Privacy and Cookie Notice

Last updated: 15 September 2026

This Privacy and Cookie Notice explains how Areto Creative Oy collects and uses personal data when you visit areto.fi, contact us or otherwise interact with us.

1. Data controller

Areto Creative Oy
Business ID: 3502585-7
Mälläistentie 414
32450 Tammiainen
Finland
Phone: +358 44 348 0902
Email: hello@areto.fi

Areto Creative Oy is responsible for the personal data described in this notice.

2. Personal data we collect

Information you give us

When you contact us, request information or become our client, we may collect:

• your name

• your email address and phone number

• your company, role and other professional details

• the content of your message and other information you choose to provide

• information related to our discussions, proposals, agreements and client relationship.

Please do not include sensitive personal data in the contact form.

Information collected when you use our website

Depending on your cookie choices, we may collect:

• IP address and approximate location

• browser, device and operating system information

• referring website or campaign

• pages viewed, links clicked and time spent on the website

• timestamps, cookie identifiers and consent choices

• information about conversions, such as submitting a contact form.

We receive this information from your browser and from the service providers described below.

3. Why we use personal data and our legal bases

We use personal data for the following purposes:

• Responding to messages and discussing possible work. We use your contact details, company details and message content. Our legal basis is our legitimate interest in responding to inquiries and taking steps before entering into a contract.

• Providing services and managing client relationships. We use contact, agreement, project and billing information. Our legal bases are the performance of a contract and compliance with legal obligations.

• Operating and protecting the website. We use technical and security information. Our legal basis is our legitimate interest in providing a secure and reliable website.

• Understanding how the website is used with Google Analytics. We use website usage, device and cookie information. Our legal basis is your consent.

• Measuring LinkedIn campaigns, conversions and audiences with the LinkedIn Insight Tag. We use website usage, device, campaign and cookie information. Our legal basis is your consent.

Where processing is based on legitimate interests, we consider the impact on your privacy and process only the information necessary for the stated purpose.

4. Cookies and similar technologies

Cookies are small text files stored on your device. Similar technologies, including pixels and tags, can be used for the same kinds of purposes.

We use the following categories:

Necessary technologies

These are required for the website to work, remain secure and remember your cookie choices. They do not require consent where they are strictly necessary.

Analytics cookies: Google Analytics

With your consent, we use Google Analytics to understand how visitors use our website. Google Analytics may collect information about page views, interactions, device and browser details, approximate location, referring sources and cookie identifiers. Google Analytics uses cookies such as _ga to distinguish one browser from another.

The provider is Google Ireland Limited. More information is available in Google’s Privacy Policy and its explanation of how Google uses cookies.

Marketing cookies: LinkedIn Insight Tag

With your consent, we use the LinkedIn Insight Tag to measure the results of LinkedIn campaigns, track conversions, create advertising audiences and receive aggregated insights about website visitors.

The tag may process information such as the page URL, referring URL, timestamp, IP address, device and browser details, cookie identifiers and a pseudonymous LinkedIn member identifier where applicable. We do not receive information that directly identifies individual LinkedIn members through the campaign reports available to us.

The provider is LinkedIn Ireland Unlimited Company. More information is available in LinkedIn’s Privacy Policy and Cookie Policy.

Google Analytics and the LinkedIn Insight Tag will only load after you have given consent for the relevant cookie category. Refusing consent does not prevent you from using the website.

You can change or withdraw your consent at any time through the Cookie settings link on our website. Withdrawing consent does not affect processing that took place before the withdrawal.

5. Who receives personal data

We do not sell personal data.

We may share personal data only when necessary with:

• providers of website hosting, content management, email and contact-form services

• Google Ireland Limited for website analytics

• LinkedIn Ireland Unlimited Company for campaign measurement and marketing

• accounting, legal and other professional service providers

• public authorities where disclosure is required by law.

Service providers may process personal data only for agreed purposes and under applicable data protection obligations.

6. Transfers outside the European Economic Area

Google and LinkedIn may process data through their group companies and service providers outside the European Economic Area. Where personal data is transferred to a country without an adequacy decision by the European Commission, the transfer is protected through safeguards such as the European Commission’s Standard Contractual Clauses and, where required, additional safeguards.

You can contact us if you would like more information about these safeguards.

7. How long we keep personal data

We keep personal data only for as long as necessary:

• Contact inquiries are normally kept for up to two years after our last communication, unless they lead to a client relationship.

• Client and agreement information is kept for the duration of the relationship and afterwards for as long as required by accounting, tax and other applicable laws or for establishing, exercising or defending legal claims.

• Technical and security logs are normally kept for no longer than 12 months, unless they are needed to investigate a security incident.

• Google Analytics user-level and event-level data is kept for 14 months. Google Analytics cookies may remain on your device for up to two years unless you delete them or withdraw consent earlier.

• LinkedIn campaign reports are kept only for as long as needed to measure and improve our marketing. LinkedIn retains data according to its own terms and privacy documentation.

• Records of cookie consent are kept for as long as necessary to respect your choices and demonstrate compliance.

We may keep anonymous or aggregated information that no longer identifies an individual.

8. Your rights

Under applicable data protection law, you may have the right to:

• access your personal data

• request correction of inaccurate or incomplete data

• request deletion of your data

• request restriction of processing

• object to processing based on legitimate interests

• receive data you provided in a portable format where the legal requirements are met

• withdraw your consent at any time.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman. More information is available at tietosuoja.fi.

To exercise your rights, contact us at hello@areto.fi. We may need to verify your identity before completing your request.

9. Automated decision-making

We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

10. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration and disclosure. Access is limited to people and service providers who need the information for the purposes described in this notice.

11. Links to other websites

Our website may contain links to third-party websites. Their privacy practices are governed by their own privacy notices, and we encourage you to review them.

12. Changes to this notice

We may update this notice when our services, website or data-processing practices change. The current version and its update date will always be available on this page.

13. Contact us

If you have questions about this notice or how we use personal data, contact:

Areto Creative Oy
Email: hello@areto.fi
Phone: +358 44 348 0902