Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

This privacy policy is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Finnish Data Protection Act (Tietosuojalaki, 1050/2018). Where Finnish national provisions provide additional safeguards, those provisions apply.

2. Data We Collect

We collect the following categories of personal data when you interact with our website:

• Contact form data: Name, email address, and message content submitted through our contact form.
• Cookie and usage data: Information about your browsing behavior, including pages visited, time spent on site, browser type, device type, and IP address (anonymized where possible).
• Consent records: Your cookie consent preferences and GDPR consent status.
• Technical data: Browser type, operating system, referring URL, and approximate location derived from IP address (where analytics cookies are accepted).

We do not intentionally collect special categories of personal data (such as health data) through this website. Please do not include sensitive health information in contact form messages unless necessary for your inquiry.

3. Purposes of Data Processing

We process your personal data for the following purposes:

• To respond to your inquiries and messages submitted via the contact form.
• To ensure the proper functioning and security of our website.
• To analyze website usage and improve our content and user experience (with your consent).
• To comply with legal obligations under Finnish and European Union law.
• To maintain records demonstrating compliance with data protection and electronic communications rules.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

We process your data based on the following legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): For analytics cookies and marketing cookies, which you can accept or reject via our cookie banner.
• Legitimate interest (Art. 6(1)(f)): For essential website functionality and security.
• Contract performance (Art. 6(1)(b)): To respond to your contact form submissions.
• Legal obligation (Art. 6(1)(c)): To comply with applicable laws and regulations, including Finnish accounting, consumer protection, and communications rules where applicable.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you may object under Article 21 GDPR as described in Section 6.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form data: Retained for up to 12 months after your inquiry is resolved, then securely deleted.
• Cookie consent records: Retained for up to 12 months from the date of consent.
• Analytics data: Retained in anonymized form for up to 26 months, or deleted earlier if you withdraw consent.
• Records required by law: Retained for the period required by applicable Finnish or EU legislation (for example, consumer or tax-related records where relevant).

When retention periods expire, personal data is deleted or anonymized unless a longer retention period is required by law.

6. Your Rights Under GDPR

As a data subject, you have the following rights under the General Data Protection Regulation:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may request correction of inaccurate personal data.
• Right to erasure (Art. 17): You may request deletion of your personal data under certain conditions.
• Right to restrict processing (Art. 18): You may request restriction of data processing in certain circumstances.
• Right to data portability (Art. 20): You may request to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): You may object to data processing based on legitimate interest.
• Right to withdraw consent: You may withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right not to be subject to automated decision-making (Art. 22): We do not make decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, please contact us at contactuse@motionilivingan.click. We will respond without undue delay and, in any event, within one month as required by Article 12 GDPR. That period may be extended by two further months where necessary, taking into account the complexity and number of requests; we will inform you of any extension and the reasons.

We may request information reasonably needed to verify your identity before responding to a request. If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority (see Section 11).

7. Data Sharing and Transfers

We do not sell your personal data to third parties. We may share data with:

• Service providers: Third-party analytics and hosting providers who process data on our behalf under data processing agreements.
• Legal authorities: When required by law or to protect our legal rights.

If data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or another mechanism recognized under Chapter V GDPR.

Processors acting on our behalf are bound by written data processing agreements requiring appropriate security measures and processing only on documented instructions.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS).
• Access controls limiting data access to authorized personnel only.
• Regular security assessments and updates.
• Secure data storage with backup procedures.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Non-essential cookies are placed only after you provide consent through our cookie banner. For detailed information about cookie categories, retention, and your choices, please see our Cookie Policy.

10. Children

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have received data from a child without appropriate consent, please contact us and we will delete it promptly.

11. Direct Marketing

We do not send marketing emails based on contact form submissions unless you have clearly opted in to such communications. If we introduce newsletters or similar services in the future, we will request separate consent and provide an easy way to opt out at any time, in line with Finnish and EU rules on electronic direct marketing.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto):

You may also lodge a complaint with the supervisory authority in your country of habitual residence or place of work if you are located outside Finland.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.

14. Contact Us

For any questions or concerns regarding this privacy policy or our data practices, please contact us: