Privacy Policy
Your privacy is important to us. This Privacy Policy describes how Aorta Oy processes its customers’ personal data; what personal data is collected, for what purposes it is used, to whom it may be disclosed, and how the data subject can influence the processing. The Privacy Policy also provides information about the obligations that Aorta Oy follows when processing personal data.
Your privacy is important to us. This Privacy Policy describes how Aorta Oy processes its customers’ personal data; what personal data is collected, for what purposes it is used, to whom it may be disclosed, and how the data subject can influence the processing. The Privacy Policy also provides information about the obligations that Aorta Oy follows when processing personal data
Aorta Oy protects the privacy of the data subjects and complies with the General Data Protection Regulation (EU) 2016/679 as well as other applicable data protection legislation and good data processing practices.
Aorta Oy protects the privacy of the data subjects and complies with the General Data Protection Regulation (EU) 2016/679 as well as other applicable data protection legislation and good data processing practices.
Any information gathered is kept securely and not shared with third parties unless required by law. You have the right to request, update, or delete your information at any time by contacting us directly.
Any information gathered is kept securely and not shared with third parties unless required by law. You have the right to request, update, or delete your information at any time by contacting us directly.
1. Data Controller and Contact Information
Any information gathered is kept securely and not shared with third parties unless required by law. You have the right to request, update, or delete your information at any time by contacting us directly.
Any information gathered is kept securely and not shared with third parties unless required by law. You have the right to request, update, or delete your information at any time by contacting us directly.
Data Controller: Aorta Oy
Data Controller: Aorta Oy
Address: Arkadiankatu 22, 00100 Helsinki
Address: Arkadiankatu 22, 00100 Helsinki
Data Controller: Aorta Oy
Data Controller: Aorta Oy
Contact information regarding the register:
Contact information regarding the register:
Email: emilia.talvio@aorta.fi
Email: emilia.talvio@aorta.fi
Aorta Oy respects the privacy of its website users. This policy outlines how we collect, use, store, and disclose the personal data you provide us, adhering to the General Data Protection Regulation (GDPR) (EU 2016/679).
Aorta Oy respects the privacy of its website users. This policy outlines how we collect, use, store, and disclose the personal data you provide us, adhering to the General Data Protection Regulation (GDPR) (EU 2016/679).
3. Data Processing Activities
3. Data Processing Activities
We collect and process personal data for the following purposes and legal bases:
We collect and process personal data for the following purposes and legal bases:
3.1 Cookies and Tracking Technologies
3.1 Cookies and Tracking Technologies
Cookies are small text files stored by your browser that enable the website to recognize your device. Our website uses these technologies (such as those used by Google Analytics) to analyze usage, distinguish you from other users, and improve the site's functionality.
Cookies are small text files stored by your browser that enable the website to recognize your device. Our website uses these technologies (such as those used by Google Analytics) to analyze usage, distinguish you from other users, and improve the site's functionality.
You have the right to accept, decline, or change your cookie preferences at any time. You can usually manage your consent:
Via Your Browser Settings: By configuring your browser settings to block or delete cookies.
Changing Consent: If you wish to change a previously given consent, you can often do so by clearing your browser's cookies and reloading the website, which will prompt the Cookie Consent Banner to reappear.
Please note that restricting cookies may affect the full functionality of our website.
A. Data Collected Via Contact Form (Direct Collection)
You have the right to accept, decline, or change your cookie preferences at any time. You can usually manage your consent:
Via Your Browser Settings: By configuring your browser settings to block or delete cookies.
Changing Consent: If you wish to change a previously given consent, you can often do so by clearing your browser's cookies and reloading the website, which will prompt the Cookie Consent Banner to reappear.
Please note that restricting cookies may affect the full functionality of our website.
3.2 Data Collected Via Contact Form (Direct Collection)
B. Data Collected Automatically (Website Analytics)
3.3. Data Collected Automatically (Website Analytics)
4. Data Storage and International Transfers
A. Data Processors and Service Locations
We utilize the following third-party services which act as data processors on our behalf:
A. Data Processors and Service Locations
We utilize the following third-party services which act as data processors on our behalf:
B. Transfers Outside the EU/EEA
Our handling of personal data is primarily limited to the European Economic Area (EEA). However, some of our service providers, such as Google Analytics and Framer, may operate from outside the EEA. In such cases, any transfer of personal data will take place only with appropriate safeguards in line with applicable data protection legislation.
B. Transfers Outside the EU/EEA
Our handling of personal data is primarily limited to the European Economic Area (EEA). However, some of our service providers, such as Google Analytics and Framer, may operate from outside the EEA. In such cases, any transfer of personal data will take place only with appropriate safeguards in line with applicable data protection legislation
5. Your Rights as a Data Subject
5. Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data:
Right of Access (Article 15): You have the right to obtain confirmation about whether your personal data is being processed and to receive a copy of that data.
Right to Rectification (Article 16): You have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten) (Article 17): You have the right to request the deletion of your personal data under certain conditions.
Right to Restriction of Processing (Article 18): You have the right to request that we limit the processing of your data.
Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21): You have the right to object to the processing of your data, particularly for direct marketing purposes.
Right to Withdraw Consent: If processing is based on your consent (e.g., for analytics cookies), you may withdraw your consent at any time.
To exercise any of these rights, please contact the Data Controller using the contact information provided in Section 1.
Under the GDPR, you have the following rights regarding your personal data:
Right of Access (Article 15): You have the right to obtain confirmation about whether your personal data is being processed and to receive a copy of that data.
Right to Rectification (Article 16): You have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten) (Article 17): You have the right to request the deletion of your personal data under certain conditions.
Right to Restriction of Processing (Article 18): You have the right to request that we limit the processing of your data.
Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21): You have the right to object to the processing of your data, particularly for direct marketing purposes.
Right to Withdraw Consent: If processing is based on your consent (e.g., for analytics cookies), you may withdraw your consent at any time.
To exercise any of these rights, please contact the Data Controller using the contact information provided in Section 1.
6. Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant supervisory authority if you believe your rights under applicable data protection laws have been violated. In Finland, complaints can be submitted to the Office of the Data Protection Ombudsman. Further information is available on the authority’s website.
We would appreciate the opportunity to address your concerns directly. If you have any complaints or concerns about our processing of your personal data, we kindly ask that you contact us first using the details in Section 1. This allows us to investigate and resolve your issue efficiently and promptly. You always retain the right to lodge a complaint with the supervisory authority.
You have the right to lodge a complaint with the relevant supervisory authority if you believe your rights under applicable data protection laws have been violated. In Finland, complaints can be submitted to the Office of the Data Protection Ombudsman. Further information is available on the authority’s website.
We would appreciate the opportunity to address your concerns directly. If you have any complaints or concerns about our processing of your personal data, we kindly ask that you contact us first using the details in Section 1. This allows us to investigate and resolve your issue efficiently and promptly. You always retain the right to lodge a complaint with the supervisory authority.
7. Changes to This Policy
7. Changes to This Policy
Aorta Oy reserves the right to update this Privacy Policy at any time. Any material changes will be reflected in an updated version of this policy published on this page.
Last updated: November 10, 2025
