Privacy Policy

Data Controller

Data Collected

We collect the following information in connection with the service and the pilot program:

• Organization name
• Business ID
• Website address
• Organization description
• Specialization areas
• Target group
• Operating regions
• Contact person's name
• Contact person's email
• Additional notes (optional)

Legal Basis for Processing

We process personal data based on the data subject's consent (GDPR Article 6.1.a) and legitimate interest for maintaining and improving the service (GDPR Article 6.1.f).

Purpose of Processing

• Service usage and related documentation
• Contacting organizations participating in the pilot
• Maintaining and developing the service

Sharing Data with Third Parties

We use the following service providers for data processing:

• Supabase – Database service (data storage)
• Resend – Email service (confirmation emails)

Data Retention

We retain data for as long as the pilot or service usage is active. After use ends, data is deleted within a reasonable time.

Data Subject Rights

You have the following rights regarding your personal data:

• Right to access your data
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

You can exercise your rights by contacting: aaro@viran.fi

Supervisory Authority

Office of the Data Protection Ombudsman

tietosuoja.fi