Privacy Policy

This is an English translation of the Finnish privacy policy. In case of any discrepancy, the Finnish version prevails.

Introduction

The purpose of this privacy policy for the Tekoälyfoorumi website (tekoalyfoorumi.fi) is to explain clearly to users how personal data is collected, used, and protected. We process personal data in accordance with the requirements of the European Union’s General Data Protection Regulation (GDPR).

This policy covers all of our services, including use of the website and other related functions. By using our site, you accept that we process your data as described in this policy. If you do not accept these practices, we ask that you do not use our site.

Controller and contact details

The controller (the party responsible for processing your personal data) is Legit AI Oy, which operates the Tekoälyfoorumi website. If you have questions about this privacy policy, want to make a data request, or wish to exercise any of the rights described below, you can contact us:

You can send all privacy-related questions and requests to the email address above. We handle enquiries promptly and confidentially. Where necessary, we may ask for additional information or verification of your identity before we can act on your request, so that we can ensure data security and avoid disclosing data to the wrong person.

We process personal data only for purposes defined in advance and on legal bases permitted by the GDPR. The most common bases and purposes for processing on our site are:

  • Providing the service and managing user accounts: We process your data so that we can provide you with the services of the Tekoälyfoorumi site, such as maintaining your user account, enabling your participation in discussions and publications, and providing user support. This processing is based on a contract with you or on our legitimate interest in ensuring the service works.

  • Communication: We use contact details to communicate with you. We may send important information about the service, updates to the terms of use or the privacy policy, or replies to messages and support requests you send us. This processing is based mainly on performance of a contract (for example, answering user support requests) or on our legitimate interest in communicating with the users who deal with us. If we send you marketing messages or newsletters, we ask for your consent in advance, and you can withdraw that consent at any time.

  • Site development and analytics: Personal data (in particular technical data and data collected by cookies) is used to monitor, analyse, and develop use of our service. This helps us understand how people use the site and improve its content, features, and user experience. The basis for processing here is our legitimate interest in developing our web service and ensuring its quality. Analytics is generally carried out in statistical form, and we do not use it to identify individual users.

  • Security and preventing misuse: We may process personal data to protect the site and users’ data and to prevent fraud, misuse, or breaches of the terms of use. For example, log data may be used to investigate faults and detect suspicious login attempts. Such processing is based on our legitimate interest in protecting our business and ensuring the security of the service, and where applicable on compliance with statutory obligations.

  • Statutory obligations: We also process personal data in order to comply with laws and official requirements that may bind us. For example, accounting legislation may require certain transaction data to be retained, or we may be obliged to disclose data to authorities on the basis of a lawful request. In such cases the basis for processing is compliance with a legal obligation.

Your personal data is processed only for the purposes described in this policy. We do not use the data for other purposes without your consent. If we later intend to process the data for a materially different purpose, we will inform you in advance and, where necessary, ask for your consent.

Retention periods

In short: we retain your data only for as long as it is necessary, and we delete or anonymise data once there is no longer a justified need for it. We retain personal data only for as long as is necessary to fulfil the purposes described in this policy and to provide the service, or for as long as the law requires.

Retention periods may vary depending on the nature and purpose of the data:

  • Data relating to a user account is retained in principle for as long as you have an active user account on Tekoälyfoorumi. If you decide to close your account or ask for it to be deleted, we will delete or anonymise that personal data within a reasonable time, unless we have a justified reason (for example, a legal obligation or the resolution of a dispute) that makes longer retention necessary.

  • Customer service and communication data (such as emails and support requests) is retained for as long as is necessary to handle your matter and any follow-up. For example, if you have contacted us with a question, we retain the exchange at least until your matter has been resolved.

  • Analytics and usage data is generally retained in identifiable form for a shorter period. We aim to anonymise or aggregate such data if it is to be retained longer for statistical purposes.

  • Retention periods required by law: Some data must be retained for the period the law requires. For example, data included in accounting records may be retained for up to 6 years from the end of the financial year in accordance with Finnish accounting legislation.

Your right to request deletion: You have the right to request deletion of your personal data at any time (see rights below). We carry out deletion requests without undue delay, provided there is no statutory or other compelling basis for retaining the data. After deletion we may, where possible, retain some basic data (such as an email address) in order to prevent re-registration or to make sure new data is not inadvertently recorded (for example, if your email address is used again to subscribe to the newsletter).

Protecting personal data

The security of the personal data you give us matters to us. We use appropriate technical and organisational safeguards to prevent unauthorised access to data and the disclosure, alteration, or destruction of data. Such measures include firewalls and secure server connections, password-protected databases, and encryption methods where necessary. We also make sure that only those people who need it for their work (for example, employees or contractors involved in running Tekoälyfoorumi) can access personal data. They are bound by a duty of confidentiality.

Although we do our best to protect data, it is worth remembering that no transfer of data over the internet and no electronic storage method is entirely watertight. We do, however, continuously update our security practices in line with the risks.

Sharing personal data

We do not sell, rent, or otherwise disclose your personal data to outside third parties for marketing purposes. We share personal data with outside parties only in the following situations:

  • Delivering the service (subcontractors and service providers): We may use trusted third parties to help us deliver the service. These may include, for example, a website maintenance or hosting provider, an analytics or statistics service, an email delivery service for newsletters, or other similar technical service providers. These parties process personal data only on our behalf and according to our instructions (acting as processors) and only for the purposes described in this privacy policy. We ensure by contract that our service providers comply with data protection obligations and protect your data appropriately.

  • Statutory obligations and court orders: We may disclose your personal data to authorities or other parties if the law so requires or if data is demanded from us by a court decision. Such situations may include, for example, official requests relating to a criminal investigation or an obligation to disclose data to the tax authorities. We disclose data only to the extent the law requires and always verify that the requesting party has the right to demand the data in question.

  • Corporate transactions: If our business is sold, merged with another company, or restructured (for example, a merger or acquisition), your personal data may be transferred as part of the transaction or arrangement. In that case we ensure that the data continues to be used for compatible purposes and that appropriate data protection is maintained. We will notify you if your data is to be transferred to another controller under this clause.

We always aim to minimise sharing with outside parties. If personal data is transferred outside the EU/EEA (for example, if one of our service providers is located in or stores data outside the EU), we ensure that the transfer has a lawful basis and that the level of data protection is adequate (for example, the European Commission’s standard contractual clauses or the recipient’s commitment to comply with the EU-U.S. Data Privacy Framework). We inform users of significant changes to how data is shared.

Use of cookies

We use cookies and similar tracking technologies on our site to improve the user experience, analyse use of the site, and provide a smoother service. Cookies are small text files stored on your device when you visit a website.

Here is how we use cookies:

  • Strictly necessary cookies: Some cookies are essential to the operation of our site. They enable basic functions and help ensure the security of the site. Without these cookies the site may not work correctly.

  • Functional cookies: We use cookies to remember your choices and settings (for example, language selection or other preferences), so that using the site is smoother and more personal for you.

  • Analytics cookies: Cookies help us collect information about how people use our site. For example, we may learn about page loads, the length of visits, and where users arrive from. This information is used to develop the service. We may use third-party analytics tools, which set their own cookies to collect anonymised data about visitor numbers and behaviour. These third parties may therefore receive some technical information about your visit. We do not, however, disclose your personal data to them directly, and they use the data in accordance with their own privacy policies.

  • Marketing and targeting cookies (where applicable): If content or advertising that is meant to be tailored to the user is shown on our site, targeting cookies may be used. These cookies collect information about your browsing habits so that we can show content matching your interests. At present Tekoälyfoorumi does not necessarily use external advertising cookies, but we reserve the right to add such functions in the future, in which case we will update this policy.

Managing cookies: When you arrive on the site, you are asked to accept the use of cookies via a cookie banner. You can manage cookie settings at any time from your browser settings. In your browser settings you can block cookies entirely or delete cookies that have already been set. Please note, however, that blocking cookies may affect how the site works; certain features may not function without cookies.

Other tracking technologies (such as pixel tags or local storage) may be used for similar purposes. Whenever we use such technologies, we aim to protect your privacy and use the data for the purposes described in this policy.

For more information about cookies and how to manage them, please contact us: toimitus@tekoalyfoorumi.fi.

Your rights

As a user you have data protection rights that let you influence how your personal data is processed. We offer you all the rights provided by the GDPR, and you can exercise them at any time by contacting us (toimitus@tekoalyfoorumi.fi). Here is a summary of your key rights:

  • Right of access: You have the right to obtain confirmation of whether we process personal data concerning you, and the right to request a copy of the personal data we hold about you. On request you will receive a copy of your own data in written or electronic form.

  • Right to rectification: If you find that personal data concerning you is incorrect or incomplete, you have the right to request that it be corrected or completed. We want to keep your data up to date, so we correct errors without delay once we are made aware of them.

  • Right to erasure (“right to be forgotten”): In certain situations you have the right to request that your personal data be deleted from our records. You may, for example, request deletion if the data is no longer needed for the purpose for which it was collected, or if you withdraw your consent and there is no other lawful basis for processing. We delete the data you request without undue delay, unless we have a compelling reason to continue processing (for example, a statutory obligation).

  • Right to restriction of processing: You have the right to request restriction of the processing of your personal data in certain situations. This means we retain the data but do not otherwise process it without your consent. You may make such a request if, for example, you contest the accuracy of the data (processing is restricted for the period we need to verify accuracy) or if you consider processing unlawful but do not want the data deleted.

  • Right to object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on legitimate interest. You also always have the right to object to the processing of your data for direct marketing purposes. If you object, we will no longer process your data for the purpose you objected to, unless there are compelling legitimate grounds for the processing or it is necessary for the establishment, exercise, or defence of legal claims.

  • Right to data portability: To the extent that you have provided us with data that we process by automated means on the basis of your consent or a contract, you have the right to receive that data in a structured, commonly used, machine-readable format, and the right to transmit it to another controller. In other words, on your request we can transfer (or enable you to transfer) certain data directly to a party of your choosing, where technically feasible.

  • Withdrawing consent: If we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. If you withdraw your consent, we will stop processing your data on that basis.

  • Right to lodge a complaint with a supervisory authority: If you consider that we have processed your personal data contrary to data protection rules, you have the right to lodge a complaint with the competent data protection authority. In Finland the supervisory authority is the Office of the Data Protection Ombudsman. That said, we also welcome feedback directly from you and aim to resolve any problems in good cooperation.

You can exercise the rights above by contacting us. We respond to requests without undue delay and at the latest within the period required by law (generally within one month). Please note that before acting on requests we need to verify your identity, so that we can protect your data against misuse.

Changes and updates to this policy

We develop our service continuously, and we may update this privacy policy from time to time to reflect changing practices, legislation, or features of our service. We therefore recommend that users check the content of this policy regularly to stay up to date.

If we make material changes to this privacy policy, we will notify users in an appropriate way. We may, for example, publish a notice on our site or send an email if the changes are significant and you have a user account or have otherwise given us your contact details for this purpose. The date of the most recent update is shown at the end of the policy, so you can see when changes were last made.

By continuing to use our site after updates to the privacy policy, we consider that you have accepted the updated terms. If you do not accept the changed policy, you can always stop using our site and ask us to delete your data.

Last updated: 11 March 2025.