Privacy Policy

Data controller

Medlyse Oy (business ID 3393571-8), Rahtitie 3, 01530 Vantaa, Finland.

Data-protection enquiries and contact person: info@medlyse.com.

What personal data we process

We process the information you provide yourself through the website's contact form: name, email address, and the content of your message.

We do not collect sensitive data or health data through this website.

Purpose and legal basis of processing

We process the data to respond to your contact request and to handle the related communication.

The legal basis is our legitimate interest (Article 6(1)(f) of the GDPR) in responding to enquiries sent to us. Submitting the form is voluntary.

Retention and location of data

We retain the data only for as long as handling your contact request requires — as a rule, no longer than 12 months after the contact has ended, unless longer retention is necessary, for example for continued correspondence.

The data is stored primarily on servers located within the EU or EEA.

Recipients of data

We do not sell or disclose your data to third parties for marketing purposes.

We use the following service providers to run the website and communications: contact-form data is stored in the Supabase database service (hosted in the EU, Stockholm), the website runs on the Vercel platform, and email notifications may use the Resend service. These providers process the data on our behalf under data-processing agreements.

Transfers outside the EU or EEA

Contact-form data is stored within the EU (Stockholm). The website platform (Vercel) and the email service (Resend) are US companies, so limited processing of personal data may take place outside the EU or EEA in their case.

In such cases we ensure the protection of personal data with appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

Cookies

The site uses only cookies that are necessary for its operation. See our Cookie Policy for more information.

Automated decision-making and profiling

We do not carry out automated decision-making or profiling based on your personal data.

Your rights

You have the right to access, rectify, and erase your data, to restrict or object to its processing, and to request data portability.

You may also lodge a complaint with the Office of the Data Protection Ombudsman. To exercise your rights and for data-protection questions: info@medlyse.com.