Privacy Policy.

Last updated: 16 May 2026

NeuroNose Oy ("NeuroNose", "we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what information we collect through this website, why we collect it, how we use it, and the rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR).

1. Who we are — the data controller

The data controller responsible for your personal data is:

• NeuroNose Oy
• Registered in Finland — business ID: [to be completed]
• Registered address: [to be completed], Helsinki, Finland
• Data protection contact: privacy@neuronose.io

2. What data we collect

We practise data minimisation — we collect only what we genuinely need. Through this website that means:

• Information you give us through the contact form: your name, email address, organisation (optional), the inquiry type you select, and the content of your message.
• Information sent automatically by your browser: if the site is hosted on a standard web host, server logs may briefly record your IP address, browser type, and the pages you visit, for security and basic operation.

We do not use advertising trackers, and we do not sell or rent personal data to anyone. If analytics or other cookies are added in future, this policy will be updated and consent obtained where required.

3. Why we use your data, and our legal basis

Under the GDPR, every use of personal data must have a lawful basis. Ours are:

• To respond to your inquiry — legal basis: your consent, given by ticking the consent box on the contact form. You can withdraw this consent at any time.
• To operate and secure the website — legal basis: our legitimate interest in keeping the site functional and protected against abuse.
• To comply with the law — legal basis: legal obligation, where we are required to retain or disclose information.

4. How long we keep it

We keep inquiry messages only as long as needed to handle your request and any reasonable follow-up — and no longer than 24 months from your last contact, unless a longer period is required by law or to establish, exercise, or defend legal claims. Server logs are kept for a short period only. When data is no longer needed, it is deleted.

5. Who can see your data

Your data is accessible to NeuroNose personnel who need it to respond to you. We may also use trusted service providers — for example a website host or an email provider — who process data on our behalf under contract. Where any provider is located outside the European Economic Area, we ensure an appropriate safeguard (such as the European Commission's Standard Contractual Clauses) is in place.

6. Your rights under the GDPR

You have the following rights over your personal data:

To exercise any of these rights, email privacy@neuronose.io. We will respond within one month. Exercising your rights is free of charge.

7. Your right to complain

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with your local supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). We would, however, appreciate the chance to address your concern first.

8. Data security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your information and to keep these measures under review.

9. Children

This website and its contact form are intended for business and professional inquiries and are not directed at children. We do not knowingly collect personal data from minors.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last revised. Material changes will be made prominent on the website.

11. Contact

For any question about this policy or your personal data, contact us at privacy@neuronose.io.