Skip to content
Aappo Keränen
fi

Privacy

Privacy notice

Data controller

The site is operated by Aappo Keränen, who acts as the data controller.

Contact for privacy matters:

Data collected and purposes of processing

Analytics

This site uses Umami Analytics to collect visitor statistics. Umami collects anonymised usage data: page views, visit duration, referring site, browser type and visitor country. Umami does not store IP addresses and does not use cookies. Individual visitors cannot be identified from the collected data.

Analytics data is used to improve the site, plan content and enhance the visitor experience. Processing is based on legitimate interest under Article 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation).

Email enquiries

When you send an email to the controller’s contact address, the message is routed through Cloudflare Email Routing to a Google account (Gmail), where it is read and processed. Emails contain personal data such as the sender’s name, email address and message content.

Emails are processed to handle your enquiry. Processing is based on legitimate interest under Article 6(1)(f) of the GDPR. Messages are retained for as long as necessary to handle the enquiry.

Cookies and browser storage

The site does not use cookies. If you change the site theme (light/dark), your choice is saved in your browser’s local storage (localStorage) to improve your experience. This information is not sent anywhere and cannot be used to identify you. You can clear it at any time from your browser settings.

Data retention

Analytics data

Analytics data is stored in Umami Cloud on servers located within the EU. Data is retained for as long as necessary to develop the site, typically for up to two years.

Server logs

The site is hosted by Vercel Inc. (USA). Vercel may store server-level log information (such as IP addresses) in accordance with its own policies. For more information: vercel.com/legal/privacy-policy.

Data transfers and disclosure

The site relies on the following third-party processors for the purposes described in this notice. Data may be transferred outside the EU under the European Commission’s Standard Contractual Clauses (SCC).

  • Umami Software LLC (USA) – analytics (data stored in the EU)
  • Vercel Inc. (USA) – site hosting and server logs
  • Cloudflare Inc. (USA) – email routing
  • Google LLC (USA) – email reception and storage (Gmail)

Apart from these processors, data is not disclosed to third parties. Data is not used for marketing and is not sold onward.

Automated decision-making

The site does not make automated decisions or perform profiling.

Your rights as a data subject

The analytics data collected on the site is anonymised and cannot be linked to an individual, so in practice there is no need to exercise these rights for analytics purposes. For personal data you send by email, you have the right to request access to your data, its rectification, erasure, restriction of processing, data portability and to object to the processing.

If you believe your personal data is being processed in violation of the GDPR, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman: tietosuoja.fi.

This privacy notice was last updated on 15 April 2026.