Privacy Policy

The following company is responsible for the collection, processing and use of personal data in accordance with the EU General Data Protection Regulation (GDPR): Andy & Co (WebDemo) Business ID: 3572452-7 hello@webdemo.fi +358 44 976 9818 The purpose of this privacy policy is to provide information about the collection, processing and use of personal data. You can read here how you can prevent the use of your personal data in the manner intended by the applicable data protection regulations.

Personal data is information that can be used to identify you. This includes your name, email address and phone number. Andy & Co does not collect personal data from you other than when you specifically provide such data (e.g. when you send a contact form or demo request and accept their use). We use your personal data for the following purposes: • Processing contact requests and demo orders • Preparing quotes and managing customer relationships • Implementation of website projects • Billing and accounting • Marketing communications (only with consent) Andy & Co guarantees that it does not sell or rent your personal data to third parties. However, we may disclose your information if required by law.

The information you provide to us is retained only as long as necessary for the purpose of use of the information you send us or to comply with legal requirements. • Contact information is retained for the duration of the customer relationship and for 2 years after its termination • Billing and accounting information is retained in accordance with statutory requirements (6 years) • Marketing information is retained until consent is withdrawn If you have given us explicit permission to use your personal data for marketing purposes, we will use your data for such purposes until you withdraw your consent. You can withdraw your consent at any time, and it will take effect from the time of withdrawal.

Our website uses cookies. Cookies are small units of data that your web browser stores on your computer. COOKIES Our website uses "cookies" to assist with the use of the site. Cookies are small units of data that your web browser stores on your computer. They are necessary for using our website. We use cookies to better understand how our website is used. Additionally, cookies improve browsing. Cookies help us determine, for example, whether a page on our website has already been viewed. Cookies can also tell us whether you have visited our website before or are a new visitor. The cookies we use do not store personal data and do not otherwise collect personally identifiable information. If you do not want to use cookies, configure your web browser to remove all cookies from your computer's hard drive, block all cookies, or warn before storing a cookie. Cookies we use: (1) Google Analytics This website uses Google Analytics, which is a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies" - text files that are stored on your computer and that allow analysis of your behavior on the website. The information generated by the cookie about your use of this website is usually sent to and stored on a Google server in the United States. Google uses this information on our behalf to analyze the use of our website, to generate reports on activity on the website, and to create additional services related to website use. The IP address sent by your browser to Google Analytics is not associated with any other data stored by Google. You can prevent cookies from being stored by changing your web browser settings. Additionally, you can prevent Google from storing cookie-generated website usage data (including your IP address) by downloading and installing a browser add-on from https://tools.google.com/dlpage/gaoptout?hl=en (2) Technical Service Providers We use the following service providers to implement our site's functionalities: • Supabase - databases and file storage (EU region) • Vercel - site hosting and delivery (EU region) • Resend - sending email messages (EU region) All service providers comply with GDPR regulations and data is primarily processed within the EU/EEA area.

We protect your personal data appropriately: • Databases and storage are password protected • All data transmission is encrypted with SSL/TLS protocol • Access to data is restricted to authorized personnel only • Service providers comply with industry security standards • We take regular backups • Data breaches are reported immediately to relevant authorities and users

You have the following rights regarding your personal data: Right of access - You can request information about what personal data we have stored about you. Right to rectification - You can request correction of incorrect or incomplete information. Right to erasure - You can request deletion of your data unless we have a legal obligation to retain it. Right to restriction of processing - You can request restriction of processing your personal data in certain situations. Right to object - You can object to the processing of your personal data based on legitimate interest. Right to data portability - You can request to receive the personal data you have provided in a machine-readable format. Right to withdraw consent - You can withdraw your consent at any time (does not affect processing already done). Right to lodge a complaint - You can file a complaint with the Data Protection Ombudsman if you believe we are processing your data unlawfully.

You can exercise the above-mentioned rights at any time and free of charge, or request disclosure or correction of the information we have stored about your identity. There is no need to use a specific form for this purpose. For example, you can write to us by email at hello@webdemo.fi or call +358 44 976 9818. Office of the Data Protection Ombudsman: www.tietosuoja.fi tietosuoja@om.fi

We may change or update parts of the privacy policy without notifying you in advance. Always read the privacy policy before using our website so that you are aware of the status of the statement in all situations and if it has been changed or updated.