Data protection

Privacy notice

Effective 21 August 2026

This website collects nothing. No cookies, no tracking, no analytics. The contact form opens your own email app — the site never receives or stores anything unless you choose to send that email yourself.

1. Controller

Roadside Reelworks (sole trader)
Business ID 2702464-3
Rannanpohja 7 A, 91800 Tyrnävä, Finland
info@roadsidereelworks.com

No data protection officer has been appointed; the scale of activity does not require one.

2. What data is processed and on what basis

Situation	Data	Purpose	Basis
Enquiry	name, email, message, company if given	answering the question	legitimate interest
Order	name, contact and billing details, order content	fulfilling and invoicing the order	contract
Domain registration	name, address, email, phone	a domain must be registered to a named holder	contract and legal obligation
Accounting	name, billing details, amount, date	statutory bookkeeping	legal obligation
Work sample	the finished work, possibly the company name	marketing	consent

Providing the data is mandatory for orders: without contact and billing details an order cannot be fulfilled, and a domain cannot be registered without holder details.

No automated decision-making or profiling takes place.

3. Who the data is shared with

Recipient	What and why
Hosting provider	domain holder details — registration and hosting on the client’s behalf
Domain registry	holder details — a domain registry is public
Accountant	billing details — statutory bookkeeping
Stripe	name, email and order details — to take the card payment
Fiverr	order details, for Fiverr orders only

Data is never sold or shared for marketing purposes.

Transfers outside the EU

For Fiverr orders the data is processed in Fiverr’s own systems, partly located outside the EU. For those orders Fiverr is an independent controller and its own privacy policy applies.

Card payments are handled by Stripe Payments Europe, Limited (Ireland). Stripe may transfer data to its group companies in the United States; those transfers rely on the standard contractual clauses approved by the European Commission. Stripe also processes payment data for its own legal and fraud-prevention purposes, and for that part its own privacy policy applies. I never see your card number.

For other directly ordered work, no data is transferred outside the EU.

4. Retention periods

Enquiries that did not lead to an order	12 months
Order data and project material	12 months from delivery
Accounting records	6 years from the end of the calendar year in which the financial period ended — required by the Finnish Accounting Act
Domain holder details	as long as the domain is active
Work sample consent	until consent is withdrawn

5. Security

Data is held on password-protected devices and services. Passwords are not stored in plain text. Access is limited to the sole trader.

6. Your rights

to know what data is held about you
to have inaccurate data corrected
to have data erased — except where the Accounting Act requires retention
to restrict or object to processing
to withdraw consent at any time
to data portability

Requests: info@roadsidereelworks.com — answered within one month.

Right to complain: if you believe your data is being handled improperly, you may lodge a complaint with the Finnish Data Protection Ombudsman.