Privacy notice

Updated 21 October 2026

Controller

Dinottisauri Oy (trading as Dinoa)
Business ID 3231304-4
Lauttasaarentie 48 A 3, 00200 Helsinki, Finland
Privacy matters: katja@dinoa.fi

What we use personal data for

Running the website. The website's service provider processes technically necessary data, such as IP address and browser information, to display the site and protect it. Your choice about cookies is stored in your browser. Basis: legitimate interest in keeping the site running and secure.

Visitor statistics. If you accept analytics cookies, we use Google Analytics to see how the site is used and where visitors come from. It stores a cookie in your browser and processes browser and device data and approximate location. We do not link the statistics to individual people. If you do not accept, Google Analytics does not start. You can change your choice at any time via the Cookie settings link at the bottom of the page. Basis: consent.

Enquiries. When you contact us, we process your contact details and the content of your message in order to reply. Basis: legitimate interest in responding to enquiries.

Customers and partners. We process data about the contact persons of our customers and partners, such as name, role and contact details, to prepare and perform contracts, for invoicing and to manage the customer relationship. Basis: contract, legitimate interest and legal obligations such as bookkeeping.

Marketing to businesses. We tell business representatives about our services in relation to their work. We process the contact person's name, role, work contact details and public professional profile information. The data may come from public registers and listings, company websites or business information services. Basis: legitimate interest in marketing services to businesses.

When we process personal data on behalf of and on the instructions of a customer, the customer is the controller, and the processing is based on our agreement with the customer.

Who receives the data

We do not sell personal data or pass it on for marketing. We use service providers, for example for website hosting, email, data storage, visitor statistics and invoicing. They process data on our behalf under data processing agreements. Data may be disclosed to authorities when required by law.

Transfers outside the EU and EEA

Some of our service providers process data outside the EU and EEA, for example in the United States. Transfers are based on the European Commission's standard contractual clauses, an adequacy decision of the Commission (such as the EU–US Data Privacy Framework) or another basis under the General Data Protection Regulation.

Retention

We keep data only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. Data related to customer relationships and invoicing is kept for the period required by the Finnish Accounting Act. We review marketing contact data regularly and delete what is no longer needed. If you object to being contacted, we keep a record of the objection so that we can respect it. Google Analytics visitor-level data is kept for up to 14 months from your last visit.

Your rights

You can object to marketing contacts at any time. Reply to our message or write to katja@dinoa.fi, and we will not contact you again.

You have the right to access your data, request its rectification or erasure, restrict processing, object to processing based on legitimate interest and have your data transferred. Where processing is based on consent, you can withdraw it at any time. Contact katja@dinoa.fi. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

We do not make decisions about people based solely on automated processing. Providing data to us is voluntary.

Security

We protect data through access restrictions, encryption and reliable service providers.