Privacy Policy
Last updated: September 24, 2025
This Privacy Policy explains how NestAi Oy ("we", "our", "us") collects, uses, and protects the personal data of visitors to our website, subscribers, and individuals who contact us.
1. Data Controller
NestAi Oy
Business ID: 3487608-6
Lapinlahdenkatu 16 ℅ Maria01, 00180 Helsinki, Finland
Email: dpo@nestai.com
2. Name of the Registry
Customer, marketing, and website user register
3. Purpose of Processing Personal Data
We process personal data in order to:
Provide and improve our website and services.Send newsletters, event invitations, and updates about our activities.Communicate with individuals who contact us via forms or email. Analyze website traffic and usage through analytics tools (e.g., Google Analytics). Ensure the security and proper functioning of our website.
We do not use personal data for automated decision-making or profiling beyond the purposes described above.
4. Collected Personal Data
We may collect the following information:
Data provided by users:
First and last name
Email addressJob title
Company or organization
Consent details (when and how consent was given)
Automatically collected technical data:
IP address and approximate location
Browser type, operating system, and device information
Pages visited, time spent on the site, and navigation patterns (via Google Analytics or similar tools)
Cookie preferences and identifiers
5. Data Retention
Personal data related to newsletters and marketing communications is retained as long as the individual remains a subscriber or contact.Consent can be withdrawn at any time via the unsubscribe link or by contacting us directly. Data will be deleted within 30 days of withdrawal.Technical and analytics data is retained for the period necessary for website optimization and security (typically up to 26 months unless shorter under analytics settings).
6. Disclosure and Transfer of Data
Personal data will not be disclosed to third parties without explicit consent.We may use trusted service providers (e.g., Mailchimp, Brevo, Google Analytics, hosting providers) to process data on our behalf.These providers are contractually bound to comply with the EU General Data Protection Regulation (GDPR).
7. Data Transfers Outside the EU/EEA
If personal data is processed on servers outside the EU/EEA (e.g., by Google in the United States), such transfers are carried out in accordance with GDPR requirements and based on:
Adequacy decisions, orStandard contractual clauses approved by the European Commission.
8. Rights of Data Subjects
You have the right to:
Access your personal data.
Request correction of inaccurate or outdated information.Withdraw consent and object to direct marketing.Request deletion of your personal data.
Restrict or object to the processing of your personal data.
File a complaint with a supervisory authority (in Finland: Office of the Data Protection Ombudsman).
Requests can be made by contacting dpo@nestai.com.
9. Cookies and Analytics
Our website uses cookies and similar technologies to:
Ensure the site functions properly.Analyze website traffic and usage (via Google Analytics or comparable tools).Store user preferences (such as cookie consent).
You can manage or disable cookies in your browser settings. Please note that some features of the site may not function properly without cookies.
10. Security
We use appropriate technical and organizational measures to protect personal data. However, no online system is completely secure, and we cannot guarantee absolute protection of information.
