KAIO

Privacy Policy

How we collect, use, and protect your personal data

Last updated: March 2026

This privacy policy describes how KAIO Oy processes personal data collected through the KAIO marketing website. We are committed to handling your data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

Data Controller

  • KAIO Oy
  • Aurakatu 14 C 33, 20100 Turku, Finland
  • kaio@kallio.ai
  • +358 44 321 2670

1. Purpose of Data Processing

We process personal data for the following purposes:

1.1 Contact Requests and Strategy Meetings

When you submit a contact form or book a strategy meeting through the website, we process your name, email address, phone number, and company details in order to respond to your inquiry and arrange the meeting.

Legal basis: Consent

Retention period: Until the purpose is fulfilled or you withdraw your consent

1.2 Website Analytics

We analyze website traffic and usage patterns using Google Analytics 4 to understand how visitors interact with our site and to continuously improve our content and services.

Legal basis: Consent (via cookie consent banner)

Retention period: Until consent is withdrawn or analytics data expires per Google's retention settings

1.3 Legal Obligations

We may process personal data when necessary to comply with applicable legal obligations, such as accounting and bookkeeping requirements.

Legal basis: Legal obligation

Retention period: As required by applicable law

2. Cookies

Our website uses cookies. You can manage your preferences through the cookie consent banner shown on your first visit. We use Google Analytics 4 for site analytics; IP addresses are anonymized during collection, and data is processed under Google's data processing terms, which contractually restrict its use to providing the Analytics service. You can withdraw your cookie consent at any time by clearing your browser cookies and revisiting the site.

3. Disclosure of Personal Data

We do not sell your personal data or share it with third parties for their own marketing purposes.

We may disclose personal data when required to do so by law or by a court order.

In the event of a merger, acquisition, or sale of company assets, personal data may be shared with advisors and potential buyers under strict confidentiality obligations.

A data processing agreement is in place with Google LLC for the use of Google Analytics. Google processes data solely on our behalf and is not permitted to use it for other purposes.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to personal data is restricted to personnel who need it to perform their duties.

5. Third-Party Links

Our website may contain links to third-party websites such as social media platforms or partner sites. This privacy policy does not apply to those external websites. We encourage you to review the privacy policies of any third-party sites you visit.

6. International Data Transfers

Some of our service providers, including Google, may process data outside the European Economic Area (EEA). Any such transfers are carried out in accordance with GDPR requirements, including the use of Standard Contractual Clauses or other appropriate safeguards approved by the European Commission.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to be informed about how and why your data is processed
  • Right of access to the personal data we hold about you
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure ('right to be forgotten')
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or with the supervisory authority in your country of residence within the EEA.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We encourage you to review this page periodically. The date of the most recent revision is always shown at the top of this page.

10. Contact Us

If you have any questions, requests, or concerns regarding this privacy policy or the processing of your personal data, please contact us:

  • KAIO Oy
  • Aurakatu 14 C 33, 20100 Turku, Finland
  • kaio@kallio.ai
  • +358 44 321 2670