Privacy and AI transparency

The data controller is AI Leadit. For privacy questions or to exercise your data-protection rights, contact info@aileadit.fi.

Processing typically relies on our legitimate interest in responding to a business inquiry initiated by the person. Where the inquiry leads to contract discussions or a contractual relationship, the legal basis may also be steps taken prior to entering into a contract or performance of a contract.

Processing is generally based on our legitimate interest in handling a business-related assessment request initiated by the user. Depending on the situation, processing may also relate to pre-contractual measures.

AILEADIT designs and implements digital solutions and AI agents that use artificial intelligence. Under the EU AI Act, obligations depend on factors such as the system's intended purpose, characteristics and the role in which an organisation provides or deploys it.

Depending on the case, AILEADIT may act as a provider, deployer or technical implementation partner. Each use case is assessed according to its actual intended purpose.

Where an AI system is intended to interact directly with people, users are informed in applicable situations that they are interacting with an AI system unless this is otherwise obvious from the context.

Requirements under the EU AI Act depend on the intended purpose of the AI system and the associated risks. AILEADIT does not treat an individual technology or language model as automatically belonging to a particular risk category; the assessment is made on the basis of the actual use case.

We do not design our services for uses prohibited by the EU AI Act. If a planned customer solution may fall within rules for high-risk AI systems or another specifically regulated use case, it must be assessed separately before implementation or deployment.

Use cases involving employment, creditworthiness, certain insurance decisions, biometrics or other matters that can materially affect people's rights should not be treated as equivalent to ordinary customer-service or process automation.

The AILEADIT website uses some visual material generated or modified with the assistance of AI. Such content is used as visual, illustrative or creative material.

AI-generated imagery should not be understood as documentary evidence of a real person, event or situation unless expressly stated otherwise in context.

Where applicable law requires disclosure of the artificial or manipulated origin of content, we aim to provide that disclosure clearly and appropriately, especially where image, audio or video content could otherwise be mistaken for an authentic person, event or recording.

We use modern software-development, automation and AI tools. AI may assist with ideation, text drafts, visual concepts, code drafting and review, interface design, testing and documentation.

AI-assisted development does not remove AILEADIT's responsibility for the services or content we publish. Content and software may be reviewed, edited and approved by people before deployment.

Using AI tools in software development does not by itself mean that the website is an AI system interacting with the user.

Our web services use modern web technologies, server-side functions, database services, APIs and cloud infrastructure. From a data-protection perspective, the relevant question is not the name of each framework or development tool but whether a service processes personal data on AILEADIT's behalf.

We may use external providers for cloud and server infrastructure, databases, email and collaboration, security, technical maintenance and AI or model services.

Where a service provider processes personal data on our behalf, we aim to ensure appropriate contractual terms, access controls and data-protection measures. The provider landscape may change as the service evolves.

Some technology providers we use may be international companies. If personal data is processed outside the European Union or European Economic Area, we ensure that the transfer has an appropriate legal basis and safeguards as required by applicable data-protection law.

Depending on the situation, safeguards may include an adequacy decision by the European Commission or EU Standard Contractual Clauses together with supplementary measures where required.

We protect personal data with appropriate technical and organisational measures. These may include access controls, authentication, secure data transmission, data minimisation, environment separation, logging, technical monitoring, backups and provider-access management.

No online service can promise perfect security, but we aim to scale safeguards to the nature of the data and the risks involved.

The website may use cookies and similar technical solutions. Technologies that are strictly necessary for the service may be used without separate consent where applicable law permits.

Analytics, marketing or other non-essential technologies that require consent are enabled only on an appropriate consent basis. Users must be able to reject non-essential technologies and withdraw consent previously given.

As a rule, we do not make decisions based solely on automated processing of website-form data that produce legal effects or similarly significant effects within the meaning of Article 22 GDPR.

Using AI to structure information, draft material or support internal preparation does not by itself constitute such automated decision-making. If our use cases change, the impacts are assessed separately.

If you believe your personal data has been processed contrary to data-protection law, you have the right to lodge a complaint with the competent supervisory authority. In Finland, personal-data processing is supervised by the Office of the Data Protection Ombudsman.

Supervision of the EU AI Act in Finland is divided among several competent authorities. The Finnish Transport and Communications Agency Traficom acts as the national single point of contact and coordinates implementation of the Act in Finland.

We continuously develop our services, technology and AI solutions. Personal-data processing, service providers or information in this notice may therefore change.

We update this page when necessary. The date of the current version is shown at the top of the page.