Privacy Notice

Date of the last revision: 8-November-2017

In brief

  • We serve targeted advertising on behalf of our clients or targeted advertising of our own.
  • We strive to ensure the advertising and content you see will be relevant for you through using cookies and similar technologies. You can Opt Out at any time.
  • We do not need to know who you are in order to serve you targeted advertising. In fact, we try our best to avoid storing anything that would make you readily identifiable. You can read more about the measures we take in this regard below.

Please note that this Privacy Notice may be revised and reissued from time to time. You should visit this page regularly to review the current version.

What we do

We are Natify Oy, a Finnish company engaged in providing our clients with a business-to-business enterprise data platform for advertising. What this means is that we help our clients to reach their business customers easily and accurately via targeted advertising displayed for example on Facebook, Google AdWords and various partner websites. We also help them to analyse the impact of their digital marketing. We use cookies and similar technologies to make sure that our clients reach the right target audiences and the content you see will be relevant for you. We do not target advertising to specific individuals, but our clients may be interested in reaching people like you based on, for example, the business you are engaged in or the company you work for.

In the course of our activities, we may process information on or related to you (“your information”) for the aforementioned purpose in the manner described in this Privacy Notice. Below, we wish to inform you on how your information, and in particular any personal data we may hold about you, is collected, used, stored, disclosed and removed (each and all referred to as “processing”). By “personal data” we mean any information relating to you as an identified or identifiable natural person (“data subject”) – an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number or an online identifier.

The data we process

To reach the intended target audiences, we need to process certain data that may include information related to natural persons, in particular:

  • Audience data from our clients: The data we receive from our clients includes information on business customers collected in accordance with our clients’ own privacy policies and may include, for example, business email addresses and IP address ranges used by the customer as well as website activity and analytics data collected from their websites.

  • Other data on web and email activities: When you visit sites or services operated by our partners or view and engage with their email marketing messages, we may receive and process your log and activity data1 as well as set cookies2 on your computer allowing us to recognize your browser. This information may be associated with a unique random identifier allowing us to target you with advertising on other websites.

We do not want to identify you

Sometimes the data we receive may include information that would allow us to identify the person concerned, such as an email address. In such instances, before any further use of the information, we will take measures to transform the data so that it can either be no longer attributed to a specific data subject at all (“anonymization”) or so that it can be attributed to a specific person only with additional information that is kept strictly separate from and never combined with the said personal data (“pseudonymization”). In the case of an email address, for example, this could mean that we discard the identifying part of the email address (and keep only the domain part), or that we transform the address with a hashing algorithm and discard the original unhashed version entirely. We will regularly review our anonymization and pseudonymization measures to ensure that they meet the above objectives.

Legal bases of processing

We process your information on the basis of our necessary and legitimate commercial interests and those of our clients, in particular, to make sure our clients’ business-to-business marketing efforts reach their intended audience. For some processing activities, we may also rely on the consent obtained from you by our client.

Retention of your information

We retain your information only for as long as is necessary for the purpose targeting advertising to you or to be able to provide website and email analytics services. Please note that the lifetime of the cookies that we set is 540 days and it will be reset every time you visit a website or see an advertisement with our tracking code. So unless you delete the cookies yourself, the cookies we set may take up to 540 days to expire from the last time you visited a web page with our tracking code.

How we share your information

We will not disclose your information to third parties in a form that would allow the recipient to identify you based on the disclosed data. We may, however, share certain anonymized or pseudonymized data to our partners for carrying out related or complementary activities such as advertisement delivery, audience measurement, traffic analysis or demographic analysis. We may also use third parties to assist us with data processing, software development, hosting, database management and administrative tasks. These third parties may be permitted to access your information, but they may only do so to perform these tasks on our behalf and are not allowed to disclose or use your information for any other purpose.

How we store and secure your information

  • Your information is stored in accordance with this Privacy Notice and any applicable laws in secure locations and servers within the European Economic Area as follows:
  • Strict security measures are applied to ensure the confidentiality and integrity of your personal data when we process it.
  • We use physical, technical and organizational measures to counter the risk of accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, your personal data.
  • Only designated persons and a limited amount of our personnel have access to the information. Our personnel have been trained to observe data security in their work. Where your personal data needs to be disclosed to our subcontractors, we require them to process and safeguard the data in a manner consistent with applicable laws and this Privacy Notice.

Your right to opt out

You may choose not to let us process your personal data by Opt Out at any time.

You are able to discontinue the collection of data also by adjusting the cookie settings on your browser (please see your browser Help for how to do this).

Other data subject rights

Under applicable data protection laws, you may have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us, and where that is the case, access to that personal data as well as to have any inaccurate or incomplete personal data rectified or completed. In certain circumstances and/or with respect to specific data processed based on your consent, you may also have the right to request the erasure of the data or to receive the data in a structured, commonly used and machine-readable format.

Please note, however, that due to the anonymization and pseudonymization measures explained above, we are usually not in a position to identify you as a data subject and thus not able or required to fulfil the above-mentioned requests.

Please contact us for any inquiries related to exercising the above rights. We may charge you the reasonable costs of providing you access to this information where allowed by applicable law.

If you consider our processing activities of your personal data to be inconsistent with applicable data protection laws, you may lodge a complaint with the responsible supervisory authority.

Data controller and contact information

The data controller responsible for your personal data for the purposes of the applicable European Union data protection laws is Natify Oy, a Finnish limited liability company (Business ID: 2624746-6); address Annankatu 16 E, 00120 Helsinki, Finland. If you have any questions about this Privacy Notice or our data collection practices, please contact us and specify the nature of your question.


1 Information sent by your browser to a site you visit may include, for example, the browser type, your time of access, screen resolution, IP address, referring site URL, current site URL and search strings.

2 A cookie is a small text file sent to your computer when you visit a website, allowing site operators and their partners to store, for example, user preferences and IDs. The site that places the cookie has permission to read its contents each time it communicates with your browser.*