Privacy notice

Draft for review. This notice was adapted from the controller's existing policy and has not yet been reviewed by the controller or a lawyer. Marked passages need a decision. It is not legal advice, and the site is not public until it has been settled.

This is the register and privacy notice of Interwebbi Solutions for the InterDirector website, in accordance with the EU General Data Protection Regulation (GDPR). Written on 20 September 2026. It covers this website only.

1. Data controller

Interwebbi Solutions
Liinakonkatu 12 B 9, 33580 Tampere, Finland
Business ID: 3133828-2 / VAT ID FI31338282
Email: info@interdirector.com

2. Contact person responsible for the register

Riku Turunen, info@interdirector.com

3. Name of the register

InterDirector waitlist.

4. Legal basis and purpose of processing

The legal basis is your consent (GDPR Article 6(1)(a)), which you give by ticking the box in the waitlist form. You can withdraw it at any time by writing to info@interdirector.com; withdrawing does not affect anything done before you did.

The purposes are to confirm that the email address is yours, and to write to you about InterDirector, including when it is released. Your data is not used for automated decision-making or profiling.

The spam protection on the form (section 13) rests on our legitimate interest in keeping the form from being abused (Article 6(1)(f)). The visit statistics (section 14) rest on our legitimate interest in knowing how the website is used and keeping it fast. You can object to either by writing to the address above.

5. What is stored

When you submit the waitlist form we store:

• your name and email address;
• the time you submitted the form, and which version of the consent wording you saw;
• a one-way hash of the confirmation token in the email we send you, and the time you used it.

We send you one email with a confirmation link. You are on the list only after you open the link and press the button. An entry that has not been confirmed is deleted when its link expires, 72 hours after you submit the form, at the next time anyone submits or confirms an entry, and by us when we tidy the register.

We do not store your IP address or details of your browser or device in the register.

6. Where the information comes from

From you, through the waitlist form. We do not collect contact details from other sources for this register.

7. Disclosure and transfers outside the EU or EEA

We do not sell or give your details to anyone else. They are handled on our behalf by:

• Cloudflare, Inc., which hosts this website, stores the register in a database that we created in Cloudflare’s EU jurisdiction, provides the spam protection, and provides anonymous visit statistics (sections 13 and 14). Cloudflare handles a request at its network location near the visitor, so a request can pass through servers outside the EU and EEA on its way to the database. Where Cloudflare transfers personal data from the EU to the United States it relies on its certification under the EU–US Data Privacy Framework and, if that were ever invalidated, on the EU standard contractual clauses in its data processing agreement, which forms part of the terms we have accepted.
• Our mail server, which sends you the confirmation email, is operated by us (Interwebbi Solutions) on a server hosted by Hetzner Online GmbH in Finland.

8. How long we keep it

We keep your details until you withdraw your consent or ask us to delete them, and in any case no longer than 12 months after you confirmed your place. After that we delete them, unless you have given a new consent. Entries that are never confirmed are deleted as described in section 5.

9. How the register is protected

The register is stored in a database at Cloudflare that only the data controller can open, and connections to this website are encrypted. Secrets such as the database and mail credentials are held as Cloudflare secrets and are never in the website’s code. The register is handled confidentially and only by the data controller.

10. Your right of access and to have data corrected

You have the right to see the personal data we hold about you and to ask us to correct anything that is wrong or incomplete. Send the request in writing to the data controller. We may ask you to prove your identity. We will answer within the time the regulation sets, in general within one month.

11. Your other rights

You have the right to ask us to delete your data (the “right to be forgotten”), to restrict how we process it in certain situations, and to withdraw your consent at any time. Send the request in writing to the data controller, who may ask you to prove your identity and will answer within one month.

You also have the right to complain to the supervisory authority, the Data Protection Ombudsman (tietosuoja.fi).

12. Cookies

This website does not set cookies of its own, and it uses no advertising or marketing cookies and no trackers of third parties.

13. Spam protection (Cloudflare Turnstile)

When you open the waitlist form, the page loads Cloudflare Turnstile from Cloudflare’s servers to check that a person, and not a program, is submitting it. Nothing is loaded from Cloudflare for this purpose before you open the form. Turnstile looks at technical signals such as your IP address, your browser’s TLS fingerprint and user-agent details, together with the identity of this website, and it uses them only to detect and block bots. For that purpose Cloudflare acts on our behalf, as our processor. Cloudflare also uses those signals as an independent controller to improve its bot detection, as it describes in its Turnstile privacy notice. In our own tests, running Turnstile left no cookies, local storage or other data stored by this website on the device.

14. Visit statistics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to see which pages are visited, roughly how many people visit, and where they came from. When a page loads, a small script from Cloudflare reports the page, the website that linked to it, the visitor’s country, the type of device, the browser and operating system, and how long the page took to load. We see the results as totals in a dashboard, and cannot tell who a visitor is. Cloudflare acts on our behalf as our processor (section 7).

Cloudflare states that this service does not use cookies, local storage or other client-side state to collect its metrics, that it does not fingerprint visitors, and that it never sells the data; see Cloudflare’s description of Web Analytics. It keeps the detailed records for seven days, after which it keeps only a reduced sample, and it shows us up to six months of history. Because nothing is stored on your device, we do not ask for consent for it. We do not use it for advertising.

15. Changes to this notice

We may update this notice when the law or what we do changes. Updates are published on this page.