Privacy Policy

1. Who we are

Aether Applied (“we”, “us”, or “our”) operates aetherapplied.com and related pages that describe Qorina, our physics-grounded intelligence for the physical world. We are based in the Helsinki / Espoo area, Finland.

For privacy matters you can reach us at lucas.kuisma@aetherapplied.com, +358 45 350 0890, or Otakaari 7, 02150 Espoo, Finland.

2. Scope of this policy

This Privacy Policy explains how we process personal data when you visit our website, contact us, or access the password-protected data room. It is written for visitors and prospective partners under the EU General Data Protection Regulation (GDPR) and applicable Finnish data-protection law.

It does not cover product deployments of Qorina inside a customer’s own systems; those engagements are governed by the relevant contract and any separate data-processing terms.

3. What we collect

We keep data collection on this marketing site intentionally limited. Depending on how you interact with us, we may process:

• Contact details and messages you send us — for example name, email address, company, and the content of your enquiry — when you email us or use the contact form (which opens your email client via mailto and does not post form fields to our servers).
• Data-room access credentials you submit — the password you enter to unlock /data-room. We verify that password on our edge worker; we do not use it as a personal identifier beyond granting access.
• Technical request data created when you load the site — such as IP address, user agent, requested URL, and timestamps — which may appear in infrastructure logs operated by our hosting provider.
• An authentication cookie used only for the data room (see Cookies below).

4. What we do not collect on this site

We do not currently run advertising pixels, product-analytics SDKs, or third-party marketing trackers on aetherapplied.com.

We do not operate user accounts, newsletters, or payment flows on this website. If that changes, we will update this policy before collecting additional categories of data.

5. Why we process data (purposes and legal bases)

We process personal data only where we have a lawful basis under the GDPR:

• Responding to enquiries and arranging conversations about Qorina, pilots, or partnership — legitimate interests (Art. 6(1)(f)), and where needed steps prior to a contract (Art. 6(1)(b)).
• Providing access to confidential due-diligence materials in the data room — legitimate interests in protecting confidential information, and contractual steps where access is under NDA (Art. 6(1)(f) and/or Art. 6(1)(b)).
• Operating, securing, and troubleshooting the website and edge infrastructure — legitimate interests in keeping the service available and secure (Art. 6(1)(f)).
• Complying with legal obligations that may apply to our records (Art. 6(1)(c)).

6. Cookies and similar technologies

The public pages of this site do not set analytics or advertising cookies.

The data room uses a single strictly necessary cookie named dr_auth. After a correct password is submitted, our Cloudflare Worker sets an HttpOnly, Secure, SameSite=Lax cookie scoped to /data-room (approximately 24 hours). It stores an authentication token derived from the access password so we can recognize an authorized session. Without it, the gated materials cannot be shown.

Because this cookie is essential to deliver a service you request, we do not use a separate consent banner for it. You can clear cookies in your browser at any time; doing so will require you to sign in to the data room again.

7. How we use and share information

Email and contact messages are read by Aether Applied team members who need them to reply. We do not sell personal data.

We use service providers that process data on our behalf, notably Cloudflare, which hosts and delivers the site (including the data-room gate). Those providers act under their own terms and applicable safeguards; they may process technical request data as part of hosting, security, and content delivery.

We may disclose information if required by law, regulation, or valid legal process, or to protect the rights, safety, or integrity of Aether Applied, our users, or others.

8. International transfers

We are established in Finland (EU). Infrastructure providers such as Cloudflare may process technical data in locations outside the European Economic Area. Where that occurs, we rely on appropriate transfer mechanisms recognized under the GDPR (for example the provider’s standard contractual clauses or other lawful safeguards) as described in that provider’s documentation.

9. Retention

Correspondence we receive by email is retained only as long as needed to handle your request, maintain a normal business relationship, or meet legal and accounting requirements, typically no longer than necessary for those purposes.

The data-room authentication cookie expires automatically (about 24 hours) or when you clear it.

Infrastructure logs are retained according to our hosting provider’s defaults and our operational needs for security and debugging, and are not used to build marketing profiles.

10. Security

We take reasonable technical and organizational measures appropriate to the sensitivity of the data we handle on this site — including HTTPS, an HttpOnly Secure cookie for data-room sessions, and server-side password verification that does not expose the data-room secret in the public client bundle. No method of transmission or storage is perfectly secure; if you believe your interaction with us has been compromised, contact us promptly.

11. Your rights

If you are in the EEA or otherwise protected by the GDPR, you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase data in certain circumstances
• Restrict or object to processing based on legitimate interests
• Receive a copy of data you provided, in a portable format, where applicable
• Lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi

12. How to exercise your rights

Email lucas.kuisma@aetherapplied.com with “Privacy request” in the subject line. We may need to verify your identity before fulfilling a request. We will respond within the timeframes required by applicable law.

13. Children

This website is directed at professional and institutional audiences. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this Privacy Policy when our practices or legal requirements change. The “Last updated” date at the top of this page will reflect the latest revision. Material changes will be posted here; continued use of the site after an update constitutes notice of the revised policy for website visitors.

15. Contact

Aether Applied

Otakaari 7, 02150 Espoo, Finland

Email: lucas.kuisma@aetherapplied.com · Phone: +358 45 350 0890