Summary: Industry AI Hub is operated from Finland and subject to EU GDPR. We collect minimal data, we never sell it, and you have full rights over it. This policy explains exactly what we collect and why.
1. Data Controller
The data controller responsible for your personal data is:
Industry AI Hub
Website: industryaihub.com
Email: [email protected]
Country of operation: Finland, European Union
As a data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with the General Data Protection Regulation (GDPR) and applicable Finnish data protection law.
2. What Data We Collect
We collect only the minimum data necessary to operate this website. Below is a complete list of data we collect and how it is collected.
2.1 Data You Provide Directly
- Newsletter subscription: If you subscribe to our newsletter, we collect your email address. This is the only data we request.
- Contact enquiries: If you contact us via email, we receive your email address and the content of your message.
2.2 Data Collected Automatically
When you visit our website, the following data may be collected automatically, subject to your cookie consent choices:
- IP address — collected and anonymised by Google Analytics (where consent is given)
- Browser type and version — collected by Google Analytics (where consent is given)
- Pages visited and time spent — collected by Google Analytics (where consent is given)
- Referring website — the website you visited before arriving at ours
- Device type — desktop, mobile, or tablet
- Country/region — approximate location based on anonymised IP
We do not collect any special categories of personal data (such as health data, political opinions, religious beliefs, or biometric data) and we do not knowingly collect data from children under the age of 16.
3. Legal Basis for Processing
Under GDPR Article 6, we process your data on the following legal bases:
- Consent (Art. 6(1)(a)): Analytics cookies and marketing tracking are only activated after you explicitly consent via our cookie banner. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f)): We process server logs and basic technical data to maintain website security and functionality. Our legitimate interest is operating a secure, functional website.
- Contract performance (Art. 6(1)(b)): If you subscribe to our newsletter, we process your email address to fulfil that subscription.
4. How We Use Your Data
We use the data we collect for the following purposes only:
- To understand how visitors use our website so we can improve content and navigation (analytics)
- To send our newsletter to subscribers who have opted in
- To respond to enquiries sent to us by email
- To maintain the technical security and performance of our website
We do not use your data for automated decision-making or profiling. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
5. Third-Party Services
We use a small number of third-party services that may process data on our behalf. All are GDPR-compliant processors:
5.1 Google Analytics
We use Google Analytics to understand website traffic. Google Analytics uses cookies to collect anonymised data about your visit. This service is only activated after you provide consent via our cookie banner. We have configured Google Analytics to anonymise IP addresses and respect user consent. Google's privacy policy is available at policies.google.com/privacy.
5.2 Netlify (Hosting)
Our website is hosted on Netlify. Netlify may process basic server logs including IP addresses as part of standard hosting infrastructure. Netlify is GDPR-compliant. Their privacy policy is available at netlify.com/privacy.
5.3 Affiliate Partners
Our website contains affiliate links to third-party tools and services. When you click an affiliate link, you are redirected to the third-party's website. The affiliate partner may set cookies on your browser to track the referral. We do not control third-party cookies or data collection. Each affiliate partner has their own privacy policy which governs their data practices.
5.4 Newsletter Provider
If you subscribe to our newsletter, your email address is processed by our email service provider. We will update this section with the specific provider name when newsletter functionality is activated.
6. Cookies
We use cookies in accordance with the EU ePrivacy Directive and GDPR. For full details of the cookies we use, please see our Cookie Policy. You can manage your cookie preferences at any time through our cookie consent banner or by adjusting your browser settings.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Newsletter email addresses: Retained until you unsubscribe
- Google Analytics data: Retained for 14 months (our configured retention period), then automatically deleted
- Email enquiries: Retained for 12 months, then deleted unless there is an ongoing relationship
- Server logs: Retained for up to 30 days by Netlify for security purposes
8. Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
- Right of access (Art. 15): You can request a copy of all personal data we hold about you.
- Right to rectification (Art. 16): You can ask us to correct inaccurate data we hold about you.
- Right to erasure (Art. 17): You can ask us to delete your personal data ("right to be forgotten").
- Right to restriction (Art. 18): You can ask us to restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20): You can request your data in a structured, machine-readable format.
- Right to object (Art. 21): You can object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR.
9. Right to Lodge a Complaint
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Finnish data protection supervisory authority:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Website: tietosuoja.fi
Email: partnerships@industryaihub.com
Address: PO Box 800, FI-00521 Helsinki, Finland
10. International Data Transfers
Google Analytics may transfer data to the United States. Google LLC participates in the EU-U.S. Data Privacy Framework and processes data in accordance with Standard Contractual Clauses (SCCs) approved by the European Commission, providing appropriate safeguards for international transfers.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption (TLS) for all connections. Access to any personal data we hold is strictly limited to authorised personnel.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Industry AI Hub
Email: [email protected]
Website: industryaihub.com