Privacy Policy

Last updated: 24.9.2026

1. Controller

The controller of personal data collected through the Dura Makers registration form is Marika Nokelainen tmi, business ID 2881004-8, Helsinki, Finland. For any questions about this policy or your data, contact info@dura.studio.

2. What Dura Makers is

Dura Makers is a public registry of small-batch producers owned and maintained by Dura Studio. Its purpose is to help brands and others find skilled makers for small-batch production, repair and related work. Anyone can browse the registry, but the registry and its contents belong to Dura Studio and may not be copied, scraped or reused without Dura Studio's permission.

3. What data we collect

We collect the information you give us in the registration form: your business name, contact person name, email address, phone number, city and country, website or social media links, and links to photos of your work. We also collect information about your business, such as the product categories, services, materials and machinery you work with, typical batch sizes and lead times, and anything else you choose to tell us. Finally, we record which consents you have given.

Most of this is business information. However, information about a sole trader or a named contact person counts as personal data, and we handle it according to the EU General Data Protection Regulation (GDPR).

4. Why we use your data and on what legal basis

We use your data for three purposes, each based on your consent (GDPR Article 6(1)(a)).

First, to publish information about your business in the public Dura Makers registry. This is the core purpose of the registration, and consent to it is required to join.

Second, if you have separately agreed, to contact you about developing Dura Makers, for example to invite you to research interviews, surveys or testing of new features. Taking part is always voluntary.

Third, if you have separately agreed, to send you occasional updates about Dura Makers.

5. Who we share your data with

Your business name, city and country, and the information about what you make (categories, services, materials, machinery, batch sizes, lead times and your description) are shown publicly in the registry. Your contact details are shown only if you choose so in the form. Other information, such as your consent choices and any contact details you did not choose to publish, is used only by Dura Studio.

We do not sell your data, share it for others' reuse, or use it for advertising.

We use Google Forms and Google Sheets, provided by Google, to collect and store registrations. Google acts as our data processor. Google may process data outside the EU and European Economic Area, in which case the transfer is protected by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

We keep your data for as long as your business is part of the Dura Makers network. If you withdraw your consent or ask to be removed, we will delete your data within 30 days, unless we are required by law to keep something longer. We also review the registry regularly and will contact producers who have been inactive for more than two years to ask whether they want to stay listed.

7. Your rights

You have the right to access the data we hold about you, to have incorrect data corrected, to have your data deleted, to restrict how we use it, and to receive your data in a commonly used format. You can withdraw any of your consents at any time by contacting info@dura.studio. Withdrawing consent does not affect the lawfulness of processing done before the withdrawal.

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

8. Security

Access to the registry is limited to Dura Studio staff who need it for running Dura Makers. Our accounts are protected with strong passwords and two-factor authentication.

9. Changes to this policy

We may update this policy as Dura Makers develops, for example when we move the registry to our own platform. We will notify registered producers of any significant changes.