Legal

Privacy Notice

Last updated: May 2025

Who we are

Stave Advisory is operated by Maxime Lebrun, Helsinki, Finland. We are the data controller for personal data processed through this website. For any questions or requests relating to your personal data, contact us at maxime.lebrun@stave-advisory.fi.

What we collect and why

Server logs. When you visit this website, our hosting provider Netlify automatically records your IP address, browser type, the pages you visit, and the date and time of your visit. This data is processed for the technical operation and security of the website. The legal basis is our legitimate interest in maintaining a functional and secure service. Netlify retains server logs for 30 days. Netlify, Inc. is a US-based company that processes data under standard contractual clauses in compliance with GDPR. You can review Netlify's data practices at netlify.com/privacy.

Web fonts. This website loads typefaces from Google Fonts. When the page loads, your browser sends a request to Google's servers that includes your IP address. This is technically necessary for the website to display correctly. The legal basis is our legitimate interest in providing a functional website. Google's privacy policy is available at policies.google.com/privacy.

Email contact. If you contact us by email, we process your name, email address, and the content of your message in order to respond to your enquiry. The legal basis is our legitimate interest in responding to business communications, and where applicable, the performance of pre-contractual measures at your request. We retain business correspondence for as long as it is relevant to our working relationship and no longer than five years from last contact.

Cookies

This website does not use cookies. No tracking scripts, analytics tools, or advertising technologies are installed on this site. Your visit leaves no persistent record on your device.

Data transfers outside the EU and EEA

Netlify and Google are US-based companies. Data transfers to them are governed by standard contractual clauses approved by the European Commission and, where applicable, the EU-US Data Privacy Framework. These mechanisms are designed to ensure that your data receives a level of protection equivalent to that within the European Economic Area.

Your rights

Under the GDPR you have the right to access personal data we hold about you, to have inaccurate data corrected, to request erasure where we have no legitimate reason to continue processing it, to restrict or object to processing, and to data portability where applicable.

To exercise any of these rights, contact us at maxime.lebrun@stave-advisory.fi. We will respond within 30 days.

You also have the right to lodge a complaint with the Finnish supervisory authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutettu), tietosuoja.fi.

Changes to this notice

We may update this notice from time to time to reflect changes in our data practices or legal obligations. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically.