Who we are
Our website address is: https://yllasavain.fi.
What personal data we collect and why we collect it
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
We use contactforms on our site. With contact forms you can send us inquiries, questions and feedback. We collect your e-mail address just to get back to you on behalf of your message. We don’t use your information for marketing purposes.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Access to information is protected by personal usernames and passwords. We do not share your information with third parties.
We do not share your information with third parties.
Data is not actively transferred outside the EU or the EEA. However, the information may be located outside the EU or the EEA, depending on the domains of different service providers, such as the website, web shop, email operator, server platform provider.
Any registrant can verify his / her personal information by sending an informal request to the controller by e-mail.
How we protect your data
The information is located on an SSL-protected server and is not accessible to anyone other than the registrar and his employees. Access to information is protected by personal usernames and passwords. The information contained in the register is part of the confidential information mentioned in the contract of employment.
Any manual material is kept in a locked state and is accessible only to relevant persons.
The register and the information system hardware handling it shall be located in enclosed data centers on the premises of the service providers. In the event of a malfunction, data is regularly backed up. The system is protected by a firewall against external communications.
Persons handling registry information are bound by the obligation of professional secrecy. Only the operator who has made the official declaration may process personal data. Information is only disclosed or disclosed to third parties as a result of a statutory obligation to disclose, such as at the customer’s own request or as a result of an authority’s statutory request.
The persons processing the data are subject to the obligations of professional secrecy pursuant to Article 33 of the Personal Data Act and the penalty provisions of Article 48.
Right to rectify data and other rights related to the processing of personal data
The user may request that his data be corrected or deleted by sending a free request to the controller by email to firstname.lastname@example.org.