Privacy Policy

Effective date: 15 September 2026

This policy explains how Watchpoint Systems Oy ("Watchpoint", "we", "us") processes personal data collected through this website, in particular through the contact form. It is written to meet the information duties in Articles 13–14 of the EU General Data Protection Regulation (GDPR).

1.Who we are

Watchpoint Systems Oy is the data controller for the personal data described in this policy.

2.What data we collect

We collect personal data only when you choose to contact us, primarily through the form on this site.

• Form submission data: name, email address, organization (if provided), area of interest, and the content of your message.
• Anti-spam / bot-detection data: when you complete the hCaptcha challenge on the form, hCaptcha processes limited technical data (e.g. IP address, interaction patterns) to verify you are human. See section 5.
• Basic technical data: standard web server logs (e.g. IP address, browser type, timestamps) generated by visiting the site, in line with normal web hosting operation.

We do not use analytics or advertising trackers on this site, and we do not ask for or knowingly collect data from children.

3.Why we process your data, and on what basis

• Responding to your inquiry (demo requests, investor briefings, procurement, partnership, or technical contact) — legal basis: our legitimate interest in operating the business and responding to inbound business inquiries (GDPR Art. 6(1)(f)), or taking steps toward a contract at your request (Art. 6(1)(b)) where applicable.
• Preventing spam and abuse of the contact form — legal basis: legitimate interest (Art. 6(1)(f)).
• Operating and securing the website (server logs) — legal basis: legitimate interest (Art. 6(1)(f)).

We do not use your data for automated decision-making or profiling, and we do not sell personal data.

4.Who we share it with

We use a small number of third-party service providers ("processors") to operate the contact form. They may process data on servers outside the EU/EEA; where that happens, transfers are covered by the providers' Standard Contractual Clauses (SCCs) or equivalent safeguards.

• Web3Forms (Web3Creative) — receives and forwards form submissions to us by email. Web3Forms states it does not store form submissions after delivery. See their privacy policy and data processing agreement.
• hCaptcha (Intuit Inc.) — provides bot detection on the contact form. See their privacy policy, which describes their use of EU Standard Contractual Clauses and Data Privacy Framework certification for transfers to the US.
• Google Fonts — this site loads typefaces from Google's font servers (fonts.googleapis.com / fonts.gstatic.com), which receive your IP address as a normal part of delivering the font files. See Google's privacy policy.

We do not otherwise share your data with third parties, except where required by law.

5.How long we keep it

We retain contact form submissions for up to 60 days from receipt, which is the window we use to respond to and follow up on your inquiry. After 60 days, we delete the submission unless a longer period is required by law.

If, as a result of your inquiry, we begin an ongoing business, investment, or partnership discussion with you, we retain the contact details needed to continue that discussion for as long as it is active, and delete them once it concludes unless a longer period is required by law.

6.Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to certain processing
• Receive your data in a portable format, where applicable

To exercise any of these rights, contact us at contact@watchpoint-systems.eu. You also have the right to lodge a complaint with the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi), the supervisory authority for Finland.

7.Cookies and similar technologies

This site does not set analytics or advertising cookies. The hCaptcha widget on the contact form may set cookies necessary for its bot-detection function, and font delivery via Google Fonts involves a request to Google's servers as described in section 4. We do not use any other tracking technology.

8.Security

We rely on our service providers' security measures (e.g. encrypted transmission via HTTPS) and limit access to inquiry data to the people who need it to respond to you.

9.Changes to this policy

We may update this policy as our website or service providers change. The effective date at the top reflects the most recent revision. Material changes will be reflected here.

10.Contact

Questions about this policy or how we handle your data: contact@watchpoint-systems.eu