Skip to content
bysusanna.– home
by susanna. / Contents
Instagram @made.bysusanna

Privacy policy

Updated 9 November 2026

Controller

Susanna Kyllönen

Questions about privacy: hello@bysusanna.com

What data is collected

When you open the site, the hosting service Cloudflare processes technical data such as your IP address, browser details and the address of the page you open. This is needed to deliver the page and protect the service from misuse.

Visitor numbers are counted with Cloudflare Web Analytics (see Visitor statistics).

When you join the AI course waitlist, your email address is stored together with a record of your consent and its confirmation. You confirm your signup with a link sent to your email.

For business sales, contact details of people at prospective client companies are stored (see Business sales contacts).

The site has no user accounts or logins for visitors. If you send an email through the links on the site, your message is only used to reply to you.

Your email address is only used to communicate about the upcoming AI course. It is used for anything else only if you separately consent to it. The legal basis is your consent (Article 6(1)(a) of the EU General Data Protection Regulation). You can withdraw your consent at any time with the unsubscribe link in every email or by contacting the controller.

The data is kept until you unsubscribe or the waitlist is closed.

Business sales contacts

by susanna. sells services to companies together with sales partners. For this, information is stored about companies that have been or will be contacted: the company name, the contact person’s name, role and work contact details (phone number or email address), the status of the conversation, agreed meetings and notes from discussions. The information comes from the person themselves or from public sources, such as the company’s website and LinkedIn.

The data is used to stay in touch with the company and offer it services. The legal basis is the controller’s legitimate interest (Article 6(1)(f) of the General Data Protection Regulation): selling services to companies and keeping track of the conversations. You can object to the processing at any time, in which case your data is deleted and you are not contacted again.

The data is processed by the controller and by the by susanna. sales partners, who see and update a shared list. Partners act on behalf of the controller and follow its instructions. Access to the data is protected with personal credentials, and a record is kept of who entered the data and when. Only the controller can delete data.

The data is kept for as long as the conversation with the company is ongoing or the client relationship continues. It is deleted when it is no longer needed or when you ask for it to be deleted.

Processors

The site is hosted on Cloudflare (Cloudflare, Inc.), which processes the technical data above on behalf of the controller and forwards waitlist signups to MailerLite. Business sales contacts are stored in Cloudflare’s database service (D1). Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

Waitlist data is stored in MailerLite (MailerLite Limited, Ireland), which processes it on behalf of the controller and sends the waitlist emails. The processing is governed by MailerLite’s data processing terms. MailerLite’s privacy policy: mailerlite.com/legal/privacy-policy.

Transfers outside the EU and EEA

Cloudflare, Inc. is a US company, so technical data may also be processed outside the EU and EEA. Cloudflare’s privacy policy describes the safeguards for these transfers.

Business sales contacts are stored in a database located in the EU.

MailerLite stores waitlist data in the EU. If data is transferred outside the EU and EEA, MailerLite uses the European Commission’s Standard Contractual Clauses.

Visitor statistics

The site uses Cloudflare Web Analytics to see how much the pages are visited. The service doesn’t use cookies or store anything in your browser, and it doesn’t track individual visitors. Statistics are only shown as totals, such as page views, referring sites and countries.

Cookies

The site doesn’t use cookies. Fonts are loaded from the site’s own server, and there are no advertising or tracking cookies.

Your rights

You have the right to:

  • know what data about you is processed and get a copy of it
  • ask for incorrect data to be corrected
  • ask for your data to be deleted
  • withdraw your consent at any time
  • object to processing that is based on legitimate interest
  • ask for processing to be restricted
  • have your data transferred to another service

You can send requests to the controller’s contact details.

Right to complain

If you think the processing of your personal data breaks data protection law, you can complain to the supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).