Privacy
Privacy policy
Last updated: 12 September 2026 · Applies to www.moonenventures.com
1. Controller
The controller responsible for processing personal data in connection with this website is:
Moonen Ventures Oy
Kaarlaaksontie 2, 02920 Espoo, Finland
Business ID (Y-tunnus): 3234276-9
Email: rob@moonenventures.com
Phone: +358 44 585 3611
Moonen Ventures Oy has not appointed a Data Protection Officer, as it is not required under Article 37 of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). Privacy questions can be sent to the contact details above.
2. Cookies and tracking
This website is a static site. It does not set cookies, does not use analytics or advertising tools, does not embed social-media plug-ins and does not load fonts, scripts or images from third-party servers. The light/dark appearance follows your device setting and is not stored.
Because no cookies or similar technologies are used, no cookie consent banner is required under the ePrivacy Directive (2002/58/EC) or the Finnish Act on Electronic Communications Services. Should we add such tools in the future, we will update this policy and ask for your consent first.
3. Server log data
When you visit the site, our hosting provider automatically processes technical data that your browser transmits (IP address, date and time, page requested, browser type, referring URL) in order to deliver the pages securely and to detect misuse. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Log data is retained by the hosting provider for a short period only and is not combined with other data about you.
4. When you contact us
| Channel | Data processed | Purpose & legal basis |
|---|---|---|
| Email or phone | Name, contact details, organisation, content of your message | Answering your enquiry and preparing a possible engagement — Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) (business communication) |
| Calendly booking | Name, email, chosen time slot, optional notes; processed by Calendly LLC (USA) | Scheduling an intro call — Art. 6(1)(b) GDPR. Calendly acts under its own privacy notice; transfers to the USA rely on the EU–US Data Privacy Framework and standard contractual clauses. |
| Phone number, profile name, message content; processed by WhatsApp Ireland Ltd / Meta | Direct messaging at your initiative — Art. 6(1)(b) and 6(1)(f) GDPR. WhatsApp's own privacy terms apply. | |
| LinkedIn link | No data is transferred until you click the link and leave this site | — |
Links to Calendly, WhatsApp, LinkedIn and client websites open the third-party service only after you click. Nothing is loaded from these services while you browse this site.
5. Clients and project work
If you become a client, we process the personal data needed to perform the contract (contact persons, roles, correspondence, project and funding-application content) on the basis of Art. 6(1)(b) GDPR, and we retain accounting records for the period required by the Finnish Accounting Act (currently 6–10 years). Confidential project information is handled under the non-disclosure terms of our engagement agreements.
6. Recipients and international transfers
We do not sell or rent personal data. Data may be processed by service providers we use to run the business (email and cloud storage — Microsoft 365, EU data region; scheduling — Calendly; messaging — WhatsApp), each bound by a data-processing agreement or their own controller obligations. Where data leaves the EU/EEA, we rely on adequacy decisions (including the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.
7. Retention
Enquiries that do not lead to an engagement are deleted no later than 24 months after our last contact. Client data is kept for the duration of the engagement and thereafter as long as legally required or needed to defend legal claims.
8. Your rights
Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, email rob@moonenventures.com. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), P.O. Box 800, 00531 Helsinki, tietosuoja@om.fi.
9. Security
The site is served over HTTPS. Business data is stored in access-controlled cloud services with multi-factor authentication. Personal data is only accessible to people who need it to serve you.
10. Changes
We may update this policy when our services or the law change. The current version is always available at this address, with the date of the last update shown above.