Privacy policy

When you visit the website, technical information necessary to deliver and secure the site may be processed, such as your IP address, browser and device information, requested pages and timestamps.

The purpose of this processing is to operate, deliver and protect the website. The legal basis is our legitimate interest in operating the website securely (Article 6(1)(f) GDPR).

We also use privacy-preserving analytics to obtain aggregate statistics about use of the website. To the extent this involves processing personal data, the legal basis is our legitimate interest in measuring and improving the website (Article 6(1)(f) GDPR).

You are not required by law or contract to provide personal data when visiting the website. However, certain technical data is processed automatically and is necessary to deliver and secure the website.

4. Cookies and analytics

The website does not use cookies, advertising pixels or cross-site tracking technologies.

Our analytics do not use cookies or persistent identifiers and do not store or read information on your device. We receive only aggregate usage statistics that cannot be attributed to an individual.

5. Recipients and international transfers

Personal data may be processed by service providers acting on our behalf, including website hosting and analytics providers.

Personal data may be processed outside the European Economic Area where our service providers or their sub-processors operate. Where required, such transfers are based on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses. Further information about applicable safeguards is available on request from privacy@toihan.com.

6. Retention

Technical logs are deleted or anonymised when they are no longer required to operate and secure the website. If information is needed to investigate abuse or a security incident, it is retained until the investigation and any related legal claims are concluded.

Framer Analytics uses a daily rotating secret that is deleted each day. Toihan receives only aggregate analytics statistics.

7. Your rights

Depending on the circumstances and the legal basis for processing, you may have the right to:

access your personal data;
correct inaccurate personal data;
request the erasure or restriction of processing of your personal data;
object to processing based on legitimate interests; and
receive personal data you have provided in a structured, commonly used and machine-readable format where the right to data portability applies.

Requests may be sent to privacy@toihan.com.

You also have the right to lodge a complaint with a supervisory authority. The supervisory authority in Finland is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

Legal notice