Website Privacy Policy

Equilibrium Engineering Oy

Version: 1.0

Effective date: April 30, 2026

Last updated: April 30, 2026

At a Glance

• Analytics — we use Plausible, a cookieless EU-hosted service that does not collect personal data.

• Cookies — only strictly necessary cookies for the site to function; no tracking, advertising, or profiling.

• Contact forms — we use the data you provide only to respond to your inquiry, then delete it.

1. Who We Are

Equilibrium Engineering Oy ("Equilibrium", "we", "us", "our") is the data controller responsible for personal data processed via equilibrium.co.

• Business ID: 3274646-4

• Registered address: Meritullinkatu 1 B, 00170 Helsinki.

• Privacy contact: privacy@equilibrium.co

If you are applying for a role at Equilibrium, please see our Recruitment Privacy Policy — recruitment processing is not covered by this document.

2. Scope

This policy applies to personal data we process when you visit equilibrium.co outside of any job application — analytics, strictly necessary cookies, and the contact form.

3. Analytics

We use Plausible Analytics to understand aggregate visitor patterns on our website. Plausible is a privacy-first, cookieless analytics service hosted entirely within the EU. It:

• Does not use cookies, browser cache, or local storage

• Does not collect or store personal data

• Aggregates visitor statistics without tracking individuals across sessions or sites

• Is compliant with GDPR, ePrivacy (PECR), and CCPA without requiring consent

Because Plausible does not process personal data, no GDPR legal basis is required. See plausible.io/data-policy for details.

4. Cookies

We use only strictly necessary cookies required for the website to function (e.g. session management, CSRF protection). These are placed under our legitimate interest (Art. 6(1)(f)) and are exempt from consent requirements under the ePrivacy Directive. We do not use tracking, advertising, or profiling cookies.

5. Contact Forms

If you contact us via equilibrium.co, we process your name, email address, and message content to respond to your inquiry. Legal basis: our legitimate interest in responding to communications (Art. 6(1)(f)). This data is deleted after your inquiry is resolved.

Contact-form messages are stored and transmitted via our email and cloud productivity providers, which may be located outside the EEA — see Section 6.

6. International Data Transfers

Plausible analytics and our cookies stay first-party and EU-hosted, so no international transfers are involved.

Contact-form messages may transit US-based email and cloud productivity providers. For those transfers we rely on:

• EU-US Data Privacy Framework (DPF) — for certified providers

• Standard Contractual Clauses (SCCs) — as fallback under the relevant Data Processing Agreement

DPF certifications can be verified at dataprivacyframework.gov. You may request a copy of the safeguards we rely on by contacting privacy@equilibrium.co.

7. Your Rights

Under the GDPR, you have the following rights regarding the personal data you provide via the contact form:

To exercise any of these rights, contact privacy@equilibrium.co. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with a supervisory authority.

Lead supervisory authority:

• Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

• Website: tietosuoja.fi

You also have the right to lodge a complaint with the supervisory authority in the EU member state where you reside or work.

9. Changes to This Policy

We may update this policy from time to time. The current version is always available at https://equilibrium.co/privacy-policy.

Contact: privacy@equilibrium.co