Privacy Policy

Services offered under the NOVO MEDIA brand are delivered by two separate companies acting as controllers for personal data processed through this website: 1) Andy & Co Business ID: 3572452-7 Helsinki, Finland 2) KRIPES Oy Business ID: 3334294-7 Päivölänrinne 3 A 1, FI-04220 Kerava, Finland General email and phone for this site: hello@novo-media.fi · +358 44 976 9818 or +358 44 976 0552 Invoicing and the formal controller role for your engagement may be clarified per project—we will specify this in proposals or contracts. The purpose of this privacy policy is to describe how personal data are collected, processed and used, and how you may restrict processing under applicable law.

Personal data is information that can be used to identify you. This includes your name, email address and phone number. Andy & Co and KRIPES Oy do not collect personal data from you other than when you specifically provide such data (e.g. when you send a contact form or demo request and accept their use). We use your personal data for the following purposes: • Processing contact requests and demo orders • Preparing quotes and managing customer relationships • Implementation of website projects • Billing and accounting • Marketing communications (only with consent) Both companies guarantee that they do not sell or rent your personal data to third parties. However, we may disclose your information if required by law.

The information you provide to us is retained only as long as necessary for the purpose of use of the information you send us or to comply with legal requirements. • Contact information is retained for the duration of the customer relationship and for 2 years after its termination • Billing and accounting information is retained in accordance with statutory requirements (6 years) • Marketing information is retained until consent is withdrawn If you have given us explicit permission to use your personal data for marketing purposes, we will use your data for such purposes until you withdraw your consent. You can withdraw your consent at any time, and it will take effect from the time of withdrawal.

Our website uses cookies. Cookies are small units of data that your web browser stores on your computer. COOKIES Our website uses "cookies" to assist with the use of the site. Cookies are small units of data that your web browser stores on your computer. They are necessary for using our website. We use cookies to better understand how our website is used. Additionally, cookies improve browsing. Cookies help us determine, for example, whether a page on our website has already been viewed. Cookies can also tell us whether you have visited our website before or are a new visitor. The cookies we use do not store personal data and do not otherwise collect personally identifiable information. If you do not want to use cookies, configure your web browser to remove all cookies from your computer's hard drive, block all cookies, or warn before storing a cookie. Cookies we use: (1) Google Analytics This website uses Google Analytics, which is a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies" - text files that are stored on your computer and that allow analysis of your behavior on the website. The information generated by the cookie about your use of this website is usually sent to and stored on a Google server in the United States. Google uses this information on our behalf to analyze the use of our website, to generate reports on activity on the website, and to create additional services related to website use. The IP address sent by your browser to Google Analytics is not associated with any other data stored by Google. You can prevent cookies from being stored by changing your web browser settings. Additionally, you can prevent Google from storing cookie-generated website usage data (including your IP address) by downloading and installing a browser add-on from https://tools.google.com/dlpage/gaoptout?hl=en (2) Technical Service Providers We use the following service providers to implement our site's functionalities: • Vercel — site hosting and content delivery • Discord — contact and demo form notifications may be delivered to an internal team channel (the service may process data outside the EEA; appropriate safeguards for transfers apply) • Sanity — content management for published material Each provider processes data under its own privacy policy. Where technically feasible we prefer services located in the EU/EEA.

We protect your personal data appropriately: • Databases and storage are password protected • All data transmission is encrypted with SSL/TLS protocol • Access to data is restricted to authorized personnel only • Service providers comply with industry security standards • We take regular backups • Data breaches are reported immediately to relevant authorities and users

You have the following rights regarding your personal data: Right of access - You can request information about what personal data we have stored about you. Right to rectification - You can request correction of incorrect or incomplete information. Right to erasure - You can request deletion of your data unless we have a legal obligation to retain it. Right to restriction of processing - You can request restriction of processing your personal data in certain situations. Right to object - You can object to the processing of your personal data based on legitimate interest. Right to data portability - You can request to receive the personal data you have provided in a machine-readable format. Right to withdraw consent - You can withdraw your consent at any time (does not affect processing already done). Right to lodge a complaint - You can file a complaint with the Data Protection Ombudsman if you believe we are processing your data unlawfully.

You can exercise the above-mentioned rights at any time and free of charge, or request disclosure or correction of the information we have stored about your identity. There is no need to use a specific form for this purpose. For example, you can write to us by email at hello@novo-media.fi or call +358 44 976 9818 or +358 44 976 0552. Office of the Data Protection Ombudsman: www.tietosuoja.fi tietosuoja@om.fi

We may change or update parts of the privacy policy without notifying you in advance. Always read the privacy policy before using our website so that you are aware of the status of the statement in all situations and if it has been changed or updated.