Privacy Policy

Last updated: 15.2.2026

1. Controller

Mashi Oy

Business ID: 3576343-8

Email address: privacy@mashi.fi

We are the data controller responsible for processing personal data collected through this website.


2. What Personal Data We Collect

We may collect the following personal data:

a) Contact Form Data

When you contact us via our website, we collect:

  • Name

  • Company name

  • Email address

  • Message content

  • Timestamp

  • IP address (if automatically logged for security purposes)

Purpose: To respond to your inquiry and discuss potential cooperation.

Legal basis: Legitimate interest (B2B communication) and/or consent (via form checkbox).


b) Cookies and Online Identifiers

We use cookies and similar technologies to:

  • Ensure website functionality

  • Analyze website traffic

  • Improve user experience

  • Conduct marketing activities

This may include:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Interaction data

We use Google Analytics to analyze website usage and improve our services. Google Analytics may collect information such as IP address, device information, and interaction data through cookies.

Marketing and analytics cookies are only activated after your consent.

Legal basis:

  • Necessary cookies: Legitimate interest

  • Analytics cookies (including Google Analytics): Consent

  • Marketing cookies: Consent


c) CAPTCHA

We use Google reCAPTCHA to prevent spam and abuse. This service may collect:

  • IP address

  • Browser information

  • Device data

Google reCAPTCHA is provided by Google LLC. The use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

The purpose is to protect our website and prevent automated abuse.

Legal basis: Legitimate interest in securing our website.


3. How We Use Personal Data

We process personal data to:

  • Respond to inquiries from companies and employees

  • Discuss and arrange workplace wellness sessions

  • Improve our website and marketing efforts

  • Protect our website from abuse

We do not sell personal data.


4. Data Sharing

We may share personal data with trusted service providers, such as:

  • Email service provider

  • Analytics provider (Google Analytics)

  • CAPTCHA provider (Google reCAPTCHA)

  • Hosting and infrastructure provider (Amazon Web Services - AWS / CloudFront)

These providers process data on our behalf under data processing agreements where required.

Data may be transferred outside the EU/EEA (for example, when using Google or AWS services). In such cases, appropriate safeguards such as Standard Contractual Clauses are used in accordance with GDPR.


5. Data Retention
  • Contact inquiries: retained for up to 24 months unless a business relationship is established.

  • Marketing consent data: retained until consent is withdrawn.

  • Technical logs: retained for up to 6 months.


6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Rectify incorrect data

  • Erase your data (right to be forgotten)

  • Restrict processing

  • Object to processing

  • Withdraw consent at any time

  • Lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

To exercise your rights, contact: privacy@mashi.fi


7. Cookies

We use a cookie consent tool to manage your preferences. You can:

  • Accept all cookies

  • Reject non-essential cookies

  • Customize your preferences

  • Withdraw consent at any time

For more details, see our Cookie Policy below.


8. Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, misuse, or disclosure.


Cookie Policy

Last updated: 15.2.2026

This Cookie Policy explains how Mashi Oy (“we”, “us”, or “our”) uses cookies and similar technologies on our website.


1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website function properly, improve user experience, and provide information about how the site is used.

Some cookies are necessary for the website to operate, while others require your consent.


2. Types of Cookies We Use

We use the following categories of cookies:

Necessary Cookies

These cookies are essential for the website to function properly. They enable core functionality such as security, network management, and accessibility.

These cookies do not require consent. Examples may include:

  • Session cookies

  • Security-related cookies

  • Cookie consent preference storage


Analytics Cookies (Consent Required)

We use analytics cookies to understand how visitors use our website and to improve its performance and content.

We use Google Analytics, which may collect:

  • IP address (processed in shortened/anonymized form where applicable)

  • Browser and device information

  • Pages visited

  • Time spent on pages

  • Interaction data

Analytics cookies are only activated after you provide your consent.


CAPTCHA-Related Processing

We use Google reCAPTCHA to protect our website from spam and automated abuse. reCAPTCHA may set cookies or process device information to determine whether a visitor is a human.

This processing is necessary for website security.

More information:


3. Third-Party Providers

We use trusted third-party providers that may process data through cookies or similar technologies, including:

  • Google LLC (Google Analytics and reCAPTCHA)

  • Amazon Web Services (AWS / CloudFront) for website hosting and delivery

These providers may process data outside the EU/EEA. Where applicable, appropriate safeguards such as Standard Contractual Clauses are used.


4. Managing Your Cookie Preferences

When you first visit our website, you are asked to choose your cookie preferences via our cookie consent banner (provided by CookieYes).

You can:

  • Accept all cookies

  • Reject non-essential cookies

  • Customize your preferences

You may withdraw or modify your consent at any time by accessing the cookie settings link available on our website.


5. How Long Cookies Are Stored

The storage duration of cookies varies depending on their purpose. Some cookies are deleted when you close your browser (session cookies), while others remain on your device for a defined period or until you delete them.

Detailed information about specific cookies is available through the cookie settings panel.


6. Contact Information

If you have questions about our use of cookies, you may contact:

Mashi Oy

Email: privacy@mashi.fi