Skip to content
MAU Agency team members Saana and Totte sit at a café table, chatting and smiling, with laptops, drinks and a light purple phone in front of them. They are planning a short-form video or working on content.

Privacy and Cookies

This page explains how MAU Agency Oy uses cookies on mauagency.fi and how we process personal data. Section 7 covers the contact form and webinars.

1. What cookies are

Cookies are small text files stored in your browser when you visit a website. Cookies help improve how the site works, measure how it is used, and target content and advertising more accurately based on your interests.

2. Why we use cookies

We use cookies for the following purposes:

- Website development: we analyze visitor data to understand how the site is used and how we can improve the user experience.

- Advertising performance tracking: cookies let us measure which advertising channel visitors arrive from and which ones lead to contact requests.

- Ad targeting: cookies allow us to show ads to users who have visited our site, for example in the Google, Meta and TikTok networks.

- Service functionality: certain cookies are necessary for the site and its features (e.g. forms) to work properly.

3. Cookies used and service providers

The following third parties may set cookies on our site:

Service

Purpose

Data location

Google Analytics

Website visitor tracking and analytics

EU / USA (data transfers under the EU-US Data Privacy Framework)

Google Tag Manager

Management of tracking codes

EU / USA (data transfers under the EU-US Data Privacy Framework)

Google Ads

Advertising tracking and targeting

EU / USA (data transfers under the EU-US Data Privacy Framework)

Meta Pixel (Facebook/Instagram)

Advertising tracking and targeting in Meta's networks

EU / USA (data transfers under the EU-US Data Privacy Framework)

TikTok Pixel

Advertising tracking and targeting in TikTok's networks

EU / USA (data transfers under the EU-US Data Privacy Framework)

YouTube (Google)

Webinar video stream on the live page (youtube-nocookie.com). The video loads only when you open the stream, and Google may then set cookies.

EU / USA (data transfers under the EU-US Data Privacy Framework)

Please note that third parties may combine data collected through cookies with other information you have provided to them or that they have collected through your use of their services.

The site also saves two items in your browser's own storage (localStorage). They stay on your device and are not sent to us or to third parties:

- mau-consent: your cookie choices, so the cookie notice is not shown on every visit.

- mau-webinaari-nimi: the name you gave when registering for a webinar or sending a question. It is used to pre-fill the question form on the live page.

4. Managing cookies

You have the right to decide which cookies are stored on your device.

You can manage cookies as follows:

- Accept or reject all non-essential cookies via the cookie notice.

- Delete previously stored cookies in your browser settings.

- Block cookies entirely in your browser settings (this may affect how the site works).

5. Data processing and legal basis

The legal basis for using cookies is your consent (GDPR Article 6(1)(a)), except where a cookie is necessary for the technical operation of the site.

Data may be processed in cooperation with the service providers listed above.

6. Data retention period

Cookies remain on your device for a maximum of 24 months, unless your browser settings specify otherwise. Consent is requested again at regular intervals.

7. Forms and webinars

When you contact us through the form, register for a webinar or send a question to a webinar speaker, we process the personal data you give us. The data controller is MAU Agency Oy (contact details in section 8).

What data we collect

- Contact form: first name, last name, company, email, phone number and message.

- Webinar registration: name, email and the webinar you registered for, plus company and phone number if the form asks for them.

- Ask the speaker form on the webinar live page: your question and your name, if you give it.

- Technical data: the site's server logs details such as your IP address and the time of the request.

We receive this data directly from you.

How we use your data

- To reply to your message and, if needed, send you a quote.

- To run the webinar: we send a confirmation and calendar invite, reminders a day and 15 minutes before the start, a link to the recording after the broadcast and, if needed, notice of a schedule change.

- To pass your question to the speaker. Questions may be read out during the broadcast, which is recorded. If you don't want your name mentioned, leave the name field empty.

- To follow up after a webinar or contact request and tell you about our services. In the recording email, we invite you to reply and chat with us.

Legal basis

- Replying to you and running the webinar: your request or registration, meaning a contract and the steps before it (GDPR Article 6(1)(b)).

- Following up about our services after a webinar or contact request: our legitimate interest in marketing our services to businesses (GDPR Article 6(1)(f)). You can object at any time, and we will stop marketing to you.

- Server logs: our legitimate interest in keeping the site working and secure (GDPR Article 6(1)(f)).

Who processes your data

We do not sell your data. The following service providers process it on our behalf:

- Google Workspace (Google): our email. We receive a notification of every contact request, registration and question.

- Resend: sending emails and scheduled reminders. Registrants may be saved to a Resend contact list so we can send one message to all participants.

- Vercel: the site's server, form handling and server logs.

The webinar video and any live chat come from YouTube and load only when you open the stream. Google processes data in connection with them as an independent controller (see section 3). Writing in the chat requires signing in to a Google account.

Transfers outside the EU and EEA

Resend, Vercel and Google are US companies, so data may also be processed in the United States. All three are certified under the EU-U.S. Data Privacy Framework, and where needed their agreements also include the European Commission's Standard Contractual Clauses.

How long we keep your data

- Contact requests, registrations and questions: 12 months from our last contact with you, or until you ask us to delete them.

- Resend keeps data on sent emails for a short time to operate its service. We remove contacts from the contact list on the same schedule as elsewhere.

- Server logs are kept for a short time under Vercel's own policy.

Your rights

You have the right to:

- Access the data we hold about you.

- Ask us to correct or delete your data.

- Ask us to restrict processing.

- Object to processing based on our legitimate interest, such as marketing.

- Receive the data you gave us in a machine-readable format.

- File a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe we process your data unlawfully.

Send your request by email to saana@mauagency.fi. We will reply within one month. You can also object to marketing by replying to any of our emails.

8. Data controller and contact details

MAU Agency Oy

Kaivokatu 10 A, 7th floor

00100 Helsinki, Finland

Business ID: 3568789-3

Email: hello@mauagency.fi

Privacy matters: Saana Nieminen, saana@mauagency.fi