Who is responsible for your data?
The data controller is Lauri Lavanti. You can send any questions or requests about data protection by email to lauri@lavanti.fi.
What data does the newsletter collect?
Lauri Lavanti publishes an electronic newsletter, which you can subscribe to through Lauri Lavanti’s website. The newsletter is sent by email to subscribers (opt-in). Personal data is used solely for sending the newsletter and for tracking where subscriptions come from, and the legal basis for processing it is your consent.
For each subscriber, we store the email address and, if you arrived through a campaign link, which link it was (for example linkedin and an identifier for the post). The link data is used only to assess which posts bring in subscribers, and it is reported only as aggregate totals. Personal data is retained only as long as necessary for sending the newsletter (until the subscription is canceled or the newsletter service is discontinued).
Each newsletter includes an option for subscribers to unsubscribe. The personal data of those who unsubscribe is promptly deleted.
The subscription form is loaded from MailerLite’s servers only when the form comes into view on the page. When the form loads, MailerLite receives your browser’s standard technical data, such as your IP address, even if you do not subscribe. The legal basis for this processing is the legitimate interest in offering the site’s readers a way to subscribe.
Disclosure and transfer of personal data
MailerLite Limited acts as the data processor on behalf of Lauri Lavanti.
Personal data is not disclosed for direct marketing, opinion research, or market research purposes.
The data is stored within the EU/EEA. If MailerLite’s subprocessors process data outside the EU/EEA, the transfer is based on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Signing up as a volunteer
You can sign up as a campaign volunteer with the form on the join page. The form collects your name and email address and, if you wish, your phone number, municipality and how you would like to help. We also store when you signed up, when you gave your consent and, if you arrived through a campaign link, which link it was.
The data is used only so that the campaign can contact you about volunteering and agree on tasks with you. Signing up reveals your political opinion, so the data belongs to a special category of personal data. The legal basis for processing is your explicit consent, which you can withdraw at any time.
Only Lauri Lavanti, the campaign manager and the campaign’s volunteer coordinator can see the data. It is stored in a Cloudflare database whose data stays in the EU. Cloudflare acts as a processor on Lauri Lavanti’s behalf. All sign-ups are deleted by 31 July 2027 at the latest, and you can ask for your data to be deleted earlier by emailing lauri@lavanti.fi. Deleted data also disappears from the database backups within 30 days.
The form uses a Cloudflare Turnstile check to prevent spam. During the check, Cloudflare processes your browser’s technical data, such as your IP address, but it is not stored with your sign-up.
Visitor statistics
Visitor numbers are tracked with Simple Analytics. It uses no cookies and stores neither IP addresses nor any other data that could identify an individual visitor. The statistics show, for example, which pages are read and where visitors come from. It also counts how many times the donate button has been clicked, and on which page. For each visit, the donation link (lavanti.fi/lahjoita) records only the time to the hour and the campaign link you came through, before redirecting you to the Greens’ donation form. Simple Analytics is a Dutch company that processes the data within the EU. Because the statistics contain no personal data, collecting them does not require your consent.
Videos
YouTube videos on the site are loaded from youtube-nocookie.com only when you press the play button. Nothing is sent to YouTube before that. When you start a video, Google receives your browser’s technical data, such as your IP address, and Google’s privacy policy applies to playback.
Hosting
The site is served from Cloudflare’s servers. Cloudflare processes your IP address and your browser’s technical data to deliver the page to you and to protect the service against abuse. The legal basis is the legitimate interest in keeping the site running and secure. Cloudflare, Inc. is a US company, and the transfer is based on the EU–US Data Privacy Framework.
Your data protection rights regarding the processing of personal data
Right to information about the processing of personal data
- You have the right to know the purposes and methods of processing your personal data.
- We aim to provide a comprehensive overview of our data protection practices and the processing of personal data in our operations through this description. If any aspect of our processing remains unclear, we have not succeeded in our goal. In such cases, you may ask for clarification by sending your questions to Lauri Lavanti via email (lauri@lavanti.fi).
- More information on data subjects’ rights from the Data Protection Ombudsman.
Right of access
- You have the right to know whether we process your personal data. If we do, you have the right to obtain a copy of this data unless we have a legal basis to refuse the request.
Right to rectification
- If the personal data we process about you is inaccurate, you may request that we correct it.
Right to erasure and to withdraw consent
- You can withdraw your consent to receiving the newsletter at any time and ask us to delete the data we hold about you. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to restrict and to object to processing
- If you believe the personal data we process about you is inaccurate, processed unlawfully, or you have objected to the processing, you may request that we restrict the processing of your data.
- You can object to processing based on legitimate interest, such as the processing involved in hosting the site.
Right to data portability
- You can request the data you have provided in a machine-readable format.
Right to lodge a complaint with a supervisory authority
- If you believe the processing of your personal data breaches data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman.
You can submit requests regarding your data protection rights to Lauri Lavanti via email (lauri@lavanti.fi).