Quanty
Get started
← Back to home

Privacy Policy

Last updated 21 September 2026 · Effective 21 September 2026

This Privacy Policy explains how Quanty Oy (“Quanty”, “we”, “us”) collects, uses, and protects personal data when you visit quantyepm.com or submit our contact form. Quanty is the controller of the personal data processed under this policy within the meaning of the EU General Data Protection Regulation (GDPR).

1. Controller

  • Legal name: Quanty Oy
  • Business ID (Y-tunnus): 3590155-4
  • Registered office: Porkkalankatu 7 a 2, Helsinki, Finland
  • Contact for data protection matters: markus.liljapelto@quantyepm.com

2. What data we collect

We collect personal data that you provide directly when submitting our contact form:

  • Your name
  • Work email address
  • Company name
  • Role / job title
  • Optional: the planning and consolidation tools you currently use
  • Optional: a free-text description of what you are hoping to solve
  • Submission metadata: IP address (used only for spam protection and rate limiting; not stored beyond the request lifecycle)

We do not place tracking cookies on your device. Our analytics provider, Cloudflare Web Analytics, collects aggregated, cookieless usage data (page views, referrer, country, device class) that does not identify individual visitors.

3. Why we use it (purpose and legal basis)

  • Reviewing your enquiry and contacting you about it — legal basis: legitimate interest (GDPR Art. 6(1)(f)) in responding to prospective customers. You always retain the right to object.
  • Operating the website (security, spam protection, performance) — legal basis: legitimate interest in providing a functional and secure service.

We do not use your data for marketing, profiling, or automated decision-making. We do not sell your data.

4. Retention

  • Customers: data is retained for the duration of the customer relationship and up to 24 months after it ends.
  • Enquiries that don't lead to a customer relationship: data is retained for up to 12 months from submission, then deleted.
  • Aggregated, anonymous analytics: retained per the Cloudflare Web Analytics retention policy.

5. Subprocessors

We use the following processors to operate the site and the contact form:

  • Amazon Web Services EMEA SARL — site hosting (Amazon S3 and CloudFront), the contact form (AWS Lambda) and delivery of contact-form notifications by email (Amazon SES), in the EU (Stockholm) region; CloudFront serves the site from edge locations worldwide. Also DNS (Route 53) for quantyepm.com. Transfers outside the European Economic Area are governed by the EU Standard Contractual Clauses.
  • Cloudflare, Inc. — cookieless website analytics (Cloudflare Web Analytics), and DNS for quantyepm.fi, which redirects visitors to quantyepm.com. Data may be processed on infrastructure located outside the European Economic Area; transfers are governed by the EU Standard Contractual Clauses.

6. International transfers

Some of our processors are located outside the European Economic Area. Where personal data is transferred to such jurisdictions, we rely on the European Commission’s Standard Contractual Clauses and require equivalent safeguards from each processor.

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected (rectification)
  • Have your data deleted (right to be forgotten), subject to legal obligations
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent where processing is based on consent (not applicable to the form, which is based on legitimate interest)
  • Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, email markus.liljapelto@quantyepm.com from the address you used to apply. We will respond within 30 days.

8. Security

The site is served exclusively over TLS. Form submissions are transmitted over HTTPS to AWS, where a function in the EU (Stockholm) region sends them to the founding team by email through Amazon SES. We do not retain submissions in any database; the message reaches the founding team’s inbox and is processed there.

9. Cookies

This site does not set cookies for analytics, advertising, or tracking. The only cookies that may be set are strictly necessary cookies used by Cloudflare for security and bot protection at the network edge; these do not require consent under EU ePrivacy law.

10. Changes to this policy

We may update this policy as Quanty evolves. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated through the site.

11. Contact

Questions about this policy or about how we handle your data: markus.liljapelto@quantyepm.com.