Privacy Policy

Last updated: 13 September 2026

This Privacy Policy applies to the website navanajafi.fi and the private French tutoring services offered through it (the "Services"), provided by Nava Najafi as a sole trader (kevytyrittäjä, "light entrepreneur" under Finnish law). Nava Najafi is the data controller.

Data controller: Nava Najafi Email: bonjour@najafi.fi

Nava Najafi operates as a light entrepreneur and invoices lessons through OP Kevytyrittäjä. OP Kevytyrittäjä processes billing and payment-related personal data on Nava Najafi's behalf, as a data processor, and is not an independent controller of this data.

We only collect the personal information necessary to provide tutoring, invoice you, and communicate with you:

• Contact details: name, email address, and phone number (if provided).
• Learning information: language level, learning goals, course selection, scheduling preferences, and, where relevant, a parent or guardian's contact details for minor students.
• Billing information: the information OP Kevytyrittäjä needs to invoice you (name, address, billing details). We do not store payment card details ourselves — payments are processed by OP Kevytyrittäjä or its payment provider.
• Communications: messages you send us via the contact form or email.
• Technical information: standard website usage data (e.g. IP address, browser); use of any non-essential cookies is described separately in a cookie notice if applicable.

We do not collect payment card numbers, shopping cart data, or other e-commerce information, as the Services are not an online store.

• Performance of a contract: booking, delivering, and administering lessons; invoicing.
• Legitimate interest: customer communication, service improvement, misuse prevention.
• Legal obligation: Finnish accounting law retention requirements for billing records.
• Consent: for any marketing communications, based on your separate, revocable consent.

• OP Kevytyrittäjä — processes billing and payment data on Nava Najafi's behalf.
• IT and hosting providers that keep the website and email running.
• Public authorities, where required by law.

We do not sell your personal information or use it for third-party targeted advertising.

• Contact and learning-related information is kept for as long as the student relationship is active, plus a reasonable period afterward to handle questions or disputes.
• Billing records are kept for 6 years after the end of the relevant financial year, as required by Finnish accounting law.
• You may request deletion of your data at any time, to the extent the law does not require us to retain it.

If a student is a minor, we also process a parent or guardian's contact details for communication and billing. The guardian provides consent for processing the minor's data at enrolment.

We protect your personal information with appropriate technical and organizational measures (including encrypted transmission on the website). No security method is completely foolproof, so we recommend not sending especially sensitive information over unsecured channels.

Under the EU General Data Protection Regulation (GDPR), you have the right to:

• access the data we hold about you,
• request correction of inaccurate data,
• request deletion of your data, to the extent the law does not require its retention,
• object to or restrict processing in certain situations,
• receive your data in a portable format,
• withdraw consent at any time.

You can exercise these rights by emailing bonjour@najafi.fi. We aim to respond within one month.

If you believe your personal data has been processed unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) tietosuoja@om.fi www.tietosuoja.fi

Some of the IT providers we use (e.g. website hosting) may process data outside the EU/EEA. Where this happens, we ensure the transfer relies on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date.

For questions about privacy or to exercise your rights, contact: bonjour@najafi.fi