Privacy policy

Who we are

This site is operated by KOVA Consulting (“KOVA”, “we”, “us”), a GCC market, circular economy and project-development advisory with people in Finland and in Riyadh, Saudi Arabia.

Registered entity: KOVA PMC Oy, a company registered in Finland, business ID 2994439-8. KOVA Consulting is part of the KOVA group, together with Sirk Company Limited (Kingdom of Saudi Arabia) and KOVA Circular Consultant Project Development LLC (United Arab Emirates). The group's full privacy policy is published at kovagcc.com/privacy; this page covers what is specific to kovapmc.com.

You can reach us at saku@kovapmc.com.

For the purposes of the EU General Data Protection Regulation (GDPR) we are the controller of the personal data described below.

The short version

This website is a set of static pages. It sets no cookies, runs no analytics, embeds no trackers and makes no third-party requests. Fonts are served from our own domain. If you never contact us, this website learns nothing about you beyond the standard server logs our host keeps to deliver the page and defend against abuse. Business contact details we may hold about you for outreach come from elsewhere, and are covered under Business outreach below.

What we collect

When you browse

Our hosting provider records ordinary technical information needed to serve the site and protect it: IP address, request time, the page requested, user agent and referrer. We do not use it to build a profile of you and we do not combine it with anything else.

When you contact us

If you use the contact form or email us, we receive what you choose to send: typically your name, email address, company and your message. We use it to answer you and, if it leads somewhere, to carry on the conversation.

Who processes it for us

• Vercel Inc. hosts and serves this website, and keeps the request logs described above.
• Formspree, Inc. receives and forwards contact form submissions to our inbox.
• Microsoft Ireland Operations Limited (Microsoft 365) hosts the mailbox your message lands in.

Each acts as a processor on our instructions under a data processing agreement. Some of them operate outside the EEA; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

Why we are allowed to hold it

• Your enquiry: our legitimate interest in answering people who contact us, and in taking steps at your request before entering a contract.
• Server logs: our legitimate interest in operating a secure, working website.
• Business outreach: our legitimate interest in promoting our services to other businesses, as set out in the section below.

How long we keep it

Enquiries are kept for as long as the conversation is live and generally for no longer than three years afterwards, so we can pick up a thread that resumes. Server logs are kept for the short period our host retains them. Anything we no longer need is deleted.

Business outreach

We also contact professionals by email about business opportunities relevant to their role, such as project development, partnerships and consulting. For that we use business contact details, typically a name, job title, employer and work email address, obtained from third-party business-data providers and public sources. Our emails say so, and every one of them carries an Unsubscribe link.

You can object at any time by using that link, by replying “stop”, or by emailing us. We stop promptly and keep only your email address on a suppression list so that we do not contact you again.

The full terms, including what we hold, where it comes from, who we share it with, how long we keep it and your rights in each country, are in section 4 of the KOVA group privacy policy. That section applies to outreach sent from kovapmc.com in full.

What we never do

We do not sell personal data, we do not share it for advertising, and we do not use it for automated decision-making or profiling.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to someone else in a portable format. Write to saku@kovapmc.com and we will respond within one month.

If you think we have handled your data badly, you can complain to your national supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Cookies

There are none. The cookie policy explains what that means and what we would do if it ever changed.

Changes

If this policy changes we will update the date at the top of the page. Material changes will be flagged on the site.