Last updated: 1 August 2025
This Privacy Policy explains how Albimarketing Oy and Simonova Consulting (collectively “we”, “us”, “our”) collect, use, store and protect your personal data when you visit workshop.top‑point.org (the “Site”).
We comply with the EU General Data Protection Regulation (GDPR) and follow the privacy notice guidance, which requires transparency about the purpose of processing, lawful bases, retention periods, recipients and your rights[1].
By using this Site you agree to the terms of this Policy.
1. Who we are (Data Controllers)
| Controller | Contact details | Business ID |
| Albimarketing Oy | Address: Turkismiehentie 4 B 10, 00370 Helsinki, Finland Phone: +358 40 368 1631 E‑mail: natalia.illarionova@albimarketing.com | 3341342‑6 |
| Simonova Consulting | Address: Moukarikatu 14, 55800 Imatra, Finland Phone: +358 41 319 6619 E‑mail: top.point.community@gmail.com | 3214383‑1 |
Albimarketing Oy and Simonova Consulting jointly determine the purposes and means of processing personal data on the Site and act as joint controllers.
2. What data we collect
2.1 Data you provide directly
We collect personal data that you voluntarily provide when you complete forms or contact us:
- First and last name – used to identify you and address you properly.
- Email address – used to communicate with you and send requested information.
- Phone number – optional, used to arrange calls.
- Company name and role – used to understand your organisation’s needs.
- Any other information you provide in messages or comments.
2.2 Data collected automatically
- IP address, device and browser information – collected by analytics tools to produce aggregate statistics and for security purposes.
- Cookies and similar technologies – small files that are placed in your browser when you visit the Site. Cookies help remember information about your visit and can be returned to our servers or those of third parties on subsequent visits[2]. See the Cookie Policy for details.
We do not collect sensitive personal data (such as health data) and do not perform automated decision‑making or profiling.
3. How we collect your data
You provide most of the data we process. We collect data when you:
- Complete the “Request workshop details” or “Book a discovery call” forms hosted by Typeform.
- Contact us by email or telephone.
- Browse the Site, where cookies and scripts are used to ensure functionality and gather statistics[3].
The Site contains links to external websites (e.g. Typeform, albimarketing.com, top‑point.org). This Privacy Policy applies only to our Site; when you follow external links, please read their own policies[4].
4. Why we use your data and our legal bases
GDPR requires us to explain the purposes for which we process personal data and the lawful bases we rely on[1].
The table below summarises our purposes and legal bases.
| Purpose | Examples of processing | Legal basis |
| Respond to your enquiries and provide workshop information | Use your name, email and telephone to send workshop details, answer questions and schedule calls. | Consent: you provide data voluntarily through the form. |
| Contractual purposes | Should you decide to book a workshop, we use your data to prepare a quotation, sign contracts and deliver our services. | Performance of a contract (Art. 6(1)(b) GDPR). |
| Marketing | With your explicit consent, we may send updates about upcoming workshops and related services. | Consent, which you can withdraw at any time. |
| Analytics and Site improvement | We analyse aggregated usage statistics collected by analytics cookies to understand how visitors use the Site and improve its usability[3]. | Legitimate interest (Art. 6(1)(f) GDPR) in improving and securing our Site. |
| Compliance and protection of rights | Maintain records of consent; prevent fraud or abuse of our services. | Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest. |
We do not sell or rent your data. Your data is shared only with personnel of Albimarketing Oy and Simonova Consulting involved in organising the workshops and with service providers processing data on our behalf.
5. Sharing data with third parties
We may share your personal data with the following categories of recipients:
- Typeform S.L. (Spain) – hosts the forms on our Site. When you submit a form, your data is transferred to Typeform. Their privacy policy applies to such processing.
- Yandex Metrica – provides website analytics. It places cookies to store a unique user ID and other identifiers[5]. Data may be stored on servers in the EU. Statistics cookies are set only with your consent.
- Google Analytics – another analytics service we use to collect information about how visitors use our Site. Google uses a set of cookies to report site usage statistics without personally identifying individual visitors[6]. The primary cookie _ga distinguishes one visitor from another and lasts for 2 years[7]. Google processes this data on our behalf; we have configured Google Analytics to anonymise IP addresses where possible.
- Other service providers – such as email service providers and IT maintenance suppliers – solely to the extent necessary to operate the Site and provide the services.
Where these providers transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. adequacy decisions, standard contractual clauses).
6. Data retention
We retain personal data only as long as necessary for the purposes described:
- Form submissions – retained for up to 24 months from the last contact unless a contract is signed, in which case data is kept for the duration of the contract and applicable limitation periods.
- Marketing – retained until you withdraw your consent.
- Cookie data – see the Cookie Policy for specific retention periods. For example, Google’s _ga cookie lasts for 2 years[7].
- Accounting and legal records – retained as required by law.
After expiry of the retention periods, data is securely deleted or anonymised.
7. How we protect your data
We take appropriate technical and organisational measures to secure your data, including:
- Encrypting data in transit via HTTPS;
- Limiting access to personal data to authorised personnel and training staff on data protection;
- Regularly updating software and monitoring security threats;
- Implementing data‑processing agreements with our processors (Typeform, Yandex Metrica, Google Analytics);
- Keeping records of processing activities and responding promptly to incidents.
While we strive to protect your data, no method of transmission over the internet is completely secure. In the event of a data breach, we will notify the competent supervisory authority and affected individuals where required by law.
8. Your rights
Under GDPR you have the following rights[1]:
- Right of access – request a copy of the personal data we hold about you.
- Right to rectification – ask us to correct inaccurate or incomplete data.
- Right to erasure – request deletion of your data under certain conditions.
- Right to restrict processing – ask us to suspend the processing of your data.
- Right to object – object to processing based on our legitimate interests or for direct marketing.
- Right to data portability – obtain your data in a structured, machine‑readable format and have it transferred to another controller.
- Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint – with your local data protection authority. In Finland this is the Data Protection Ombudsman (tietosuoja.fi). You also have the right to pursue judicial remedy.
To exercise your rights, please contact us using the details in Section 1. We will respond within one month.
9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a new “last updated” date. Significant changes will be communicated by a notice on the Site.
10. Contact us
If you have any questions about this Privacy Policy or the processing of your personal data, please contact:
- Albimarketing Oy – natalia.illarionova@albimarketing.com
- Simonova Consulting – top.point.community@gmail.com
Mailing addresses and phone numbers can be found in Section 1.
[1] [4] Writing a GDPR-compliant privacy notice – GDPR.eu
[2] [3] [5] Cookie Policy (EU) – Motivational programs: development and ready-made solutions