Privacy & Cookie Policy

1. Controller

Dynamik Oy, Tekniikantie 12, 02150 Espoo, Finland

support@dynamik.fi, +358 40 830 6029

2. Data Protection Contact

Questions and requests concerning personal data: support@dynamik.fi

3. Name of the Register

Dynamik Oy's contact and customer register

4. Legal Basis and Purpose of the Processing of Personal Data

Personal data are processed for the purpose of carrying out the company's business. Personal data are processed for the fulfilment of the legal and contractual obligations of the company or on the basis of the consent of the individual. The personal data stored in the register is used, among other things, for the fulfilment of delivery obligations, customer relations, contacts and for sales and marketing purposes.

Under the EU General Data Protection Regulation, the legal bases for processing personal data are: the data subject's consent, a contract to which the data subject is a party, and the legitimate interest of the controller (e.g. a pre-contractual customer relationship).

Where processing rests on legitimate interest, the interests pursued are managing customer and pre-contractual relationships, direct marketing to business contacts, and information security. Where processing rests on consent, the consent can be withdrawn at any time (see section 10).

The data will not be used for automated decision-making or profiling.

5. Data Content of the Register

The register contains information about Dynamik's customer contacts, supplier contacts, and other business partners. The register includes personal data such as name, telephone number, e-mail address, street address, website addresses, IP address, information about ordered services and changes to them, billing information, and other information voluntarily provided by the customer or disclosed through the use of Dynamik's services.

In some usage situations, the register can also contain information about a person's website browsing activity and materials downloaded from the website. The register does not contain special categories of personal data as defined in the GDPR. The retention period of individual data is determined by the purpose of the processing, the legal basis, and the rights exercised by the data subject, taking into account the available technology and reasonable costs.

Website visitors' IP addresses and any cookies necessary for the functioning of the service are processed on the basis of legitimate interest — for example, ensuring information security — in cases where such data can be considered personal data. Visitor statistics for dynamik.software are collected with Simple Analytics, a cookieless service provided by Simple Analytics B.V. in the Netherlands. It sets no cookies, does not store IP addresses and builds no visitor profiles; the aggregate page-view data it produces is processed on the basis of legitimate interest in understanding how the site is used, and stays within the EU. dynamik.software sets no analytics or marketing cookies of its own; the cookies set when the booking scheduler is loaded are HubSpot's, on HubSpot's domains, and appear only once the visitor asks for the scheduler (see section 12).

6. Regular Sources of Data

The data stored in the register is obtained from the customer through, for example, website forms, email, telephone, social media services, contracts, customer meetings, and other situations where the customer discloses their information. Data of contact persons of companies and organizations can also be collected from public sources such as websites, directory services, and other companies. The regular sources of data in the register include records created by Dynamik employees in the course of their work and stored copies of received written materials.

7. Regular Disclosure of Data and Transfers Outside the EU or EEA

The data is not regularly disclosed to other parties, but the data in the register can be disclosed, as necessary, to parties involved in Dynamik's business processes or parts thereof.

Dynamik's contact register data is stored in an information system managed by Dynamik, with data located in the EU. Contact register data is also stored in HubSpot's services, in accordance with HubSpot's own service description.

HubSpot's services are provided by HubSpot, Inc., a company established in the United States. Dynamik's HubSpot account is hosted in HubSpot's EU region, but HubSpot's support and other operations can involve access to the data from outside the EU or EEA. Such transfers rely on the safeguards in HubSpot's Data Processing Agreement: HubSpot, Inc.'s certification under the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses. No other regular transfers outside the EU or EEA take place.

8. Principles of Register Protection

The protection of the contact register data follows the general principles set out in the GDPR. Access to the data is restricted according to the purpose and nature of processing, available technologies, and reasonable costs. Due care is exercised in processing the register; information processed through information systems is appropriately protected. When data is stored on internet servers, security measures are implemented regarding the physical and digital security of their hardware. The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by the employees whose job description is involved.

9. Right to Access and Require Correction of Information

Every person in the register has the right to check their personal information stored in the register and to require the correction of inaccurate information or the completion of incomplete information. If a person wishes to access this information, they must submit this request in writing to the data controller listed in this notice. The data controller can request proof of identity where necessary and will respond within the period required by the GDPR (generally within one month).

10. Other Rights Related to the Processing of Personal Data

In addition to the right of access and rectification, a person in the register has the following rights under the GDPR.

Right to erasure ("right to be forgotten"): to request the deletion of their personal data from the register, for example when the data is no longer needed for the purpose it was collected for.

Right to restriction of processing: to request that the processing of their personal data is restricted in certain situations, for example while the accuracy of the data is being verified.

Right to object: to object to processing that is based on legitimate interest. A person may object to the use of their data for direct marketing at any time, and such an objection is always honoured.

Right to data portability: to receive the personal data they have provided, and that is processed on the basis of consent or a contract, in a structured, commonly used and machine-readable format.

Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Requests must be sent in writing to support@dynamik.fi. The controller can ask the requester to prove their identity, if necessary, and will respond within the time limits set by the GDPR (as a general rule, within one month).

Right to lodge a complaint: a person who considers that the processing of their personal data infringes the GDPR has the right to lodge a complaint with the supervisory authority. In Finland this is the Office of the Data Protection Ombudsman, PO Box 800, 00531 Helsinki, tietosuoja@om.fi, +358 29 566 6700, tietosuoja.fi.

11. Changes to This Policy

The data controller constantly develops its operations and can therefore amend and update its privacy practices when necessary. Changes can also be based on changes in data protection legislation. If the changes include new purposes for the processing of personal data or otherwise change significantly, the data controller will inform data subjects in advance and request consent where required.

12. Cookies

Cookies are small pieces of information stored in your browser. dynamik.software sets no cookies of its own, and every cookie-based analytics and marketing service (Google Tag Manager, GA4, Google Ads, CookieHub) is switched off. Visitor statistics are collected with Simple Analytics, which works without cookies and stores nothing in your browser (see section 5). Opening a page here stores nothing.

Cookies are set only when you load the demo scheduler on the Contact page, which happens when you ask for it and never on page view. The scheduler is provided by HubSpot, and loading it both fetches HubSpot's embed script and opens a frame served from HubSpot's own domain. Both set cookies on HubSpot-owned domains — hubspot.com, hubspot.net, hsappstatic.net, hs-scripts.com, hs-analytics.net and hs-banner.com — which the table below lists. These are HubSpot's cookies on HubSpot's domains: HubSpot's privacy and cookie policies govern them, and anything you enter in the scheduler goes to HubSpot.