Skip to content

Privacy policy

Updated 2026-04-19

1. Data controller

WE Musiikkikoulu
Address: Kivenlahti, Espoo, FI
Email: info@wemusiikkikoulu.fi
Phone: +358 41 431 0248

2. Personal data we process

We collect personal data only when it is needed to deliver our services:

  • Contact form: name, email, phone (optional), message.
  • Student relationship: name, contact details, billing details, and the contact details of a minor student's guardian.

3. Purpose and legal basis

  • Replying to inquiries (legitimate interest, GDPR 6(1)(f)).
  • Preparing and performing the teaching contract (contract, GDPR 6(1)(b)).
  • Billing and statutory accounting obligations (legal obligation, GDPR 6(1)(c)).

4. Retention period

  • Contact-form messages: up to 12 months unless they lead to a customer relationship.
  • Customer data: for the duration of the customer relationship + 2 years after it ends.
  • Accounting records: 6 years per the Finnish Accounting Act.

5. Sharing of data

We do not sell or share your personal data with third parties for marketing purposes. We use the following processors:

  • Cloudflare, Inc. (site hosting and DDoS protection)
  • Brevo (email delivery from the contact form, EU-based servers)

Some services may be located outside the EU; in such cases we rely on the European Commission's Standard Contractual Clauses (SCCs) as the legal basis for the transfer.

6. Your rights

You have the following rights:

  • To access what data we hold about you.
  • To request correction of inaccurate data.
  • To request deletion of your data ("right to be forgotten").
  • To restrict or object to processing of your data.
  • To transfer your data to another service provider.
  • To file a complaint with the Office of the Data Protection Ombudsman ( tietosuoja.fi ).

Requests to exercise your rights should be sent to info@wemusiikkikoulu.fi .

7. Cookies and analytics

The site uses Cloudflare Web Analytics, which does not set cookies or collect personal data. The server briefly stores IP addresses only to prevent spam and security threats.

8. Security

The site uses HTTPS for all connections. Personal data is processed confidentially and only for its stated purpose.

9. Changes

We reserve the right to amend this privacy policy. The latest version is always available on this page with the update date shown above.