Privacy Policy

Last updated 1 October 2026

Controller

Finnish Living Solutions Oy
Business ID 3364850-8
Pursimiehenkatu 14 A 16, 00150 Helsinki, Finland

For anything concerning your personal data, write to john@cigarcitadella.com.

What this policy covers

This policy covers cigarcitadella.com. The site presents a single product, Fortress, and has two forms. There is no other way for us to collect personal data through the site. We use no analytics, no advertising and no visitor tracking.

What we collect, and why

Trade enquiries

When you send the trade enquiry form we receive your name, company, email address, country and the message you write. We use this to answer you and, where it leads somewhere, to discuss a business relationship.

Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to enquiries addressed to us (GDPR Article 6(1)(b) and 6(1)(f)).

Pre-launch list

When you join the pre-launch list we receive your email address and a record that you gave your consent. We use it for one purpose only: to tell you when Fortress ships. We will not use it for other marketing without asking you separately.

Legal basis: your consent (GDPR Article 6(1)(a)). You can withdraw your consent at any time by writing to john@cigarcitadella.com. Withdrawing it does not affect anything we did while the consent was in force.

Technical data

Our web server keeps the usual request records: IP address, time, the page requested and the browser identifier your browser sends. These exist so the service can be operated and kept secure.

Cookies

This site sets no cookies of its own, and uses no analytics, advertising or tracking cookies. The typefaces are served from our own server rather than from a font service, so reading the site sends nothing about you to a type foundry or a content network. The spam protection described below may set a short-lived technical cookie, needed only to carry out its check.

Spam protection

The forms are protected against automated abuse by Cloudflare Turnstile, a service of Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). When a page with a form is loaded, Turnstile loads a small script from Cloudflare and receives technical information about your browser and connection, including your IP address, in order to tell a person from a bot.

Cloudflare is not permitted to use this information to build an advertising profile of you. Cloudflare is the only third party this website contacts. The processing may take place outside the EU and the EEA; it is covered by Cloudflare’s data processing terms and the European Commission’s standard contractual clauses. You can read Cloudflare’s own privacy policy at cloudflare.com/privacypolicy.

Where the data goes

Form submissions are stored in the website’s own database and are also sent by email to john@cigarcitadella.com.

We do not sell, rent or trade personal data. It is handled by us and by the company that hosts the website, which operates the server on our instructions.

How long we keep it

• Pre-launch list: until the Fortress launch communication has been completed, and in any case no longer than 24 months — unless you separately consent to further marketing, or ask us to delete your address sooner.
• Trade enquiries: for as long as the enquiry and any business relationship that follows from it require.
• Server records: for the limited period our hosting provider retains them for operating and securing the service.

Your rights

Under the GDPR you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict how we use it, or transfer it elsewhere. You may object to processing based on legitimate interest, and you may withdraw consent you have given.

Write to john@cigarcitadella.com and we will answer within one month.

If you think we have handled your data wrongly, you also have the right to complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman (tietosuoja.fi).

Automated decisions

We do not make decisions about you by automated means, and we do not profile you.

Changes to this policy

If we change how the site handles personal data, we will update this page and change the date at the top.