/ Privacy
Privacy notice
This notice describes how DynamikUs Oy processes personal data as a controller under the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018). It covers this website, email correspondence and the preparation of advisory engagements.
1. Controller
DynamikUs Oy, a limited company registered in Finland. Business ID 3663989-3, VAT number FI36639893. Email for all data protection matters: contact@dynamikus.com. Registered domicile: Kirkkonummi, Finland.
DynamikUs Oy has not appointed a data protection officer, as it is not required to do so.
2. What this notice covers
- Visiting this website.
- Writing to us by email, including through the links on the Contact page.
- Preparing and agreeing an advisory engagement, such as a scoping conversation or a proposal.
Personal data processed during an engagement, such as interview notes or delivery data, is governed by the written agreement for that engagement and the client’s own instructions. Where DynamikUs Oy acts as a processor for a client, the client is the controller.
3. Personal data we process, purposes and legal bases
3.1 Website visits
This website is a static site. It contains no advertising, tracking pixels or embedded third-party content, and it sets no cookies unless you accept analytics (section 3.2).
The site is hosted on Firebase Hosting, a Google Cloud service. Like every web server, it records technical access logs: IP address, time of request, requested page, browser and operating system. Google processes these logs to deliver the site and to protect it against abuse. DynamikUs Oy does not use them to identify or profile visitors.
- Purpose: delivering the website securely and reliably.
- Legal basis: legitimate interest (GDPR article 6(1)(f)) in operating a secure website.
3.2 Google Analytics (only with your consent)
When you first visit, a bar at the bottom of the page asks whether we may use Google Analytics 4. Until you choose “Accept”, the Google Analytics script is not loaded, nothing is sent to Google Analytics and no analytics cookies are set.
If you accept:
- Data collected: the pages you view, the site that referred you, interactions such as scrolling, outbound link clicks and file downloads, your browser, operating system, device type and screen size, and your approximate location at country and region level. Google Analytics 4 does not log or store IP addresses. Google signals, granular location and device data collection, and all advertising features are switched off.
- Cookies:
_gaand_ga_96W7X319H8, which tell repeat visits from the same browser apart. They expire after up to two years. - Purpose: understanding which pages are useful and improving the website.
- Legal basis: your consent (GDPR article 6(1)(a)); for storing the cookies on your device, section 205 of the Finnish Act on Electronic Communications Services (917/2014).
- Recipient: Google Ireland Limited, which processes the data for DynamikUs Oy under Google’s data processing terms. Google may process the data in the United States under the EU–US Data Privacy Framework and the EU standard contractual clauses.
Your choice is remembered in your browser’s local storage under dynamikus-analytics-consent. It is not sent anywhere.
You can withdraw your consent at any time: choose “Cookie settings” at the bottom of any page, then “Reject”. This stops analytics and deletes the Google Analytics cookies. Clearing this site’s data in your browser has the same effect.
3.3 Email correspondence
When you write to us, we process your name, email address, employer and role if you give them, and the content of your message and our reply.
- Purpose: answering your enquiry and keeping a record of the correspondence.
- Legal basis: legitimate interest (article 6(1)(f)) in responding to enquiries and maintaining business correspondence; where the correspondence leads towards a contract, steps prior to entering into a contract (article 6(1)(b)).
3.4 Engagement preparation
For a scoping conversation, proposal or agreement we process the business contact details of the people involved, the information about your organisation that you choose to share, and the proposal and contract documents.
- Purpose: scoping, offering and concluding an advisory engagement.
- Legal basis: steps prior to entering into a contract and performance of the contract (article 6(1)(b)); legal obligations such as accounting (article 6(1)(c)).
We do not process special categories of personal data and do not use automated decision-making or profiling.
4. Confidentiality
Everything you share before an agreement is treated as confidential, is used only to assess and prepare the possible engagement, and is not passed on to third parties.
5. Hosting and service providers
This website stores nothing about you on its servers. It is a static site hosted by Google (Firebase Hosting) and served from the European Union; email is handled in Google Workspace, and website analytics, if you accept them, in Google Analytics. Google processes data for DynamikUs Oy under its data processing terms, with the EU standard contractual clauses covering any processing outside the European Economic Area.
We do not sell personal data, do not share it with advertisers, and disclose it to authorities only where the law requires it.
6. Retention
| Data | Retention |
|---|---|
| Web server access logs | Held by Google for the period set by Firebase Hosting; not retained separately by DynamikUs Oy |
| Google Analytics event data (only with consent) | 14 months, then deleted automatically; aggregated reports that identify no one may be kept longer |
| Google Analytics cookies in your browser | Up to two years, or until you withdraw consent or clear your browser data |
| Email enquiries that do not lead to an engagement | Deleted no later than 24 months after the last message |
| Proposals and agreements | For the duration of the engagement and 10 years thereafter, as required by the Finnish Accounting Act and limitation periods |
| Business contact details of clients and partners | For the duration of the business relationship and up to 24 months after the last contact |
7. Security
Personal data is processed in Google Workspace and Firebase with access limited to DynamikUs Oy personnel, protected by multi-factor authentication and encryption in transit and at rest as provided by the service providers. This website is served over HTTPS only.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (article 15);
- have inaccurate data rectified (article 16);
- have your data erased where there is no longer a lawful reason to keep it (article 17);
- restrict processing (article 18);
- receive the data you provided in a machine-readable format, where processing is based on contract (article 20);
- object to processing based on legitimate interest (article 21).
To exercise any right, write to contact@dynamikus.com. We respond within one month. We may ask you to confirm your identity before acting on a request.
If you consider that our processing infringes the GDPR, you have the right to lodge a complaint with the supervisory authority. In Finland this is the Office of the Data Protection Ombudsman, Lintulahdenkuja 4, 00530 Helsinki, tietosuoja.fi.
9. Changes to this notice
We may update this notice when our services or the law change. The current version is always published at this address, with the date of the latest change shown below.
Version: 28 October 2026.