1. Data controller
The data controller for personal data collected through this website is:
Gabriele Gargani
trading as
OddWorks
Commercial brand:
MadHat Works
Y-tunnus: 3624971-3
Helsinki, Finland
Email:
info@madhatworks.com
For any questions regarding personal data protection, you can contact us at the email address above.
2. Data collected and purpose
We collect personal data only when you voluntarily provide it by filling in the contact form on this website. The data collected may include:
- Name and surname — to identify you and reply to your request
- Email address — to communicate with you
- Business name (optional) — to better understand your request
- Plan of interest (optional) — to tailor our response
- Message (optional) — to understand your needs
We do not collect data through profiling cookies, tracking pixels, or behavioural analytics tools.
3. Legal basis for processing
The processing of your personal data is based on:
- Pre-contractual measures (Art. 6(1)(b) GDPR) — when your request concerns evaluating or starting a contractual relationship with MadHat Works.
- Legitimate interest (Art. 6(1)(f) GDPR) — for responding to general information requests.
4. Processors (sub-processors)
For website operations and contact form management, we rely on third-party providers that process data on our behalf:
Formspree, Inc.
The contact form is managed through Formspree. Data entered in the form is transmitted to and stored on Formspree servers in the United States, subject to the Standard Contractual Clauses approved by the European Commission. Privacy Policy:
formspree.io/legal/privacy-policy
Google LLC — Google Fonts
This website loads typography from Google Fonts (fonts.googleapis.com). When the page is loaded, your IP address is transmitted to Google's servers. Google is certified under the EU-US Data Privacy Framework. Privacy Policy:
policies.google.com/privacy
Google LLC — Google Analytics
Only with your consent given via the cookie banner, this website uses Google Analytics 4 for aggregated browsing statistics, with anonymized IP addresses. The script is not loaded without consent. More details in the
Cookie Policy. Privacy Policy:
policies.google.com/privacy
We do not sell, rent, or share your data with third parties for marketing purposes.
5. Data retention period
Data collected through the contact form is retained only for as long as necessary to handle your request and, if a contract is established, for the period required by applicable tax and accounting regulations (in Finland: 6 years).
If no contractual relationship is established, data is deleted within 12 months of receiving your request.
6. Your rights
As a data subject, you have the right to:
- Access — request a copy of your data (Art. 15 GDPR)
- Rectification — correct inaccurate data (Art. 16 GDPR)
- Erasure — request deletion of your data ("right to be forgotten", Art. 17 GDPR)
- Restriction — request limitation of processing (Art. 18 GDPR)
- Portability — receive your data in a structured format (Art. 20 GDPR)
- Objection — object to processing based on legitimate interest (Art. 21 GDPR)
To exercise your rights, email info@madhatworks.com. We will respond within 30 days.
7. Complaints to supervisory authority
If you believe that your data has been processed in breach of the GDPR, you have the right to lodge a complaint with the competent supervisory authority. Since the controller is established in Finland, the lead authority is:
You may also lodge a complaint with the data protection authority in your country of residence.
8. Changes to this notice
We may update this notice in case of legal or operational changes. The date of the latest update is always shown at the top of this page. We recommend checking it periodically.