Privacy

Privacy policy

How we handle visitor data and cookies on this site.

Updated 3 July 2026.

This policy describes what data Helsinki Figure Skating Academy collects on its website, why, and on what basis. We collect as little as possible — the site works without sign-in and no direct personal data about visitors is stored.

Data controller

Helsingin Taitoluisteluakatemia ry · Helsingfors Konståkningsakademi rf
Contact: toimisto@taitoluisteluakatemia.fi
Privacy inquiries: toimisto@taitoluisteluakatemia.fi

Legal bases for processing

  • Essential — contract and legitimate interest (technical operation of the site).
  • Anonymous analytics — legitimate interest (improving the site). You have the right to object via cookie settings.
  • Social media embeds — explicit consent. You can withdraw consent at any time.

Anonymous analytics

We use our own cookieless analytics to understand how the site is used. The measurement uses neither cookies nor localStorage, and visitors cannot be identified directly. The legal basis is legitimate interest (improving the site), and you can object in cookie settings.

  • Page views, read time, scroll depth and CTA clicks
  • The session identifier is generated server-side from a daily-rotating secret, IP address and user agent — the original values are not stored
  • Coarse device type (mobile / tablet / desktop) and country
  • Raw events are kept for at most 90 days, aggregated data for 24 months

Retention periods

  • Raw events (page_events): 90 days
  • Daily aggregated data: 24 months
  • Session ID salt: 7 days (daily rotation)
  • Your consent choice (in your browser): 12 months
  • Consent event log (server-side, proof): 24 months

Cookies

The site uses cookies or localStorage only for the following purposes:

  • Essential — Admin sign-in and session maintenance (set only when you sign in) and storing your consent choice in the browser's localStorage.
  • Social media embeds — Social-media embeds (e.g. Facebook) set third-party cookies if you have given consent.

Recipients and processors

We rely on the following trusted processors to run the site:

  • Cloudflare (CDN, WAF, DDoS protection) — technically processes your IP address to route the request.
  • Database and application platform provider (EU region) — stores the site content and anonymous event data.
  • Meta Platforms Ireland (Facebook embed) — only if you have allowed social-media content.

Transfers outside the EEA

If you allow social-media content, Meta may transfer data to the United States. The transfer relies on the EU–US Data Privacy Framework and Meta's standard contractual clauses. Our other processors operate within the EU/EEA.

Third-party services

If you have allowed social-media content, the Facebook embed may collect data about your browsing in line with Meta's privacy policy. You can withdraw your consent at any time from the cookie settings link in the footer.

Automated decision-making and profiling

We do not carry out automated decisions or profiling that would have legal effects on you.

Your rights as a data subject

You have the right to:

  • know what data we process about you
  • request correction of inaccurate data
  • request deletion of data where the law permits
  • request restriction of processing
  • object to processing based on legitimate interest (e.g. analytics)
  • receive your data in a portable format where technically feasible
  • withdraw any consent you have given at any time

Right to lodge a complaint

If you believe the processing of your personal data violates data protection law, you have the right to file a complaint with the Office of the Data Protection Ombudsman: tietosuoja.fi.

Change your cookie choices

You can change or withdraw your consent at any time via the button below or the Cookie settings link in the footer.