Privacy notice

English summary

Genuine Finland is a service operated by Planskape in Finland. We process only the information needed to provide visitor favorites, provider accounts, listings, memberships, payments, support and optional analytics.

Controller and contact

Data we process

• Account email, authentication identifiers and login records.
• Provider profile, contact details, listings and uploaded images.
• Membership status and payment transaction records.
• Favorites linked to an account or stored only in the browser.
• With consent, a random browser identifier and listing views, favorites, website/contact clicks, directions opened and Google Analytics website usage data such as viewed pages, device and approximate location information.
• Privacy requests and membership reminder preferences.

Purposes and legal grounds

Account, listing, membership and payment data are processed to provide the requested service and fulfil the provider agreement. Payment and accounting records are also retained to meet legal obligations. Optional engagement analytics are processed only after consent and can be refused or withdrawn at any time.

Sources, required data and sharing

Most data comes directly from you. Authentication and payment providers return the technical status needed to confirm an account or payment. Account and payment details required to create an account, publish listings or buy a membership are marked in the relevant form. Optional profile fields and analytics consent are voluntary. We do not sell personal data.

Service providers

• Supabase: accounts, database, files and server functions
• Paytrail: membership payment processing
• Hostinger: domain, application hosting and business email
• Google Analytics: consent-based website usage analytics

Retention

When a provider membership is cancelled, public listings are unpublished immediately. The provider profile, draft listings and images are kept privately for 90 days so the provider can return, then scheduled for deletion unless the membership is reactivated. Providers can instead request account and data deletion during cancellation. Payment and accounting material may still need to be retained after account closure for the periods required by Finnish law. Data no longer needed is deleted or anonymised.

Browser storage, transfers and automated decisions

Essential browser storage keeps language, session, favorites and consent choices working. Optional analytics starts only after consent. Service providers may process data in the EEA or, where necessary, under the transfer safeguards required by data protection law. Genuine Finland does not make decisions with legal or similarly significant effects solely by automated processing.

Your rights

Depending on the situation, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw analytics consent at any time. Signed-in providers can download account data or submit a deletion request from Profile. Requests are answered without undue delay and generally within one month. You may also complain to the Finnish Data Protection Ombudsman. More information is available at tietosuoja.fi.