Privacy Policy

Updated 15 May 2026

This privacy policy describes how Finland Map (the "service") processes data that arises from the use of the service. The purpose of this policy is to fulfil the information obligations under the EU General Data Protection Regulation (Regulation 2016/679, GDPR) and the Finnish Data Protection Act (1050/2018).

1. General data processing in the service

Finland Map is an open map service whose use does not require registration or a user account. The service is designed to collect as little personal data from individual users as possible — only to the extent necessary for the technical operation, security and development of the service.

No directly identifiable personal data, such as names, addresses, phone numbers or email addresses, is collected during normal use. Users do not need to provide any information about themselves to view the content.

2. Data processed

The following technical data may be processed automatically when using the service:

IP address (or its anonymised version) for technical operation, fraud prevention and general usage statistics.
Browser type, operating system and screen properties for technical rendering and compatibility.
Browser language setting for automatic interface language selection.
Page access time and referrer URL for general usage statistics.
User-selected search and filter settings (such as opened categories) for technical functionality and user experience customisation.

The above data is used only as aggregated anonymous usage statistics and is not linked to individual identifiable persons.

3. Legal basis for processing

The processing of personal data is based on the following legal bases under Article 6 of the GDPR:

Legitimate interest of the controller in implementing the service and its security (Article 6(1)(f)).
Consent given by the user when processing is non-essential, such as the use of analytics or advertising cookies (Article 6(1)(a)).

4. Cookies and similar technologies

The service uses cookies and similar technologies in local browser storage for the following purposes:

Essential cookies: Required for basic functionality (language selection, search, category filtering, cookie consent state). These cannot be disabled without losing service functionality.
Analytics cookies: Help understand how users use the service. Data is anonymised and used to improve the service.
Advertising cookies: Help display more relevant ads through advertising partners on the service. Partners may set their own cookies on the service pages.

Users can manage cookie settings via the service\'s cookie consent banner and their browser settings.

5. Third-party services

The following trusted third-party services are integrated into the service and may process user data according to their own privacy policies:

Google Analytics

We use Google Analytics (Google Ireland Ltd., Ireland) to collect anonymised usage statistics. Data such as viewed pages, visit duration and geographic location (country/city level) helps us improve the service. IP addresses are anonymised before processing. Google\'s privacy policy.

Umami visitor statistics

We also use self-hosted, open-source Umami analytics. It sets no cookies, stores nothing in your browser, builds no user profile and does not follow you to other websites. The collected data (page viewed, page type, browser, device type, country) is anonymous: the IP address is not stored but hashed into a daily identifier that cannot be linked to a person. Data is processed on our own server in the EU and is not shared with third parties. The legal basis is legitimate interest (improving the service). You can opt out with your browser's "Do Not Track" setting.

Google AdSense

The service displays Google AdSense ads (Google Ireland Ltd., Ireland). Google may set cookies and collect data to display relevant ads to users. Without user consent, non-personalised ads are shown. You can manage Google ad settings at Google ad settings.

Affiliate advertising

The service contains affiliate links and banners related to travel services. If you click a link and make a booking on a partner's site, the service may receive a commission. Affiliate advertising is implemented through third-party advertising networks, whose own privacy policies apply on the partners' sites.

Map services

We use open map services for map functionality. Loading map tiles may transmit the user\'s IP address and view area to these service providers\' servers.

Data may be disclosed to Finnish authorities if required by law, for example in connection with criminal suspicions.

6. Advertising sales inquiries

Through the contact form on /mainosmyynti.html we process the following data: company name, contact person's name, email address, optional phone number, selected package, device targeting and free-form message. We also store the IP address at the time of submission to prevent abuse.

The purpose of the processing is to respond to the inquiry and execute a possible advertising contract. The legal basis is the preparation and performance of a contract (GDPR 6(1)(b)) and the legitimate interest in preventing abuse (GDPR 6(1)(f)). Data is retained for 24 months from the time of submission, after which it is automatically deleted. If an advertising contract is concluded, data is retained for the period required by accounting legislation.

Advertiser data is not shared with third parties, except with the billing partner (Kevesti.fi) for contract execution, and Finnish authorities when required by law.

7. Data transfers outside the EU/EEA

Some integrated third-party services, such as Google services, may be maintained outside the EU/EEA. Such data transfers are made under EU-approved standard contractual clauses or equivalent GDPR-compliant safeguards.

8. Data retention

Technical log data (such as IP addresses in server logs) is retained for a maximum of 90 days, after which it is automatically deleted or anonymised. Anonymised aggregated usage statistics may be retained longer for service development.

Cookie validity varies by cookie; most session cookies expire when the browser is closed. The consent cookie is valid for 12 months.

9. User rights

Under the EU data protection regulation, users have the following rights regarding their personal data:

Right to access (Article 15).
Right to rectification (Article 16).
Right to erasure (Article 17).
Right to restriction of processing (Article 18).
Right to object to processing (Article 21).
Right to withdraw consent at any time.
Right to lodge a complaint with the supervisory authority, which in Finland is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Since the service does not collect identifiable personal data, most of these rights do not apply in practice to individual users.

10. Information security

The service uses encrypted communication (HTTPS/TLS) for all communication between user and server. Servers, log files and backups are protected with modern technical and organisational measures.

11. Changes to this policy

We reserve the right to modify this privacy policy due to changes in legislation, technical solutions or service functionality. Changes take effect when the updated policy is published on this page.

12. Applicable law

The processing of personal data is governed by the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act (1050/2018) and other applicable Finnish legislation. Any privacy disputes regarding the service will be handled in the general courts of Finland.