Privacy notice | Captila
Legal · Version 2026-11 · 2 November 2026

Privacy notice

This notice explains how we handle personal data when you visit captila.com or contact us. Our products have their own notices: Attestia's is at attestia.captila.com/legal/privacy.

1. Who we are

Captila is a trading name of OOMZEE Oy, business ID 3154423-8, Finland. OOMZEE Oy is the controller of the personal data described here. Contact: privacy@captila.com.

2. What we collect

  • When you contact us by email, through a contact or demo request, or by phone: your name, company, job title, email address, phone number if you give it, and what you write to us.
  • When you visit the website: our web host keeps short technical logs (internet address, time, page requested, browser type) to deliver the site and protect it against attacks.

We do not ask for, and ask you not to send, sensitive personal data.

3. Why, and on what basis

  • To answer your enquiry, arrange a demo and follow up on a possible business relationship with your company: our legitimate interest in responding to and doing business with companies (GDPR Article 6(1)(f)), or steps you ask for before a contract (Article 6(1)(b)).
  • To run and secure the website: our legitimate interest in a working and secure site.
  • To keep records the law requires, for example of contracts and invoices: legal obligation (Article 6(1)(c)).

We do not send marketing emails without your permission, and you can ask us to stop contacting you at any time.

4. Who receives it

Our email is provided by Microsoft (Microsoft 365, in the EU) and the website by our hosting provider, both under data processing agreements. Within Captila, only the people who handle your enquiry see it. We do not sell personal data or share it for advertising. We disclose data to authorities only when the law requires it.

5. Transfers outside the EU

We keep your data in the EU. If a service provider has to access it from outside the EU or EEA, this happens only under an adequacy decision of the European Commission or the Commission's standard contractual clauses.

6. How long we keep it

  • Enquiries that do not lead to a business relationship: 24 months after our last contact.
  • Correspondence with customers and partners: for the duration of the relationship and 5 years after it, unless the law requires longer (accounting records: 6 to 10 years).
  • Web server logs: at most 90 days.

7. Cookies

This website does not use cookies for analytics, advertising or tracking, and does not embed social media plugins. The link to our LinkedIn page sends you to LinkedIn, whose own privacy notice then applies.

8. Your rights

You can ask for access to your personal data and a copy of it, and to have it corrected or erased, its use restricted, or to object to its use, by writing to privacy@captila.com. We answer within one month. You can also complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the data protection authority where you live or work.

9. Changes

We publish changes to this notice on this page with a new version and date.