Last updated: 10.7.2026

 

1. Who we are

 

Mobali Solutions (“we”, “us”, “our”) is the controller responsible for the personal data processed through this website, mobali.com.

  • Legal entity: Mobali Solutions Oy
  • Business ID (Y-tunnus): 2583856-3
  • Registered address: Sirkkutie 8, 02460 Kantvik, Finland
  • Contact for privacy matters: [email protected]
  • Data protection officer: We have not appointed a data protection officer.

2. What this policy covers

 

This policy explains how we handle personal data when you visit mobali.com, submit a form, or otherwise interact with the site. It does not cover third-party websites we link to, or the services we deliver to our clients under separate agreements (where we may act as a processor on their behalf).

 

3. The personal data we collect and why

 

Contact and enquiry forms. When you send us a message through a form on the site (Contact Form 7 / WPForms), we collect the details you provide — typically your name, email address, [phone number,] and the content of your message. We use this to respond to your enquiry and to follow up about the products or services you asked about. Form submissions are delivered to us by email.

  • Legal basis: your consent, and/or our legitimate interest in responding to enquiries, and/or taking steps at your request before entering into a contract (Art. 6(1)(a), (f), (b) GDPR).

Website analytics. We use Google Analytics (GA4) to understand how visitors use the site — for example which pages are viewed and roughly where visitors come from. Analytics only runs after you accept analytics cookies in our cookie banner. See our Cookie Policy for the specific cookies.

  • Legal basis: your consent (Art. 6(1)(a) GDPR).

Server logs and security. Our hosting provider and our security plugin (Wordfence) automatically process technical data such as your IP address, browser type, and access times to keep the site available and to detect and prevent malicious activity.

  • Legal basis: our legitimate interest in the security and integrity of the site (Art. 6(1)(f) GDPR).

Cookie consent records. When you set your cookie preferences, our consent tool (CookieYes) records your choice, along with a consent identifier and timestamp, so we can demonstrate that consent was given.

  • Legal basis: legal obligation / legitimate interest in demonstrating compliance (Art. 6(1)(c), (f) GDPR).

4. Who we share data with

 

We do not sell your personal data. We share it only with service providers who process it on our behalf, and only as needed:

  • Google (Google Analytics / Site Kit) — website analytics.
  • Hetzner Online GmbH (Germany) — website hosting and server logs.
  • Wordfence / Defiant, Inc. — website security.
  • SendGrid (Twilio Inc.) — delivery of form notification emails.
  • CookieYes — cookie consent management.

Each of these acts as our processor under a data processing agreement, or as an independent controller where required by law.

 

5. International transfers

 

Some of these providers (for example Google and SendGrid / Twilio) may process data outside the EU/EEA, including in the United States. Where that happens, transfers are protected by appropriate safeguards such as the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

 

6. How long we keep data

 

  • Form enquiries and related correspondence: 24 months after our last contact, unless a longer period is needed for an ongoing customer relationship.
  • Analytics data: retained according to our Google Analytics settings (14 months).
  • Security logs: up to 12 months.
  • Cookie consent records: 12 months, after which we ask for consent again.

We keep data only as long as necessary for the purposes above or as required by law.

 

7. Your rights

 

Under the GDPR you have the right to:

access the personal data we hold about you;

have inaccurate data corrected;

have your data erased in certain circumstances;

restrict or object to our processing;

receive your data in a portable format; and

withdraw consent at any time where processing is based on consent (this does not affect processing already carried out).

 

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by law.

 

8. Complaints

 

If you believe we have handled your personal data unlawfully, you can lodge a complaint with your local data protection authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

 

9. Is providing data mandatory?

 

Providing personal data through our forms is voluntary, but without it we may be unable to respond to your enquiry.

 

10. Automated decision-making

 

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

 

11. Changes to this policy

 

We may update this policy from time to time. The “last updated” date at the top shows when it was last revised.