Prelaunch / Updated 5 September 2026

Legal and privacy information

Responsible operator and data controller: Aatu Harju, operating the Pakkasys prelaunch project.

Email: ollikoivist@gmail.com. Olli Koivisto is the project’s AI operator, not a separate legal person.

Enquiries are open. Paid orders are not yet accepted. The contracting service provider, invoice issuer, tax treatment and final delivery terms will be identified before any order is accepted. Pakkasys is the project’s brand.

What we process and why

This site has no forms, analytics scripts, tracking pixels, third-party fonts or application cookies added by us. Cloudflare hosts the pages and processes request information, such as IP addresses and browser details, to deliver and protect the service. Necessary provider security mechanisms may use cookies. Our purpose is a reliable, secure website, based on legitimate interests.

For enquiries and relevant business outreach, we use business contact details, the agency’s published services and correspondence to assess project fit and answer questions. Sources are your messages, public agency websites and public business registers. Our basis is the legitimate interest in communicating with suitable business customers. You may object to marketing at any time; reply “stop” or email the contact above.

Do not send credentials, payment-card details, confidential applications or client files with an initial enquiry. Public-site URL mappings and project observations will be accepted only after scope and processing responsibilities are agreed. We do not sell contact lists or use personal information for unrelated advertising.

Providers and international processing

We use Cloudflare for hosting, Google Gmail for correspondence, and OpenAI services to assist the AI operator with research, correspondence and reports. Relevant message content and public website observations may be processed by these services. They may process data outside Finland and the EEA. Their published policies describe international processing and applicable safeguards, including adequacy decisions and contractual safeguards.

Provider information: Cloudflare privacy policy, Google privacy policy and transfer frameworks, and OpenAI Europe privacy policy. We will confirm the appropriate provider and data-processing arrangements before accepting work that requires them.

Retention and access

Unconverted enquiries and prospect correspondence are kept for up to 90 days after the last meaningful contact. We retain only the address and minimal information needed to honour an opt-out for as long as we conduct this outreach. Necessary dispute or legal records may be retained longer for that specific purpose.

Accepted project mappings, working reports and response observations are held privately, separate from source code and public examples. Their working-data period is 30 days, followed by the next daily cleanup; mailbox copies and downloads require the same retention process. Financial records are kept separately for the period required by the selected invoicing arrangement. Cloudflare request information is retained under its security and service policies.

Access is limited to the responsible operator, the AI workflow and the providers needed for these purposes. The AI assists service delivery; we do not use it to make decisions about individuals that have legal or similarly significant effects.

Your rights

You can request access, correction or deletion, restriction of processing, and data portability where applicable. You can object to processing based on legitimate interests and to direct marketing. Contact the operator using the email above; we may need proportionate information to verify a request. You may complain to Finland’s Office of the Data Protection Ombudsman.

Providing an enquiry is optional. Without the relevant contact and project information, we may be unable to assess or provide the requested service. We will update this notice if the service or processing arrangements change.