Privacy Policy

Last updated: 28 April 2026

We do not use contact forms, user accounts, newsletters, or advertising trackers on this website.

We use Plausible Analytics to understand general website traffic and improve the site. Plausible is a privacy-friendly analytics service designed to work without cookies and without collecting personal data in the traditional tracking sense.

When you visit this website, we process the following usage data for audience measurement:

page URLs visited
referral source, such as the site or channel you came from
browser type
operating system
device type
country-level location
date and time of visit

This information is used only to measure overall website traffic and to improve website content and performance. While Plausible is designed to process this information in aggregated form without singling out individual users, to the extent any such information constitutes personal data, it is processed in accordance with this Privacy Policy.

We use Plausible Analytics on this website.

Plausible is a lightweight analytics tool that does not use cookies and is designed to avoid collecting personal data. The standard WordPress integration is provided through Plausible’s official plugin/documentation.

We use this analytics data to:

measure overall website traffic
understand which pages are visited most
see how visitors arrive at the website, for example from search engines or other websites
improve website content and performance

We do not use analytics for advertising, profiling, or behavioural marketing.

This website does not use cookies for analytics. Plausible’s standard analytics setup is cookieless.

The following strictly necessary technical cookies are set by our website platform and hosting provider:

Cookie name: __cf_bm
Provider: Cloudflare, Inc.
Purpose: Bot detection and mitigation to protect the website from automated traffic

Cookie name: wp-wpml_current_language
Provider: OnTheGoSystems (WPML)
Purpose: Stores the visitor’s current language preference to ensure the correct language version of the site is displayed

These cookies are set for strictly necessary security and functionality purposes only and are not used for advertising or analytics. To the extent any information processed in connection with these cookies, such as IP addresses or cookie identifiers, constitutes personal data, it is processed in accordance with this Privacy Policy and on the basis of our legitimate interests in protecting the security and integrity of this website.

The legal basis for our processing of analytics data is Article 6(1)(f) of the GDPR (legitimate interests). Our legitimate interests are: (i) understanding how our website is used; and (ii) improving the performance and content of our website.

We have assessed that our legitimate interests are not overridden by your interests or fundamental rights and freedoms, taking into account in particular the privacy-friendly nature of the analytics tool we use (cookieless, no cross-site tracking, no advertising use). As described in Section 8 below, you have the right to object at any time to processing of your personal data on the basis of our legitimate interests.

We do not sell your personal data.

We share personal data with the following recipients:

Miltton (Miltton Digital Oy, located in Helsinki, Finland), our website development and management service provider, acting as a data processor on our behalf in connection with the technical management of this website.
Plausible Analytics (Plausible Insights OÜ, located in Tartu, Estonia), our analytics service provider, acting as a data processor on our behalf. Plausible processes website usage data solely for the purpose of providing analytics services to us.
WPEngine (WPEngine, Inc., located in Austin, Texas, USA), our website hosting provider, which has access to data as part of providing hosting services.
Cloudflare (Cloudflare, Inc., located in San Francisco, California, USA), our website security provider, which processes technical data including IP addresses as part of providing bot management and security services to protect this website from automated traffic. Cloudflare processes this data solely as a data processor on our behalf.

We do not share personal data with any other third parties except where required by law.

Where we transfer personal data to the United States, we rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, adopted under Article 45 of the GDPR, provided that the recipient is certified under the EU–US Data Privacy Framework and included on the Data Privacy Framework List maintained by the U.S. Department of Commerce. If a recipient is not, or is no longer, certified under the EU–US Data Privacy Framework, we will rely on an alternative transfer mechanism under Article 46 GDPR (such as Standard Contractual Clauses) or another applicable safeguard.

Analytics data processed through Plausible Analytics is retained for 5 years from the date of collection, after which it is deleted automatically. Any technical data processed for security purposes is retained only for the period necessary to provide those security services, which is typically a matter of days. Data processed in connection with the hosting of this website is retained for the duration of our hosting arrangement. We will update this notice if any retention period changes.

Under the GDPR, you have the following rights in relation to your personal data:

You may request confirmation of whether we process personal data about you and, if so, access to that data.
You may request correction of inaccurate personal data.
You may request deletion of your personal data in certain circumstances.
You may request that we restrict processing of your personal data in certain circumstances.
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

The analytics data described in this Privacy Policy is collected automatically when you visit this website. You are not required by law or contract to provide it.

We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

If you wish to exercise any of your rights or have questions about this Privacy Policy, please contact us at [email protected].