Skip to main content

Legal

Privacy Policy

How we collect, use and protect your personal data in accordance with the GDPR.

Last updated: October 2026

Syntask Oy ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Syntask Oy (Y-Tunnus: 3483513-7), Otakaari 7, 02150 Espoo, Finland. Email: [email protected].

2. Data We Collect

  • Enquiries: the name, email address, company, phone number and message you enter in a contact form. With it we record the IP address and browser type the form was sent from, to protect the form against spam and abuse.
  • Newsletter: your email address, and when and where you subscribed.
  • Website analytics: see section 3. What we measure depends on your choice in the cookie banner.
  • Delivery and security: our hosting and content-delivery providers process your IP address and request details to deliver the website and protect it against attacks.

3. Website Analytics

We measure how our website is used with our own analytics, on our own servers. No IP address is used or stored for it, and nothing is shared with third parties. What happens depends on your choice in the cookie banner:

  • Accept all: a first-party cookie (syntask_visitor) holds a random identifier for up to 13 months. With it we see each visit page by page: which pages you open, for how long and how far down you read, where you came from (search engine, website or campaign link — never the full address), your country and city, device, browser and language, and actions such as opening a question, clicking through to the contact page or starting a form. If you then send us a contact form, the visit you sent it from is linked to your enquiry, so we understand what you were interested in.
  • No choice yet: each page view is added to an hourly total together with the page, where the visit came from, the country and the device type. No cookie is set, no identifier is created and nothing links one page view to another, so these totals contain no personal data.
  • Essential only: no measurement at all.

You can change your choice at any time with Cookie settings in the footer of every page; choosing "Essential only" removes the analytics cookie immediately. Analytics data is deleted after 13 months. Search terms you type on our site are not recorded.

Reactll. Only after "Accept all", our website also sends page views and clicks (such as on an email address or a link to another site) to Reactll (Reaktör Teknoloji Tic. Ltd. Şti.), the agency that builds and maintains this website, so they can watch how it performs for us. It sets no cookie and stores no IP address; it records the page, where the visit came from, country and city, and device and browser type. This data is stored in the EU and deleted after 24 months. Without "Accept all", no analytics is sent to Reactll.

4. Purposes and Legal Basis

  • Answering your enquiry and any discussion that follows: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
  • Spam and abuse protection of our forms and website: our legitimate interest in keeping them secure (Art. 6(1)(f)).
  • Newsletter: your consent (Art. 6(1)(a)), which you can withdraw at any time by writing to [email protected].
  • Visit-level analytics, linking a visit to an enquiry, and the analytics Reactll runs for us: your consent given with "Accept all" (Art. 6(1)(a)), which you can withdraw at any time with Cookie settings.
  • Anonymous page-view totals: contain no personal data; we keep them to understand which content is useful.

5. How Long We Keep Data

  • Enquiries: for as long as needed to handle your enquiry and any business relationship that follows from it, after which they are deleted.
  • Newsletter: until you withdraw your consent.
  • Analytics (visits and totals): 13 months, then deleted automatically.
  • Analytics sent to Reactll after "Accept all": 24 months, then deleted automatically. Enquiries held by Reactll: your details are removed after 24 months at the latest.

6. Who Processes Data for Us

We do not sell personal data. We use these service providers, bound by data processing terms:

  • Hosting of our website and database (DigitalOcean)
  • Content delivery and protection against attacks (Cloudflare)
  • Reactll (Reaktör Teknoloji Tic. Ltd. Şti.), the agency that builds and maintains this website, data stored in the EU: it receives the enquiries you send through our forms, and website analytics only after you choose "Accept all"
  • Google Analytics, only if enabled and only after you choose "Accept all" — see our Cookie Policy

Some of these providers are based in the United States. Where data leaves the EU/EEA, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

7. Your Rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Contact us at [email protected].

You also have the right to lodge a complaint with the Finnish data protection authority, the Office of the Data Protection Ombudsman (tietosuoja.fi).

Start a 90-Day Proof of Value Call