{"id":3,"date":"2026-01-30T10:09:43","date_gmt":"2026-01-30T10:09:43","guid":{"rendered":"https:\/\/tavestra.com\/?page_id=3"},"modified":"2026-08-26T22:41:48","modified_gmt":"2026-08-26T20:41:48","slug":"tietosuoja","status":"publish","type":"page","link":"https:\/\/tavestra.com\/en\/tietosuoja\/","title":{"rendered":"Privacy statement"},"content":{"rendered":"

Privacy statement<\/h1>\n\n\n\n

This privacy statement describes how Tavestra collects, processes and protects your personal data when you visit our website or use our services. In our operations, we comply with the EU General Data Protection Regulation (GDPR).<\/p>\n\n\n\n

1. Controller<\/h2>\n\n\n\n

Name of the company:<\/strong> Tavestra
Business ID:<\/strong> 1896014-9
Email:<\/strong> info@tavestra.com
Website:<\/strong> https:\/\/www.google.com\/search?q=https:\/\/www.tavestra.com<\/a><\/p>\n\n\n\n

2. What data do we collect?<\/h2>\n\n\n\n

We only collect data for the purposes that are necessary for the functionality of the website, data protection or customer service:<\/p>\n\n\n\n

    \n
  • Contact forms:<\/strong> Name, email address and content of the message.<\/li>\n\n\n\n
  • Analytics and performance:<\/strong> Data related to the use of the website (e.g. IP address, browser type, visited pages)<\/li>\n\n\n\n
  • Data security information:<\/strong> Log data (such as IP addresses), which are used for protecting the website from attacks.<\/li>\n<\/ul>\n\n\n\n

    3. Technical services and forms on the website<\/h2>\n\n\n\n

    On our website, we use the following services to ensure the functionality and security of the website:<\/p>\n\n\n\n

    1. Content management (WordPress)<\/h3>\n\n\n\n

    Our website has been built on the WordPress platform. WordPress uses cookies to improve the user experience (e.g. choices of language and login data). WordPress in itself does not collect data on ordinary visitors but it enables the functioning of other services referred to in this notice.<\/p>\n\n\n\n

    2. Contact forms and communication (Forminator & WP Mail SMTP)<\/h3>\n\n\n\n

    We use Forminator<\/strong> plugin for form management. When you fill in the form, we collect the data you have provided to be able to respond to your query. All messages are transmitted securely through the WP Mail SMTP<\/strong> plugin.<\/p>\n\n\n\n

      \n
    • Retention:<\/strong> Data provided on a form is retained for 24 months to manage customer services.<\/li>\n<\/ul>\n\n\n\n

      3. Website protection (Wordfence & Cloudflare)<\/h3>\n\n\n\n

      Data security is of primary importance to us. We use two overlapping security layers:<\/p>\n\n\n\n

        \n
      • Wordfence Security:<\/strong> We use this plugin to protect the website from malware and unauthorised login attempts. Wordfence processes visitors' IP addresses to identify and prevent any harmful activities. The data is stored in the website's local database.<\/li>\n\n\n\n
      • Cloudflare:<\/strong> The data traffic on our website is transferred using Cloudflare's global network. Cloudflare acts as a filter that stops DDoS attacks and accelerates the loading of the website (cache). Cloudflare processes technical log data (such as IP addresses) to ensure protection. Cloudflare is certified in accordance with the EU\u2013US Data Privacy Framework.<\/li>\n<\/ul>\n\n\n\n

        4. Spam protection (Cloudflare Turnstile)<\/h3>\n\n\n\n

        We protect our forms from bots using the Cloudflare Turnstile<\/strong> service. It is a privacy-preserving alternative to traditional CAPTCHAs; it uses technical signals to ensure that the user is human, without tracing the users for advertising purposes.<\/p>\n\n\n\n

        5. Performance and optimisation (LiteSpeed Cache & OMGF)<\/h3>\n\n\n\n
          \n
        • LiteSpeed Cache:<\/strong> Speeds up the website by caching pages. Does not store personal data.<\/li>\n\n\n\n
        • OMGF:<\/strong> We download the Google fonts from our own server, so your IP address is not sent to Google when the site loads fonts.<\/li>\n<\/ul>\n\n\n\n

          6. Other tools<\/h3>\n\n\n\n
            \n
          • Yoast SEO:<\/strong> Used for SEO.<\/li>\n\n\n\n
          • TranslatePress:<\/strong> Uses cookies to remember your choice of language.<\/li>\n<\/ul>\n\n\n\n

            4. Purpose and grounds of the processing of personal data<\/h2>\n\n\n\n

            We process your personal data for the following reasons:<\/p>\n\n\n\n

              \n
            1. Legitimate interest:<\/strong> Protecting the website (Wordfence\/Cloudflare) and responding to contacts.<\/li>\n\n\n\n
            2. Consent:<\/strong> Analytics and marketing cookies (managed via Cookiebot).<\/li>\n\n\n\n
            3. Legal obligations:<\/strong> Such as accounting.<\/li>\n<\/ol>\n\n\n\n

              5. Disclosure of data to third parties<\/h2>\n\n\n\n

              We do not sell your personal data. We use reliable service providers (incl. hosting service, Cloudflare, Defiant\/Wordfence) that process data on our behalf to ensure technical implementation. Personal data is transferred outside the EU only if the service provider guarantees a level of protection that complies with the GDPR (e.g. Standard Contractual Clauses or Data Privacy Framework).<\/p>\n\n\n\n

              6. Cookies<\/h2>\n\n\n\n

              We use cookies to ensure the functionality of the website and for statistical purposes. You can change or cancel your cookie consent any time via the cookie notice at the bottom of the website.<\/p>\n\n\n\n