Your privacy matters to us. This policy explains how JoHo Pyro handles information when you browse this website or contact us.
Who is responsible?
JoHo Pyro Professional Fireworks AB is the controller: Noras Gränd 8 B, 22120 Mariehamn, Åland, Finland. Business ID: 2934484-3. For all privacy requests, contact joho@aland.net.
When you contact us
The form collects your name, email address, type of event, message and language. The date and location are optional. Required fields allow us to understand and answer your enquiry; without them, the form cannot be submitted. Please avoid sending sensitive information or unnecessary details about other people.
For a quote or booking you request personally, processing is necessary to take steps before a contract (GDPR Article 6(1)(b)). For general enquiries and contacts on behalf of an organisation, we rely on our legitimate interest in answering messages and managing business relationships (Article 6(1)(f)). Sending a message does not subscribe you to a newsletter.
Your enquiry is emailed to JoHo Pyro and an acknowledgement is sent to your address through Resend. The form does not save your message in Sanity or a website contact database. Copies remain in the email delivery service and the relevant mailboxes.
Browsing, security and videos
Hosting and media delivery involve technical information such as IP addresses, requested URLs, browser details, timestamps and error or security events. We use this to deliver the website, diagnose failures and prevent abuse, based on our legitimate interest in operating a reliable, secure service (Article 6(1)(f)).
Cloudflare Turnstile checks browser and connection signals to block bots. Cloudflare also processes these signals under its own responsibility to improve detection. If verification fails, you can contact us by email.
Cloudflare Turnstile privacy notice
Cloudflare Stream loads when you start a video and receives connection and playback information. Images are delivered by Sanity. Visiting an external link is subject to that website’s own privacy practices.
Audience measurement and cookies
We use Plausible for audience statistics without tracking cookies or cross-site tracking. It measures page visits, referrals, device categories and approximate location. According to Plausible, IP addresses and browser headers are used transiently for a daily identifier, not stored raw, and visitor data is processed in the EU. Our purpose is to understand and improve the website (legitimate interest, Article 6(1)(f), where personal data is involved).
The functional session cookie NEXT_LOCALE remembers your language. You can remove it through your browser settings. It is not used for advertising. See our cookies page for details.
Cookies and our Finnish recipe
Who receives the information?
Information is accessible to the JoHo Pyro people handling your request and the providers needed to operate the service: Cloudflare (hosting, security, video and email routing), Resend / Plus Five Five, Inc. (email delivery), Sanity (content and images), and Plausible (analytics). Their roles depend on the service; some also process technical data for their own security purposes under their notices. Contact-form messages are not sent to Sanity or Plausible. We do not sell your contact details.
Transfers outside the EEA
Cloudflare, Resend and Sanity use international infrastructure; processing or access may take place outside the European Economic Area, including in the United States. Their data processing agreements provide for European Commission standard contractual clauses where a transfer is not covered by an applicable adequacy decision. Details and safeguards are available through the links below; you may also request a copy of the safeguards relevant to your data from us. A US headquarters address does not mean all data is stored there.
How long is information kept?
Enquiries are kept for the time needed to answer and follow up the request, taking into account whether the discussion is ongoing and whether a contract results. Once that purpose ends, only information needed for an applicable legal obligation or to establish, exercise or defend a claim is retained for the corresponding period. These criteria also apply to mailbox copies; deletion from an email delivery service does not delete those copies.
Technical logs are retained according to their operational and security purpose, the provider’s retention settings and any incident under investigation. Resend publishes a 30-day email and log retention period for its Free, Pro and Scale plans; other contractual arrangements may differ. The language cookie lasts for the browser session, subject to browser session-restoration settings.
People shown on the website
Names, credits and identifiable people may appear in our editorial content, photographs or videos to present our team and shows. Publication must have an appropriate basis, such as a legitimate interest balanced against the person’s rights, or consent where required. Contact us to ask about the source of an image concerning you, request a correction or object to its publication.
Your rights
Where the legal conditions apply, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Write to joho@aland.net and describe your request. We may ask for proportionate information to confirm your identity. We normally respond within one month; if a permitted extension is necessary, we explain it within that month. We do not make solely automated decisions producing legal or similarly significant effects about you; the form uses an automated anti-bot check.
Questions, complaints and updates
You may lodge a complaint with Finland’s Data Protection Ombudsman or the competent authority in the country where you live or work, or where an alleged infringement occurred. You do not have to contact us first. This policy may be updated when the website or its processing changes; the date above identifies the latest version.