Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for processing your personal data on this website is:

Sieveshjoint
Liminganraitti 10 A, 91900 Liminka, Finland
Email: response@sieveshjoint.world
Phone: +358 41 3159305

2. Scope and Purpose

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit sieveshjoint.world and interact with our informational content about outdoor activity ideas. We process data in compliance with the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act (Tietosuojalaki 1050/2018), and other applicable Finnish data protection legislation.

3. Categories of Data Collected

3.1 Data You Provide

When you use our contact form, we may collect:

  • Your name
  • Your email address
  • The content of your message
  • Your consent to data processing

3.2 Automatically Collected Data

When you visit our website, we may automatically collect technical data including:

  • IP address (anonymized where possible)
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website
  • Cookie preferences stored in localStorage

4. Legal Basis for Processing

We process personal data based on the following legal grounds under GDPR Article 6:

  • Consent (Art. 6(1)(a)): For analytics and marketing cookies, and when you submit the contact form with GDPR consent.
  • Legitimate Interest (Art. 6(1)(f)): For website security, fraud prevention, and improving our informational services.
  • Contractual Necessity (Art. 6(1)(b)): To respond to your inquiries submitted via the contact form.
  • Legal Obligation (Art. 6(1)(c)): When required to comply with applicable laws.

5. Purposes of Processing

We use your personal data for the following purposes:

  • Responding to your contact inquiries
  • Providing and improving our website content
  • Analyzing website usage (with your consent)
  • Ensuring website security and functionality
  • Complying with legal obligations

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

  • Contact form data: Up to 24 months after your last communication, unless a longer period is required by law.
  • Analytics data: Up to 26 months, subject to your cookie consent.
  • Cookie consent records: Stored locally on your device until you clear browser data.
  • Server logs: Up to 90 days for security purposes.

7. Data Sharing and Transfers

We do not sell your personal data. We may share data with:

  • Hosting and infrastructure providers located within the EU/EEA
  • Analytics and online advertising service providers (only with your explicit consent)
  • Legal authorities when required by law

If data is transferred outside the EU/EEA, we ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or an adequacy decision are in place, in accordance with GDPR Chapter V.

8. Online Advertising

We may use online advertising platforms, including Google Ads, to promote our informational content. When marketing cookies are enabled with your consent, advertising partners may collect data about your visits to measure campaign performance and display relevant content. You can withdraw consent for marketing cookies at any time via our cookie banner or by contacting us. For more details, see our Cookie Policy.

9. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you within the meaning of GDPR Article 22.

10. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access: Request a copy of your personal data.
  • Right to rectification: Request correction of inaccurate data.
  • Right to erasure: Request deletion of your data where legally applicable.
  • Right to restriction: Request limitation of processing in certain circumstances.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Withdraw consent at any time without affecting prior lawful processing.

To exercise your rights, contact us at response@sieveshjoint.world. We will respond without undue delay and, in any event, within one month as required by GDPR Article 12. This period may be extended by two further months where necessary, taking into account the complexity and number of requests; we will inform you of any such extension.

If you are dissatisfied with our response, you have the right to lodge a complaint with a supervisory authority. In Finland, the competent authority is:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, access controls, regular security assessments, and staff training on data protection practices.

12. Cookies

For detailed information about cookies used on this website, please see our Cookie Policy.

13. Children's Privacy

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Data Protection Officer

We are not required to appoint a Data Protection Officer under GDPR Article 37. For all data protection enquiries, please use the contact details in Section 1.

15. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this page indicates the last revision. We encourage you to review this policy regularly.