Privacy

Privacy Notice

MoniDose Oy's privacy practices and personal data processing in accordance with the EU General Data Protection Regulation (GDPR).

Last updated: September 13, 2026

Our Commitment to Privacy

We are committed to protecting your privacy and processing your personal data responsibly and transparently. This notice explains how we collect, process, and protect your data.

1. Data Controller and Contact Information

MoniDose Oy (hereinafter "MoniDose" or "we") acts as the data controller when processing personal data of our website users. We are committed to protecting your privacy and complying with applicable data protection legislation in the processing of personal data.

Our contact information:

MoniDose Oy
Business ID: 3478744-6
Turuntie 3
37830 Akaa
Finland

For privacy matters, you can contact us at:

Email: privacy@monidose.fi
Phone: +358 50 547 2782

2. Application of the Privacy Notice

This privacy notice applies to the processing of personal data on our website monidose.fi. The notice covers data collected through the website and related processing activities. This notice does not apply to third-party websites or services that may be referenced from our site.

3. Personal Data Processed

We collect and process only such personal data that is necessary for the operation of our website and handling contact requests.

Form data is not stored in a database on the website. Form submissions are delivered by email to our company inbox, and a confirmation email is sent to the address you enter.

3.1 Contact Form Data

Name (required)
Email address (required)
Organization (optional)
Message content and timestamp

3.2 Demo Request Form Data

Name (required)
Email address (required)
Organization (required)
Role in organization (required)
Title (optional)
Phone number (optional)
Team size (optional)
Preferred demo date (optional)
Message (required)

3.3 Feedback Form Data

Name (required)
Email address (required)
Feedback category (required)
Message (required)

3.4 Investor Inquiry Data

Name (required)
Email address (required)
Organization (optional)
Investor type, ticket size and areas of interest (optional)
Message (required)

3.5 Newsletter Subscription Data

Email address (required)
Name and organization (optional)
Areas of interest (optional)
Consent to receive the newsletter (required)

3.6 Technical Data

Server logs: our hosting provider Vercel keeps technical request logs, including IP address. The logs are used for security and operations.
Bot protection: when you submit a form, Vercel BotID runs an invisible check that evaluates browser signals to tell people from bots.
Visitor analytics: only if you accept it, see section 8.

4. Purposes and Legal Bases for Processing Personal Data

We process your personal data for the following purposes on the following legal bases:

4.1 Legitimate Interest

We process personal data based on our legitimate interest for the following purposes:

Responding to contact requests
Processing demo requests
Handling feedback and investor inquiries
Website security and abuse prevention (server logs and bot protection)
Implementing customer communications
Developing our services

4.2 Consent

Based on your consent, we may process your data for:

Sending newsletters (if separately subscribed)
Marketing communications (if separately approved)
Visitor analytics and performance measurement (if accepted in the cookie banner)

5. B2B Professional Outreach Communication

We send targeted communication to professional roles in healthcare, wellbeing services counties (hyvinvointialueet), social & health care organisations and educational institutions about our free assessment tools that may be useful in the recipient's professional work. The following terms apply specifically to this processing.

5.1 What data we process and where from

We process only publicly available professional contact information:

Name and professional role (title)
Work email address and organisation

Source: Information is collected only from official organisational websites, public staff directories and similar public sources. We do not process personal email addresses (e.g. Gmail, Hotmail).

5.2 Legal basis for processing

The legal basis for processing is legitimate interest (GDPR Art. 6(1)(f)). We have assessed that communicating with a healthcare professional about free, directly role-relevant tools is proportionate to the data subject's privacy interests:

Communication is directed only at the professional role, not personal characteristics
Content is directly relevant to the role (medication-safety tools)
Communication is one-off: we do not run ongoing campaigns
Recipients can object to communication at any time without justification

5.3 Retention period

Contact information is retained in the outreach list for a maximum of 24 months, or until the recipient requests removal: whichever comes first.

5.4 Right to object to direct marketing (GDPR Art. 21(2))

You have the right at any time to object to the processing of your personal data for direct-marketing purposes, without any need to justify your request. After such objection, we will no longer process your data for this purpose.

How to object or request removal:

Reply to the received message with the word "unsubscribe" (or "poista")
Or send an email to privacy@monidose.fi
Requests are processed within 24 hours at the latest

6. Recipients and Data Processors

We use the following service providers to run the website. They process personal data on our behalf and according to our instructions.

Vercel Inc. (United States)

Website hosting. Server functions run in Stockholm, Sweden (EU), and static content is served through Vercel's global edge network.
Technical request logs, including IP address, for security and operations.
Bot protection (Vercel BotID) on form submissions.
Visitor analytics (Vercel Web Analytics) and performance measurement (Vercel Speed Insights), only with your consent.

Google LLC (United States)

Email delivery. Data from every form is delivered by email through Google's Gmail service to our company inbox, and the confirmation email is sent the same way.
Map on the contact page (Google Maps). The map loads only when you press the Show map button. Google then receives your IP address and browser information.

7. Transfers Outside the EU and EEA

Vercel Inc. and Google LLC are US companies. Although the website's server functions run in the EU, personal data may be transferred to the United States or accessed from there.

These transfers rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.

For more information on the safeguards for these transfers, contact privacy@monidose.fi.

8. Cookies and Browser Storage

The website does not use tracking or advertising cookies.

8.1 Visitor analytics only with consent

Vercel Web Analytics and Vercel Speed Insights are loaded only after you accept them in the cookie banner. They collect statistics on page use and loading speed and do not use cookies. If you do not accept, they are not loaded at all.

8.2 Data stored in your browser

The site stores the following data in your browser's local storage (localStorage). The data stays on your device.

monidose-consent: your cookie choice and when you made it
monidose-preferred-lang: your chosen language
A note that you have closed the site's announcement banner
Answers to the self-assessment tools (medication-related questions). The answers are stored only in your browser and are not sent to us. They are deleted when the assessment is complete, and after 24 hours at the latest.

8.3 Changing your choice

You can change your choice at any time from the Cookie settings link at the bottom of the page, which opens the cookie banner again. You can also delete data stored in your browser from your browser settings.

9. Retention Period for Personal Data

We follow the following principles in storing personal data:

Contact form data:

12 months from message submission

Demo request data:

24 months from request receipt

Feedback form data:

12 months from receipt of the feedback

Investor inquiry data:

24 months from receipt of the inquiry

Newsletter subscription:

Until consent is withdrawn

Marketing communications consents:

Until consent is withdrawn

Form data is held in our company email inbox, so these retention periods apply to those email messages. Data stored in your browser is handled as described in section 8.

At the end of the retention period, we delete or anonymize personal data in a secure manner, unless there is another legal basis for retaining the data.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data. These include, among others:

SSL/TLS encryption in all network traffic

Form data is not stored in a database on the website

Bot protection on form submissions

Access control and authorization restrictions

Regular security updates

Staff privacy training

11. Data Subject Rights

Under the EU General Data Protection Regulation, you have the following rights:

Right of access to data

Right to rectification of data

Right to erasure ("right to be forgotten")

Right to restriction of processing

Right to data portability

Right to object

Right to withdraw consent

You can exercise your rights by contacting us by email at privacy@monidose.fi. We aim to respond to your requests within one month of receiving the request.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, tietosuoja.fi.

Questions About Privacy?

If you have questions about the processing of your personal data or want to exercise your privacy rights, please feel free to contact us.

privacy@monidose.fi +358 50 547 2782