Privacy Policy

Effective date: April 2026  ·  AERISIO Ltd

1. Who we are

AERISIO Ltd ("AERISIO", "we", "us") is the data controller for personal data collected through this website (aerisio.com).

Registered address: Rantakatu 8A, 92100 Raahe, Finland
Business ID: FI36176024
Contact: hello@aerisio.com

2. What data we collect and why

2.1 Contact enquiries

When you submit the contact form on our website we collect:

• Full name
• Work email address
• Organisation name
• Business segment (e.g. retail, hospitality, municipality)

Purpose: to respond to your enquiry and, where relevant, discuss a potential business relationship with you.
Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract; and Article 6(1)(f) GDPR — our legitimate interest in responding to business enquiries.
Retention: we keep enquiry data for up to 2 years from the date of your submission, or until you ask us to delete it, whichever is sooner.

Form submissions are handled by Formspree (see Section 3) and delivered to our internal inbox. We do not add you to any marketing list without your separate consent.

2.2 Website analytics

With your consent we use Google Analytics 4 to understand how visitors use our site. Data collected includes pages visited, session duration, approximate location (country / city level), device type, and browser. No personally identifiable information is sent to Google Analytics — form data stays entirely separate.

Legal basis: Article 6(1)(a) GDPR — your consent, given via the cookie banner.
Retention: Google Analytics retains data for 14 months by default. You can withdraw consent at any time via the cookie settings link in the footer.

Analytics is disabled by default. The tracking script only activates after you click "Accept all" or enable analytics in the cookie preferences panel.

2.3 Cookie consent preference

We store your cookie consent choice in your browser's localStorage under the key aerisio-cookie-consent. This record contains only whether you accepted or declined analytics — no personal data. It is not transmitted to any server and expires when you clear your browser data.

3. Our service providers

We share data with the following processors, each bound by a data processing agreement:

4. International transfers

Both Formspree and Google are based in the United States. Transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses adopted by the European Commission, providing an equivalent level of data protection to that required within the European Economic Area.

5. Your rights

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data where there is no compelling reason for us to keep it.
• Restriction — ask us to restrict processing while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — for analytics, at any time via the cookie settings link below.

To exercise any right, email us at hello@aerisio.com. We will respond within 30 days.

6. Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
tietosuoja.fi/en

You may also lodge a complaint with the supervisory authority in your EU member state of habitual residence or place of work.

7. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of the page. Material changes will be announced via a notice on the website. We encourage you to review this page periodically.