Start a conversation

Privacy Policy

Last updated: 22 July 2026

1. Data controller

KKG Fagerholm Oy (“we”, “us”, “KKG Consulting”) is the controller for personal data processed through this website, https://kkgconsulting.fi.

  • Business ID: 3466687-1
  • Registered address: Mäkitie 5, 68580 Larsmo
  • Privacy contact: kent.fagerholm@kkgconsulting.fi

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018).

2. Scope

This policy explains what personal data we collect when you visit or contact us through kkgconsulting.fi, why we collect it, the legal basis for it, who receives it, how long we keep it, and your rights. It covers this website only. If we later add client tools or user accounts, we will update this policy before they go live.

3. What we collect, why, and our legal basis

a) Contact form. When you use our contact form we collect the name, email address, selected service, and message you provide. We use this only to respond to your enquiry and to take steps at your request before a possible engagement. Submissions are delivered to us by email and held in our business email system.
Legal basis: steps prior to a contract (Art. 6(1)(b)) and our legitimate interest in responding to enquiries (Art. 6(1)(f)).

b) Analytics — Google Analytics 4. Loaded via Google Tag Manager, this tells us how visitors use the site (pages viewed, approximate location from IP, device and browser type, referral source, on-page interactions). It is collected through cookies/identifiers and is pseudonymous — we do not use it to identify you personally.
Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.

c) Server & security logs. Our hosting provider automatically records technical data such as IP addresses and request details to keep the service secure and available.
Legal basis: our legitimate interest in security and reliability (Art. 6(1)(f)).

We do not carry out automated decision-making or profiling that has legal or similarly significant effects on you.

4. Cookies

  • Functional cookies — needed for the site to work; set by WordPress and our hosting.
  • Analytics cookies — set by Google Analytics (e.g. _ga, _ga_NTSZFPBZ) to distinguish visitors and measure usage.

Analytics cookies should run only with your consent. You can also block or delete cookies at any time in your browser settings.

5. Who receives your data

We do not sell your personal data. We share it only with providers acting as our processors:

  • Hosting & email — WP One (Zoner Oy), hosting the website and mail on servers in Finland (EU).
  • Google — Google Ireland Ltd / Google LLC, providing Google Analytics and Tag Manager on our behalf.

6. International transfers

Analytics data may be transferred to Google LLC in the United States. Google is certified under the EU–U.S. Data Privacy Framework and applies the European Commission’s Standard Contractual Clauses as a safeguard. Website and email data remain within the EU.

7. How long we keep data

  • Contact enquiries — for as long as needed to handle your enquiry and any resulting relationship, then deleted when no longer necessary (typically within [12–24 months] of last contact).
  • Analytics — retained in Google Analytics for up to 14 months, then aggregated or deleted.
  • Server logs — kept by our host for a limited period for security.

8. Your rights

Under the GDPR you may: access your data; correct it; erase it; restrict or object to processing; obtain portability; and, where we rely on consent, withdraw it at any time (this does not affect processing already carried out). To exercise any right, email kent.fagerholm@kkgconsulting.fi — we respond within one month.

9. Complaints

If you consider that we have handled your personal data unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

10. Security

We apply appropriate technical and organisational measures, including HTTPS encryption in transit and EU-based hosting. No internet transmission is ever completely secure, but we take reasonable steps to protect your data.

11. Children

This site and our services are aimed at businesses and professionals, not children; we do not knowingly collect data from anyone under 16.

12. Changes

We may update this policy from time to time. The current version and its “last updated” date always appear on this page.