Privacy Statement - Isaac Cachero

Privacy Statement – Isaac Cachero Consulting

PRIVACY & DATA PROTECTION

Introduction

This Privacy Statement explains how Isaac Cachero Consulting (“we”, “us” or “our”), based in Vaasa, 65100, Finland, collects, uses, stores and protects your personal data when you visit our website isaaccachero.com (the “Website”) or otherwise interact with us.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

This Privacy Statement should be read together with our Cookie Policy.

Data controller

The data controller responsible for the processing of your personal data is:

Isaac Cachero Consulting

Vaasa, 65100, Finland
Email: [email protected]

Personal data we collect

Data you provide to us directly

Name
Email address
Company / organisation name
Job title (if provided)
Phone number (if provided)
Message content or inquiry details
Any other information you voluntarily submit via contact forms, email, or Calendly

Data collected automatically

IP address
Browser type and version
Device information
Operating system
Referring website
Pages visited, time spent on pages, and other usage data
Approximate location (derived from IP address)

Data related to bookings

Information submitted when scheduling a meeting via Calendly (name, email, selected time, any additional notes).

We do not intentionally collect special categories of personal data (sensitive data) unless you voluntarily provide such information.

How we collect personal data

We collect personal data in the following ways:

When you fill in a contact form or send us an email
When you book a meeting via Calendly
Through cookies and similar technologies (see our Cookie Policy)
Automatically when you browse the Website (analytics tools)

Purposes and legal bases for processing

We process your personal data for the following purposes and on the following legal bases under the GDPR:

Purpose	Legal basis
Responding to your inquiries and providing information about our services	Legitimate interest (Art. 6(1)(f)) or pre-contractual steps (Art. 6(1)(b))
Scheduling and managing meetings via Calendly	Contractual necessity / pre-contractual steps (Art. 6(1)(b))
Improving our Website and services through analytics	Consent (Art. 6(1)(a))
Measuring the effectiveness of our marketing and advertising	Consent (Art. 6(1)(a))
Ensuring the security and proper functioning of the Website	Legitimate interest (Art. 6(1)(f))
Complying with legal obligations	Legal obligation (Art. 6(1)(c))

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

International data transfers

Some of our service providers (notably Google, LinkedIn and Calendly) are located in or may transfer data to countries outside the European Economic Area (EEA), including the United States.

Where such transfers occur, we ensure appropriate safeguards are in place, such as:

The European Commission’s Standard Contractual Clauses (SCCs)
Adequacy decisions (where applicable)
Other lawful transfer mechanisms under the GDPR

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Contact inquiries: typically up to 24 months after the last interaction, unless a longer period is required
Meeting-related data (Calendly): as long as needed to manage the relationship or as required by law
Analytics and marketing data: according to the retention periods set by the respective providers and your consent preferences
Data required for legal or accounting purposes: as required by Finnish law

After the retention period, data is securely deleted or anonymised.

Your rights under the GDPR

You have the following rights regarding your personal data:

Right of access – obtain confirmation and a copy of your data
Right to rectification – correct inaccurate or incomplete data
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing based on legitimate interests
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman:

Website: www.tietosuoja.fi

To exercise any of these rights, please contact us at [email protected]. We will respond within the time limits required by law.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. These measures include secure hosting, access controls, and regular review of our practices.

Cookies and similar technologies

Our Website uses cookies and similar technologies. For detailed information about the cookies we use, their purposes, and how you can manage your preferences, please see our Cookie Policy.

We use the Complianz consent management platform to obtain and manage your cookie preferences.

Children’s privacy

Our Website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

Changes to this Privacy Statement

We may update this Privacy Statement from time to time. The latest version will always be available on this page with the updated “Last updated” date. Significant changes will be communicated where appropriate.

Contact us

If you have any questions about this Privacy Statement or how we process your personal data, please contact us: