Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last updated: 5 October 2026
1. Introduction
Monidose Oy ("we", "us", or "our") operates the MoniDoseQMS platform and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Scope. This policy covers this website (monidoseqms.com). Use of the MoniDoseQMS platform itself is covered by the Privacy Policy shown in the platform and by our Data Processing Agreement, under which we act as your data processor.
We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
Monidose Oy
Address
Turuntie 3, 37830 Akaa
Finland
Business ID
Y-tunnus: 3478744-6
Data protection
privacy@monidoseqms.com
3. Information We Collect
AInformation You Provide
- Contact information (name, email address, phone number, company name)
- Account registration information
- Communication records when you contact us
- Information submitted through forms on our website
BInformation Collected Automatically
- IP address and device information (IP addresses are used briefly to prevent spam and abuse through rate limiting)
- Browser type and version
- Pages visited and time spent on pages
- Referring website addresses
- Cookies and similar tracking technologies
4. How We Use Your Information
We use the collected information for:
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Consent
When you have given explicit consent
Contract
When processing is necessary to fulfill a contract
Legal Obligation
When required by law
Legitimate Interests
When we have a legitimate business interest
6. Data Sharing and Disclosure
We may share your information with:
- Service providers who assist in our operations: Vercel (website hosting and privacy-friendly analytics, including temporary storage used for rate limiting and spam blocking, and video file hosting) and our e-mail delivery provider (sending confirmation and reply e-mails)
- Professional advisors (lawyers, accountants)
- Regulatory authorities when required by law
- Business partners with your consent
If you choose "Business Tampere pilot" as your interest in a contact form, or submit the Business Tampere pilot form, your request is shared with Business Tampere (Tampere, Finland), which receives it as the pilot organiser.
We do not sell your personal information to third parties.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it. Contact and demo requests are kept for as long as needed to respond and follow up. For the platform, customer data is available for export for 30 days after termination and is then deleted; records that you must keep by regulation remain your responsibility to export first. See the Terms of Service.
8. Your Rights
Under GDPR, you have the following rights:
Right of Access
Request copies of your personal data
Right to Rectification
Request correction of inaccurate data
Right to Erasure
Request deletion of your data
Right to Restrict Processing
Request limitation of processing
Right to Data Portability
Request transfer of your data
Right to Object
Object to processing of your data
Right to Withdraw Consent
Withdraw consent at any time
To exercise these rights, contact us at privacy@monidoseqms.com
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit, access controls, and audit logging. See our Security page for details.
10. International Transfers
Website data (for example contact forms) is processed on Vercel, a US company, and may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission. Platform (QMS) data is hosted in the EU (Finland); see our Security page.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Address
Turuntie 3, 37830 Akaa, Finland
Data Protection Authority
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe your rights have been violated.