Controller and contact details
The controller responsible for the processing described in this notice is:
Boxinom Oy / LtdAntinkatu 3 D
00100 Helsinki, Finland
VAT ID: FI33432205
info@boxinom.com
What this notice covers
This notice applies when you visit boxinom.com, contact Boxinom, or use the Boxteri AI concierge. Processing carried out for a client project may be governed by a separate agreement or project-specific notice.
Personal data we process
Information you provide
Your name, email address, message, project information, and any other details you choose to share with us.
Concierge interactions
Your question, relevant recent chat context, the generated answer, language, response type, model, latency, and identifiers for retrieved knowledge-base material.
Technical information
IP address and ordinary request, device, browser, security, and server-log information that may be processed when the site is delivered and protected.
Preference information
Your selected website language, analytics-consent choice, and other necessary settings stored by the site or browser.
Analytics information
After you consent, Google Analytics may process page URLs and titles, referrers, interactions, device and browser information, and approximate location information.
Please do not enter confidential, sensitive, or special-category personal data into Boxteri.
Purposes and legal bases
Processing is necessary to take steps at your request before entering into a contract, or to perform a contract (GDPR Article 6(1)(b)).
We rely on our legitimate interests in providing a reliable website, preventing misuse, diagnosing faults, and maintaining information security (Article 6(1)(f)).
We rely on our legitimate interests in answering service-related questions, reviewing answer quality, and understanding how the approved knowledge base is used (Article 6(1)(f)).
We process information where necessary to comply with accounting, tax, regulatory, or other legal obligations (Article 6(1)(c)).
Google Analytics is used only after you consent. You may change or withdraw that choice at any time through Analytics settings (Article 6(1)(a)).
AI concierge
Boxteri answers questions about Boxinom from an approved knowledge base. Most service-related questions are processed by Boxinom's server and may be sent, together with limited recent chat context and relevant knowledge-base excerpts, to OpenAI to generate an answer. Some simple queries are answered directly without calling an AI model.
Boxteri does not make legal or similarly significant automated decisions about you. Conversation history is held in the browser while the widget is open; the server separately records the interaction information described above for operational review.
Recipients and international transfers
Personal data may be processed by service providers that help us operate the website and our business, including:
- hosting, infrastructure, security, and email providers;
- Google Analytics after you consent to website analytics;
- OpenAI when an AI-generated concierge answer is required;
- Calendly when you choose to open its external scheduling service;
- professional advisers or public authorities where disclosure is necessary or legally required.
Some providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard.
Retention
- Boxteri interaction logs: normally retained for 90 days and then deleted.
- Google Analytics data: retained according to the retention setting in Boxinom's Analytics property and Google's applicable retention controls.
- Enquiries and project communications: retained for as long as needed to respond, manage the relationship, and establish or defend legal claims.
- Contract, invoicing, and accounting records: retained for the periods required by applicable law.
- Technical and security logs: retained according to operational necessity and the relevant provider's retention schedule.
Data may be deleted earlier when it is no longer needed, or retained longer where a legal obligation requires it.
Your rights
Subject to the conditions in applicable data-protection law, you may have the right to:
- access and obtain a copy of your personal data;
- correct inaccurate or incomplete data;
- request erasure or restriction of processing;
- object to processing based on legitimate interests;
- receive data you provided in a portable format where applicable;
- withdraw consent without affecting earlier lawful processing;
- lodge a complaint with the Finnish Data Protection Ombudsman or another competent supervisory authority.
Send requests to info@boxinom.com. We may need to verify your identity before completing a request. You can find supervisory-authority guidance at tietosuoja.fi.
Security
We use technical and organisational safeguards appropriate to the nature and risk of the processing. No internet transmission or storage system is completely secure, so please avoid sending unnecessary confidential or sensitive information through the public website or Boxteri.
Changes to this notice
We update this notice when our services, providers, or legal obligations change. The date at the top identifies the latest revision. For questions about this notice, email info@boxinom.com.