through the contact form or the quick quote form on our website, we receive:
- your name, email address, phone number and message
- optionally your company name (contact form) and current website address
- the service, project scope, add-ons and timeline you selected
- the price and timeline estimate calculated by the form
- which form was used and in which language.
Clients. For our clients, we process contact persons' names and contact details, company details, contract and project information, invoicing and payment information, and communication related to the client relationship.
Website use. We collect anonymous visitor statistics: the page visited, referring page, approximate location (country and city), device type, operating system and browser. These statistics cannot identify individual visitors. In addition, the hosting environment processes technical data such as IP addresses to deliver the website to your browser and keep it secure.
3. Purposes and legal bases
- Responding to enquiries and quote requests. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to messages sent to us.
- Performing contracts and managing client relationships. Legal basis: contract. Where the client is a company, its contact persons' data is processed on the basis of legitimate interest.
- Invoicing and bookkeeping. Legal basis: legal obligation, in particular the Finnish Accounting Act (1336/1997).
- Improving the website using visitor statistics and maintaining security. Legal basis: our legitimate interest.
We do not use your data for automated decision-making or profiling, and we never sell or rent it to anyone.
4. Where the data comes from
We mainly receive data directly from you: through our forms, by email, by phone and in meetings. Visitor statistics and technical data are generated automatically when you use the website. We may check company details from public registers such as the Finnish Business Information System (YTJ).
5. Recipients and service providers
We use service providers that process personal data on our behalf and according to our instructions:
- Resend, Inc. (United States): delivering form submissions to us by email and sending you a confirmation email
- Vercel Inc. (United States): website hosting and visitor statistics (Vercel Web Analytics)
- providers of email, office, invoicing and accounting services
- service providers used in client projects, such as hosting providers, to the extent needed to deliver the project.
We may disclose data to authorities where required by law.
6. Transfers outside the EU/EEA
Resend and Vercel are US companies, so data may be processed in the United States. Both participate in the EU–U.S. Data Privacy Framework, under which the European Commission has found the level of data protection adequate. Their data processing agreements also include the Standard Contractual Clauses approved by the European Commission.
7. Retention
- Enquiries and quote requests that do not lead to a client relationship are deleted no later than 24 months after our last contact.
- Client data is kept for the duration of the client relationship and afterwards for as long as needed to fulfil contractual obligations and handle possible claims.
- Accounting records are kept as required by the Finnish Accounting Act: vouchers such as invoices for six years, and financial statements and books of account for ten years from the end of the financial year.
- Visitor statistics are aggregated. Vercel discards the visitor session identifier within 24 hours.
8. Your rights
You have the right to:
- know what data we process about you and receive a copy of it
- have inaccurate data corrected
- have your data erased or its processing restricted
- object to processing that is based on our legitimate interest
- receive data we process on the basis of a contract in a machine-readable format and transfer it to another controller.
Send your request to visio@visiodesign.fi. We will reply within one month. We may need to verify your identity before handling the request.
If you believe the processing of your personal data breaks data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).
9. Cookies
Our website does not use cookies and does not store tracking or marketing data in your browser. Visitor statistics (Vercel Web Analytics) work without cookies: visitors are told apart by an identifier derived from the request, which is discarded within 24 hours. That is why the site has no cookie banner.
The website links to social media services. When you visit them, their own privacy policies apply.
10. Security
The website uses an encrypted HTTPS connection. Only people who need personal data for their work can access it. We choose service providers that protect data appropriately.
11. Changes
We update this policy when our practices or the law change. The current version is always available on this page. The terms that apply to our clients are set out in our terms and conditions.