Privacy and cookie policy

Updated 4 October 2026

This policy explains what personal data Toimittaja Testasi processes, why and for how long, how we use cookies and what your rights are. We follow the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.

Controller

Paula Harmaala / Toimittaja Testasi, Business ID 2216386-3, [email protected], +358 50 360 7500

Privacy questions and requests: [email protected]

What data we process and why

SituationData processedPurposeLegal basisRetention period
Browsing the siteIP address, browser and device information, server log dataRunning the site and keeping it secureLegitimate interestFor as long as security requires, in line with our web host’s practice
Visitor analytics (only with your consent)Pages visited, clicks, device and browser information, approximate location, cookie identifierTracking visitor numbers and developing the siteConsentUp to 14 months
Cookie choiceYour choice, the time you made it and a shortened IP addressTo show that consent was givenLegal obligationFor as long as your consent is valid, up to 12 months
CommentingName, email, comment content, IP addressPublishing comments and blocking spamLegitimate interestFor as long as the comment stays published
Orders, supporter subscriptions and paymentsName, email, address, phone number, products and services ordered, payment statusDelivering orders, invoicing and customer serviceContractAs required by the Finnish Accounting Act: vouchers for 6 years, accounting records for 10 years
Contact by email or phoneName, contact details, message contentReplying to youLegitimate interestFor as long as it takes to deal with the matter
Partners and advertisersContact person’s name, title, company and contact detailsAgreeing on and running the partnershipContract / legitimate interestFor the length of the contract plus the period required by the Finnish Accounting Act

Card payments are handled by Stripe. We don’t see or store your card details.

Recipients and service providers

These service providers process data on our behalf:

  • Google Ireland Ltd – Google Analytics visitor analytics (only with your consent)
  • Stripe Payments Europe Ltd – payment processing
  • Web hosting provider – site server and maintenance in Finland
  • Automattic Inc. (Gravatar) – commenter’s profile picture, if you have created a Gravatar account

Our accountant also processes order and invoicing data to keep the statutory books.

We do not sell or rent personal data to anyone.

Transfers outside the EU

With Google, Stripe and Automattic, data may be transferred to the United States. These transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Your rights

You have the right to

  • find out what data we hold about you and get a copy of it
  • ask for incorrect data to be corrected
  • ask for your data to be deleted, unless the law requires us to keep it
  • ask for processing to be restricted
  • object to processing based on legitimate interest
  • receive the data you have provided in a machine-readable format (right to data portability)
  • withdraw your consent at any time, for example in the cookie settings

These rights cover the data Toimittaja Testasi processes. For processing by service providers such as Google and Stripe, please contact them directly.

Send your request to [email protected] and we will reply within a month.

If you think your data is being processed unlawfully, you can complain to the Office of the Data Protection Ombudsman (tietosuoja.fi).

Security

The site uses an encrypted HTTPS connection. Only the administrator can access the dashboard, and the login details are protected.

Cookie policy

Necessary cookies are always on. All others are used only if you consent. Cookies are small text files the site saves in your browser. You can find an up-to-date list of the cookies we use, who provides them and how long they last in the cookie settings.

Necessary cookies. These are needed for the site and its shop to work, for example for the shopping cart, payments and remembering your cookie choice. They can’t be turned off.

Functional cookies. These remember your choices, such as your name and email when you comment.

Analytics cookies. These collect information on how you use the site, such as which pages you visit and which links you click. We use it to improve the site and its content. The data is processed by Google Analytics.

Advertising cookies. These let advertisers show more relevant ads and limit how often you see the same one. They are used only with your consent.

You can change or withdraw your consent at any time in the cookie settings, or delete cookies in your browser settings.

Changes

We update this policy whenever our processing changes, for example when we add new services to the site. The date of the latest update is shown at the top.

Have a cookie

We use cookies to run the site, for visitor analytics and for social media content. Privacy Cookie policy