Morcote Capital Oy
Privacy policy
Last updated: 11 August 2026
This notice explains how Morcote Capital Oy processes personal data under the EU General Data Protection Regulation (GDPR).
Controller and contact
Morcote Capital Oy, Annankatu 25, 00100 Helsinki, Finland. Privacy enquiries: [email protected].
Data and purposes
We process information you provide by email or in business dealings, such as your name, contact details, organisation, role and correspondence. We also process limited technical server logs, such as IP address, time and requested page, to deliver and secure the website.
Legal bases
Processing is based on our legitimate interests in managing enquiries, security and business relationships; steps requested before a contract; performance of a contract; and compliance with legal obligations. We do not use automated decision-making or profiling.
Recipients, transfers and retention
Service providers may process data on our behalf for hosting, email and IT support. Data may be processed outside the EEA only with an applicable safeguard. We retain correspondence and business records only as long as needed for their purpose and statutory obligations; security logs follow the hosting provider’s limited operational retention.
Your rights
Subject to the GDPR and the applicable legal basis, you may request access, rectification, erasure, restriction, portability or object to processing. You may also lodge a complaint with the Finnish Data Protection Ombudsman. Contact us to exercise your rights; we may need to verify your identity.
Changes
We update this notice when our processing or services change. The latest version is published on this page.
Google Analytics
If you allow analytics, Google Analytics may process page URLs, referrers, browser and device information, approximate region, interaction events and online identifiers. The legal basis is your consent. Analytics is not loaded before consent, and you can change your choice from the footer. Google Ireland Limited acts as a service provider and may process data internationally using applicable safeguards.