Privacy Policy
Saaristenniemi.fi
1372910-8 VV Linna Tmi
1. Data Controller
The data controller of the register is Enja Heikkilä
The contact person for registration matters is: Enja Heikkilä
Email: saaristenniemi@gmail.com
2. Name of the register
The name of the register is Saaristenniemi.fi's customer register.
3. Data collected
a. Analytics data:
The services below collect anonymized information about website visits without personal information.
Google Search Console: We use Google Search Console to improve the visibility of our website in search engines.
b. Form data:
Our website has a form where you can send us messages. We do not collect or store the information you enter. When you send a message using the form, we will receive an email in which the information you enter is visible. The data will not end up in a database.
4. Use of Information
We collect and use information for the following purposes:
Improving the visibility of the site: We use analytics data (Google Search Console) to improve visibility.
Contact: The information you provide on the form is used to contact you and respond to your requests.
5. Sharing of Information
We do not sell, trade or otherwise transfer your personal information to third parties.
6. Cookies
We do not use cookies.
7. Your rights
The data subject has the following rights under the EU General Data Protection Regulation:
The right to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed and, where such personal data are being processed, the right to access the personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipients to whom the personal data have been or are to be disclosed; (iv) where possible, the planned storage period for the personal data or, where that is not possible, the criteria for determining that period; (v) the right to obtain from the controller rectification or erasure of personal data concerning him or her, restriction of processing or to object to such processing; (vi) the right to lodge a complaint with a supervisory authority; (vii) where personal data are not collected from the data subject, all available information on the origin of the data (GDPR Art. 15). These basic information (i)-(vii) described are provided to the data subject by this form;
the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal (GDPR Art. 7);
the right to obtain from the controller the rectification of inaccurate or incorrect personal data concerning the data subject without undue delay and the right to have incomplete personal data completed, including by providing additional information, taking into account the purposes for which the data were processed (GDPR Art. 16);
the right to obtain from the controller the erasure of personal data concerning the data subject without undue delay, provided that (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) the data subject withdraws the consent on which the processing was based and there is no other legitimate ground for the processing; (iii) the data subject objects to the processing on grounds relating to his or her particular situation and there are no compelling reasons for the processing or the data subject objects to the processing for direct marketing purposes; (iv) the personal data have been processed unlawfully; or (v) the personal data must be erased for compliance with a legal obligation to which the controller is subject under Union or national law (GDPR Art. 17);
the right to obtain from the controller restriction of processing where (i) the data subject contests the accuracy of the personal data, in which case the processing shall be restricted for a period of time during which the controller may verify their accuracy; (ii) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; (iii) the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or (iv) the data subject has objected to the processing of the personal data on grounds relating to his or her particular situation, pending verification whether the legitimate grounds of the controller override those of the data subject (GDPR Art. 18);
the right to receive the personal data concerning him or her, which the data subject has provided to the controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, where the processing is based on consent as referred to in the Regulation and is carried out by automated means (GDPR Art. 20);
the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the EU General Data Protection Regulation (GDPR Art. 77).
Requests for the exercise of the data subject's rights shall be addressed to the contact person of the controller mentioned in Section 1.
8. Recipients (groups of recipients) of personal data and regular disclosure of data
Personal data will not be disclosed to third parties.
9. Transfer of data outside the EU or EEA
Personal data contained in the register will not be transferred outside the EU or EEA.
10. Contact information
If you have any questions about this privacy policy or want to exercise your rights, you can contact us:
Enja Heikkilä
saaristenniemi@gmail.com
11. Changes to the privacy policy
We may update this privacy policy. Changes will become effective when they are published on this page.
Last updated: 22.1.2026