Privacy

This page is the record of what personal data Paimio Research processes on this publication.

Who is responsible

The controller is Emil Hartela, trading as Paimio Research, in Finland. Write to contact@emilhartela.com. There is no separate data-protection officer.

What we process

If you only read the public pages, we do not ask for a name or email. The host still receives the usual technical request data — IP address, browser, and the page asked for — so the site can be delivered and kept up.

If you subscribe or sign in, we process the email you give us, and a session so you stay signed in. We may also store a name if you add one to the account, and which post you came from when you subscribed. Paid memberships are billed by Stripe. We do not send advertising mail to people who have not subscribed. We do not sell personal data. We do not make automated decisions that produce legal effects.

Why we process it

Hosting logs are processed because we have a legitimate interest in delivering the site and stopping abuse. A membership is processed so we can send you the publication and keep your account. That is a contract. Email about new posts is sent because you asked to subscribe. The session cookie is strictly necessary for sign-in. It is not a tracking cookie, so there is no consent banner.

Cookies and scripts

The theme does not set advertising, analytics, or social-media cookies. Ghost, which hosts the site, sets a first-party session cookie when you sign in, and loads its membership portal, search, and payment script. Ghost may also run a first-party audience count. That is not an advertising profile and it is not Google or Meta. Signing out clears the session.

Who else sees it

Ghost(Pro) hosts the publication and the member list. Ghost stores that data in the EU and acts as our processor under their data processing agreement. Stripe processes paid memberships. We do not pass personal data to brokers or advertising networks.

Ghost and Stripe are not Finnish companies. When they process a request, some technical data may be handled outside the EU under their standard contractual clauses.

How long we keep it

A session lasts until you sign out or the cookie expires. A membership lasts until you unsubscribe or we delete the account, including when you ask us to. Hosting logs are kept only as long as the host keeps operational records.

Your rights

You can ask for access, correction, erasure, restriction, or portability, and you can object to processing that rests on legitimate interests. Write to contact@emilhartela.com. You can also complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Children

This publication is for professional research. It is not directed at children.

Changes

If this notice changes, we update this page.