Who we are

Our website address is: https://alyagentti.fi

AlyAgentti.fi is an AI consulting service providing intelligent chat solutions powered by Mistral AI and business automation. We are committed to protecting your privacy and ensuring full compliance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

Data Controller:
• Company: Älyagentti Oy
• Email: info@alyagentti.fi

Legal basis for processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Article 6(1)(a)): For optional services like newsletters
• Contract (Article 6(1)(b)): To provide our Mistral AI chat services
• Legitimate Interest (Article 6(1)(f)): For analytics and service improvement
• Legal Obligation (Article 6(1)(c)): For compliance with applicable laws

What data we collect

AI Chat Service (Powered by Mistral AI)
When you use our AI chat service, we collect:

• Anonymous conversation data (no personal identifiers)
• Technical data: Session timestamps, response times, error logs
• Usage analytics: Aggregated statistics using EU-based analytics only

Contact forms
When you contact us through our forms, we collect:

• Name, email address, company (when voluntarily provided)
• Message content and inquiry details
• Communication records for business purposes

Cookies

Essential cookies only
We use minimal, essential cookies to ensure website functionality:

• Session management: Temporary cookies for user sessions (deleted when you close your browser)
• Security cookies: CSRF protection and security measures
• Preference cookies: Language and accessibility settings (last for 12 months)

What we do NOT use

• Google Analytics or Google Tag Manager
• Facebook Pixel or social media tracking
• Third-party advertising cookies
• Cross-site tracking mechanisms

EU-only service providers

We exclusively use EU-based service providers to ensure your data remains within EU jurisdiction:

AI Services:
• AI Provider: Mistral AI (French company, EU-based)
• All AI processing occurs within EU borders
• Anonymous chat data stored in EU only

Hosting and Infrastructure:
• Web hosting: EU data centers exclusively
• Content delivery: EU-based CDN networks
• Email services: EU-based email service providers
• Performance monitoring: EU-based service providers only
• Tracking: NO Facebook Pixel, Google Tag Manager, or US tracking tools

Communication Services:
• Email: EU-based email service providers
• Support systems: EU-hosted customer service platforms
• Backup services: EU data centers exclusively

Who we share your data with

We do NOT share your personal data with third parties except:

• EU-based service providers under strict data processing agreements
• When required by EU law or court orders
• With your explicit consent for specific purposes

How long we retain your data

Mistral AI Chat Data:
• Anonymous chat logs: 12 months for service improvement
• Technical logs: 3 months for troubleshooting
• Analytics data: 24 months (EU-based analytics only)

Website Data:
• Contact form submissions: 3 years for business purposes
• Comments: Retained until deletion is requested
• User accounts: Retained until account deletion is requested
• Technical logs: IP addresses anonymized after 7 days, deleted after 6 months

What rights you have over your data

Under GDPR, you have the following rights:

• Access Rights (Article 15): Request a copy of all personal data we hold about you
• Rectification Rights (Article 16): Correct inaccurate or incomplete personal data
• Erasure Rights (Article 17): Request deletion of your personal data ("right to be forgotten")
• Restriction Rights (Article 18): Limit how we process your personal data
• Portability Rights (Article 20): Receive your data in a machine-readable format
• Objection Rights (Article 21): Object to processing based on legitimate interests
• Withdrawal of Consent (Article 7): Withdraw consent at any time

To exercise these rights, contact us at info@alyagentti.fi

Where your data is sent

Your data is processed exclusively within the EU/EEA:

• All hosting and storage in EU data centers
• Mistral AI processing within EU borders
• No transfers to third countries without adequacy decisions

Data security measures

Technical Safeguards:
• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access controls: Role-based access with multi-factor authentication
• Network security: Firewalls, intrusion detection, and monitoring
• Regular updates: Automatic security patches and updates

Organizational Measures:
• Staff training: Regular GDPR and data protection training
• Access logging: All data access logged and monitored
• Incident response: Documented breach notification procedures
• Regular audits: Quarterly security and compliance reviews

Contact information

Data Protection Officer:
• Email: info@alyagentti.fi
• Languages: Finnish, English

Supervisory Authority:
If unsatisfied with our response, contact:
• Finland: Tietosuojavaltuutetun toimisto (Data Protection Ombudsman)
• Website: https://tietosuoja.fi/
• Email: tietosuoja@om.fi

Effective Date: 12.8.2025
Version: 1.0

For questions about this privacy policy, contact us at info@alyagentti.fi

This privacy policy has been designed to comply with GDPR and Finnish data protection laws.