Privacy Policy
Last updated: August 22, 2026
1. Data Controller
WhatsBuilt Oy
Business ID: 3623126-5
Finland
Email: privacy@whatsbuilt.fi
2. What Data We Collect
Contact Form Submissions
When you submit our "Book Demo" form, we collect:
- Name
- Work email address
- Company name
- Optional message
Automatically Collected Data
Our hosting provider (Amazon CloudFront) writes a server-side access log for every request. Each entry contains the IP address, the date and time, the page or file requested, the browser type (user agent), the referring page, and the response status. No cookie or client-side tracking is involved. We use these logs for security monitoring and abuse prevention, and for aggregate traffic statistics (for example page views and approximate visitor counts per day), which we compute from the logs with Amazon Athena. The logs and the query results are stored in the EU and deleted automatically after 180 days.
3. How We Use Your Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Contact form data | Respond to your inquiry and schedule a demo | Legitimate interest (Art. 6(1)(f) GDPR) |
| Access logs (incl. IP address) | Security monitoring, abuse prevention, aggregate traffic statistics | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Sub-processors
We use the following third-party services to process your data:
| Service | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Website hosting, CDN, access logs and their analysis (Athena) | EU (Stockholm, eu-north-1) |
| Formspree | Contact form processing | United States |
Data transfers to the United States (Formspree) are covered by the EU-US Data Privacy Framework.
5. Data Retention
- Contact form submissions: Retained for 24 months after your last interaction, then deleted.
- Access logs (incl. IP address): Deleted automatically after 180 days, together with any statistics query results derived from them.
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access – request a copy of the personal data we hold about you
- Rectification – request correction of inaccurate data
- Erasure – request deletion of your data ("right to be forgotten")
- Portability – receive your data in a machine-readable format
- Objection – object to processing based on legitimate interest
- Complaint – file a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)
To exercise any of these rights, contact us at privacy@whatsbuilt.fi. We will respond within 30 days.
7. Cookies
This website does not use cookies or any client-side tracking technology.
8. Security
All data is transmitted over HTTPS (TLS 1.2+). Our infrastructure is hosted on AWS with encryption at rest (AES-256) and in transit. Access to personal data is restricted to authorized personnel only.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be announced on our website.
10. Contact
For any privacy-related questions or requests:
Email: privacy@whatsbuilt.fi
WhatsBuilt Oy (3623126-5), Finland