Privacy policy

1. Data controller

Päivikki ja Sakari Sohlbergin säätiö, [address], business ID [business ID]. The Hyvän arjen rakentajat programme is funded and coordinated by the foundation.

2. Data protection officer and contact person

For questions concerning data protection, you can reach out to the programme’s communications lead: viestinta@har.fi · 040 789 0123. We respond within 1–3 working days.

3. Personal data we process

We process name, email, phone and area data that users provide through our forms. In connection with event registrations, we may also collect allergy or special diet information. Data collected via the join-in form is described separately in connection with the form.

4. Purpose of data use

We use the data to provide services, to communicate, to organise events and to monitor the programme’s impact. Data is not used for marketing without separate consent.

5. Data retention period

As a rule, personal data is retained for as long as it is necessary to provide the service or as required by law. Event registrations are deleted within six months of the event. Newsletter subscribers’ data is retained for the duration of the subscription.

6. Disclosure of data

Personal data is not sold or disclosed to third parties for marketing purposes. Where necessary, we disclose data to partner organisations in order to carry out activities — only to the extent required.

7. Data processors and transfers outside the EU

We use external service providers to deliver the service, and they process personal data on our behalf. A data processing agreement has been made with each of them. Personal data is not transferred outside the EU or the EEA, except for the email service mentioned below:

• Supabase – database and file storage. Data is stored in the EU (Ireland).
• Vercel – the site’s technical platform. It processes data only for the duration of page requests, and the EU has been selected as the server region.
• Resend – emails sent by the service, such as password reset messages for administrators. Data is processed and stored in the United States, and the transfer is based on the European Commission’s Standard Contractual Clauses (SCC). Emails are sent only to programme administrators and content producers, not to site visitors.
• OpenStreetMap – the maps on event pages are loaded from the OpenStreetMap service. When a map opens, the user’s IP address is transmitted to the service provider. The map does not set tracking cookies.

8. Rights of the data subject

You have the right to access, rectify and erase data concerning you. You also have the right to restrict processing, to object to processing and to transfer your data from one system to another. You can exercise your rights by contacting viestinta@har.fi.

9. Cookies

The site uses only cookies that are strictly necessary for its operation. We do not use tracking or analytics cookies, nor do we share data with ad networks, so no separate cookie consent is required. The admin login uses a technical session cookie that applies only to logged-in administrators. The map embed on event pages may store technical data in the browser to support the map’s functionality.

10. Changes to the privacy policy

We may update this privacy policy as needed. Significant changes will be announced on the front page. The date the policy was last updated is shown at the bottom of the page.