Privacy is part of the service.

Data controller

Membri Oy
Business ID: 2618304-4

Privacy contact

Tomi Kouva
tomi@membri.fi
050 321 9589

What information we process and where it comes from

We primarily receive information directly from you when you use the contact form or contact us. The form collects your name, organisation, email address, selected topic and message. Please do not include sensitive personal information that is not needed for your enquiry.

Operating and securing the website also requires technical event information. The server logs, for example, the time of a request, its route and response status. The website infrastructure provider may process technical information needed to deliver the connection, such as your IP address and browser information.

Why we process information and our legal bases

• We respond to enquiries, assess requests and prepare possible cooperation. Depending on the request, the legal basis is taking steps at your request before entering into a contract or our legitimate interest in managing business correspondence (GDPR Article 6(1)(b) or (f)).
• We maintain the operation and security of the website on the basis of our legitimate interest in providing a secure online service (GDPR Article 6(1)(f)).
• Google Analytics 4 on the published website is processed only with your prior consent (GDPR Article 6(1)(a)).

How long we keep information

We keep contact enquiry information only for as long as needed to handle the enquiry, follow up and address any related legal claims. We delete or anonymise it when there is no longer a reason to keep it. Technical logs are retained in service providers’ systems according to their operational and security practices. Your cookie choice is saved in browser local storage for 6 months. The _ga and _ga_* Analytics cookies have a maximum duration of 2 years. GA4 event and user data retention depends on the Analytics account settings.

Who receives the information and where it is processed

We do not sell personal data. We use the following services, which may receive website or enquiry information:

• Replit: website hosting and the technical service that handles contact requests.
• Replit Connectors and Resend: transmitting contact-form messages to Membri Oy by email. The message includes the details you entered in the form.
• YouTube: an embedded video on the website uses YouTube’s privacy-enhanced embed mode. When you open the page containing the video or play it, your browser connects to YouTube, and technical information such as your IP address and browser details may be shared with Google.

Service providers and their subprocessors may process technical information or messages outside the EU or EEA. Where international transfers take place, the safeguards required by applicable data-protection law apply. Please refer to each provider’s own privacy information for further details of its processing.

Google Analytics and cookies

The published website uses Google Analytics 4 only if you accept analytics. The Google tag does not load and no analytics data is sent to Google before consent. Accepting and rejecting are equally available. You can change your choice at any time using Cookie settings in the footer. Withdrawing consent stops tracking, removes the website’s Analytics cookies and reloads the page. Rejecting analytics does not prevent use of the website’s core features. Analytics is not active in the development preview.

Analytics measures visits and page views to help improve the website. Google may process the page address and title, technical browser and device information, and cookie-based identifiers. Query parameters and URL fragments are removed from page views sent by this website. We do not send names, email addresses, organisation details or messages submitted through the form to Google Analytics. Google Signals and advertising personalisation signals are disabled in the website’s tag, and advertising-cookie consent is not granted. Google provides Google Analytics; information may also be processed outside the EU or EEA subject to applicable safeguards.

Visiting the website does not, by itself, constitute consent to analytics. More information is available in Google’s privacy policy.

Automated decisions

We do not make decisions about you solely by automated means or use contact-form information for profiling.

Protecting information

Contact messages are intended only for people responsible for handling the enquiry. Protecting information involves restricting access, using secure connections and appropriate provider security practices. This notice covers the website and correspondence through it. Personal-data processing in member services for client organisations is agreed separately with each organisation.

Your rights

Subject to applicable data-protection law, you may request access to, correction or erasure of your personal data, or restriction of processing. You may also have the right to object to processing based on legitimate interests and to receive information you provided in a portable format where the legal requirements are met.

If processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. To exercise your rights, contact tomi@membri.fi.

You may also lodge a complaint with the supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman.

Changes and contact

We will update this notice if our processing or website services change. If you have questions, contact our privacy representative:

Tomi Kouva
050 321 9589
tomi@membri.fi