Privacy notice

Last updated: 27 September 2026

In short. This site sets no cookies, runs no analytics and loads nothing from anyone else's servers. The only personal data it collects is what you type into one of its two forms, and that is emailed to us so we can answer you. Measurement data from the garments is not handled through this website at all.

1. Who is responsible

Momega Ltd, Maavallintie 21 B, 00430 Helsinki, Finland, business ID 3655174-4, is the controller for the data described here. Anything to do with this notice — questions, corrections, or a request to delete something — goes to info@momega.fi.

We are a small company and have not appointed a data protection officer; the address above reaches the people who can act on your request.

2. What this notice covers

This website, and the two forms on it: the quote request and the feedback and support form.

It does not cover measurement data. Recordings made with MAIJU or NAPPA, and anything held in Tessacloud, are processed on behalf of the institution running the study: that institution is the controller and Momega Ltd acts as its processor under a separate agreement. If you took part in a study, the notice you are looking for is the one given to you by the hospital, clinic or university that ran it.

3. What we collect, and why

Quote request: Name, work email, organisation, country, field of use, products of interest, approximate quantity, timeline, and whatever you write in the message. Used to answer you and to put together a quote.
Feedback and support: Name, email, organisation, topic, device serial or order reference, and your message. Used to handle the matter you wrote about.
Server logs: Our hosting provider records the usual technical details of each request — IP address, time, the page requested, browser and referring page — to keep the site available and to stop abuse. We do not use them to identify visitors or build profiles.

That is the whole list. There is no account to create, no newsletter, no tracking pixel and no chat widget.

A submission is sent to us as an email. It is not written to a database on the website: the site is a set of static files, and there is no database behind it.

4. Legal basis

Your consent — Article 6(1)(a): Both forms ask you to tick a box before sending. That tick is your consent to us storing and using what you wrote in order to reply. You can withdraw it at any time by writing to us, which does not affect anything we did before you withdrew it.
Steps before a contract, and the contract itself — Article 6(1)(b): Preparing a quote you asked for, and later handling orders and support for a customer.
Our legitimate interests — Article 6(1)(f): Keeping the site available and free of abuse (the server logs and the spam check), and keeping an ordinary record of business correspondence.

5. Who else sees it

Inside Momega Ltd, only the people who need to answer you. Getting your message to us involves three service providers, each acting as our processor under a data processing agreement:

Cloudflare: Hosts the website and runs the small piece of code that receives a form submission (Cloudflare Pages and Pages Functions). Cloudflare, Inc. is a US company and serves the site from its global network, which includes data centres in the EU. The optional anti-spam check, Cloudflare Turnstile, would also run there.
Resend: Delivers the submission to our mailbox as an email. A US company. Nothing is kept by a form service in between: the submission goes from Cloudflare straight to email.
Google (our email provider): Holds the mailbox your message arrives in and our reply is written from.

Where a provider processes data outside the EU or EEA, the transfer rests on the European Commission's standard contractual clauses, or on the EU–US Data Privacy Framework where that provider is certified under it.

We do not sell personal data, do not share it for advertising, and do not use it for automated decision-making or profiling. We would disclose something only if the law required it of us.

6. How long we keep it

Enquiries that do not lead to an order: Deleted no later than 24 months after the last message in the exchange.
Customer correspondence: Kept while we work together, and for 24 months after that.
Orders, invoices and other accounting records: Six years from the end of the accounting year, because Finnish accounting law requires it.
Server logs: Kept by our hosting provider for a short period under its own schedule. We do not copy them into our own systems.

Ask us and we will delete your enquiry sooner than that, unless we still need it for an order or a legal obligation above.

7. Your rights

Under the GDPR you can ask us to:

give you a copy of the personal data we hold about you;
correct it if it is wrong, or complete it if it is missing something;
delete it;
restrict what we do with it, or object to our use of it under legitimate interests;
send it to you, or to someone else, in a machine-readable form;
stop relying on your consent, which you can withdraw at any time.

Write to info@momega.fi and say what you want. We answer within one month, and will tell you if a request needs longer. We may need to check who you are first — normally by replying to the address the original message came from.

If you think we have handled your data wrongly, you can complain to the Finnish supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki · postal address PL 800, 00531 Helsinki
+358 29 566 6700 · tietosuoja(at)om.fi · tietosuoja.fi

We would rather you told us first, but you are not obliged to.

8. Cookies and tracking

This site sets no cookies and stores nothing in your browser. It runs no analytics, and every file it loads — stylesheet, script, image, font — comes from momega.fi itself. There are no social buttons, no embedded video and no advertising network. So there is nothing to consent to, and no cookie banner.

If that ever changes — analytics, an anti-spam widget, an embedded map — this section is updated before the change goes live.

9. Security

The site is served over HTTPS only, so what you type into a form is encrypted on its way to us. Submissions are not stored on the website itself; they live in our mailbox, which is access-controlled and reachable only by the people who answer enquiries.

10. Changes to this notice

The date at the top says when this version was published. If we change something that matters — a new processor, a different retention period — we update that date and describe the change here.