Privacy Policy
Last updated 14 November 2026
Controller
Johtela Company Oy (Business ID 3134705-8, Finland) is the controller of the personal data described here. Contact for all privacy matters: [email protected].
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name (optional), email, message and evidence you send with the contribution form | Checking your information and replying | Legitimate interest (keeping the archive accurate) | Up to 3 years, so the origin of a correction can be traced |
| Usage data via Google Analytics (pages viewed, device type, approximate location, events) – only if you accept analytics cookies | Understanding which content is used, improving the archive | Consent | As set in Google Analytics: 2 months by default, never more than 14 months |
| Server logs (IP address, browser, time, page) kept by our web host | Security, abuse prevention, fixing errors | Legitimate interest (security) | Short periods set by the host, normally not more than 90 days |
| Account: email, password (stored only as a one-way hash), settings, votes – when you create an account | Providing your account, voting and contributions | Contract | Until you delete the account |
| Subscription status from Paddle (plan, start and end dates – no card data) – when you subscribe | Giving Premium access | Contract | Membership period + statutory bookkeeping time (up to 10 years for accounting records) |
| Email for news and offers – only if you tick the box | Sending news about new cars and member offers | Consent (withdraw any time with the link in every email) | Until you unsubscribe |
We do not sell personal data, do not use it for advertising profiles and do not show advertising.
Who processes data for us
- Web hosting provider – hosts the site, the forms and (later) the account database.
- Paddle.com – Merchant of Record for Premium; processes payments, invoices and taxes as an independent controller under its own privacy notice. We never see your card details.
- Google – Google Analytics (only with consent); Google reCAPTCHA on account and contribution forms to stop spam (security).
- Email service provider – sends account emails and, with consent, newsletters.
Some providers process data outside the EU/EEA (for example Google in the United States). Such transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You may ask for access to your data, correction, deletion, restriction or a copy in a portable format, object to processing based on legitimate interest, and withdraw consent at any time (withdrawal does not affect earlier processing). Write to [email protected]. If you think we handle your data unlawfully, you may complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or the authority in your own country.
Cookies
See the Cookie Policy. You can change your choice at any time from “Cookie settings” at the bottom of every page.