Privacy Notice
This notice explains how BoneStructure Oy processes personal data collected through this website. It applies to visitors to the site and to individuals who contact us through it.
1. Controller
BoneStructure Oy (3615791-5) is the controller responsible for the personal data described in this notice.
Registered location: Espoo, Finland.
Contact for data protection matters: julia@juliak.fi
In the course of client engagements, BoneStructure Oy may process personal data on behalf of a client as a processor, or as a controller of its own work product. Such processing is governed by the relevant engagement contract and data processing terms, not by this notice, which concerns only the website.
2. Personal data we process and the purposes
Enquiries submitted through the contact form. When you contact us through the form, we process the name, email address, and any information you include in your message. We use this data to respond to your enquiry, to communicate with you about it, and, where relevant, to take steps toward a possible engagement at your request.
Technical operation of the website. When you visit the site, our hosting provider processes limited technical data (such as IP address and device or browser information) as necessary to deliver the site, maintain its security, and prevent misuse. This data is not used to track or profile visitors.
3. Legal bases for processing
We rely on the following legal bases under the EU General Data Protection Regulation (GDPR):
Responding to enquiries and related communication, our legitimate interest in addressing messages directed to us (Article 6(1)(f)). Steps taken toward a possible engagement, performance of a contract or pre-contractual steps taken at your request (Article 6(1)(b)). Technical operation and security of the website, our legitimate interest in providing a secure and functioning site (Article 6(1)(f)).
4. Cookies
This website uses only cookies that are necessary to operate and secure the site.
5. Recipients and processors
We do not sell personal data and do not share it for marketing purposes. Personal data is processed by: Wix.com Ltd., which provides website hosting and platform infrastructure and processes data on our behalf as a processor under a data processing agreement.
Personal data may also be disclosed where required by law or to establish, exercise, or defend legal claims.
6. International transfers
Our hosting provider may process personal data outside the European Economic Area. Where this occurs, the transfer is safeguarded by the European Commission's Standard Contractual Clauses or another transfer mechanism recognised under the GDPR.
7. Retention
We retain contact-form data only for as long as necessary to handle your enquiry and any resulting relationship or engagement, after which it is deleted, unless a longer period is required to comply with a legal obligation or to defend a legal claim. Technical data processed for site operation is retained only for the short periods required for security and operational purposes.
8. Your rights
Under the GDPR you have the right to request access to your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to processing; and, where applicable, to data portability.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), the supervisory authority for data protection in Finland: tietosuoja.fi.
9. Changes to this notice
We may update this notice when our processing or applicable law changes.
Last updated: 18.06.2026