Privacy Policy

Data Controller

Data Collected

We collect the following information when organizations register with the service:

• Organization name
• Business ID
• Website address
• Organization description
• Specialization areas
• Target group
• Operating regions
• Contact person's name
• Contact person's email
• Additional notes (optional)

Legal Basis for Processing

We process personal data based on the data subject's consent (GDPR Article 6.1.a) and legitimate interest for maintaining the directory service (GDPR Article 6.1.f).

Purpose of Processing

• Displaying organizations in the directory
• Contacting registered organizations
• Maintaining and developing the service

Sharing Data with Third Parties

We use the following service providers for data processing:

• Supabase – Database service (data storage)
• Resend – Email service (confirmation emails)

Data Retention

We retain data as long as the organization is registered with the service. After deregistration, data is deleted within a reasonable time.

Data Subject Rights

You have the following rights regarding your personal data:

• Right to access your data
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

You can exercise your rights by contacting: iivo@viran.fi

Supervisory Authority

Office of the Data Protection Ombudsman

tietosuoja.fi