{"id":9,"date":"2026-05-11T09:00:08","date_gmt":"2026-05-11T09:00:08","guid":{"rendered":"https:\/\/www.lainafy.com\/tietosuojaseloste\/"},"modified":"2026-08-23T15:20:10","modified_gmt":"2026-08-23T15:20:10","slug":"tietosuojaseloste","status":"publish","type":"page","link":"https:\/\/www.lainafy.com\/en\/tietosuojaseloste\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p class=\"lainafy-legal-notice\"><strong>Effective from 29 August 2026.<\/strong> This privacy policy describes how Lainafy.com collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR 2016\/679) and the Finnish Data Protection Act (1050\/2018).<\/p>\n<h2>1. Data controller<\/h2>\n<p><strong>Qupio Solutions Oy<\/strong> (Business ID 2849637-8)<br \/>\nVantaa, Finland<br \/>\nEmail: <a href=\"mailto:hello@qupiosolutions.fi\">hello@qupiosolutions.fi<\/a><\/p>\n<p>The data controller is responsible for the processing of personal data on the Lainafy.com website and can be reached in all data protection matters at the email address above.<\/p>\n<h2>2. Data protection officer<\/h2>\n<p>Under Article 37 of the GDPR, we are not required to appoint a separate data protection officer, as the nature and scale of our activities do not warrant one. All privacy matters are handled by the data controller at <a href=\"mailto:hello@qupiosolutions.fi\">hello@qupiosolutions.fi<\/a>.<\/p>\n<h2>3. Categories of personal data processed<\/h2>\n<h3>3.1 Technical data (always collected)<\/h3>\n<ul>\n<li>IP address (pseudonymised)<\/li>\n<li>Browser type and version<\/li>\n<li>Operating system and device type<\/li>\n<li>Referring page and search keywords<\/li>\n<li>Time spent on site and pages viewed<\/li>\n<li>Language and region settings<\/li>\n<\/ul>\n<h3>3.2 Analytics data (with consent only)<\/h3>\n<ul>\n<li>Anonymous behavioural data (e.g., clicks, scrolling, session duration)<\/li>\n<li>Google Analytics cookie data (client ID, session ID)<\/li>\n<li>Aggregated statistics for service improvement<\/li>\n<\/ul>\n<h3>3.3 Marketing and affiliate data (with consent only)<\/h3>\n<ul>\n<li>Affiliate tracking cookies and click identifiers<\/li>\n<li>Conversion data from lender partners (anonymous confirmation of loan application)<\/li>\n<li>Retargeting cookies (e.g., Meta Pixel, Google Ads)<\/li>\n<\/ul>\n<h3>3.4 Data submitted by users<\/h3>\n<ul>\n<li>Name, email and message submitted via contact form<\/li>\n<li>Name and message submitted via comment form (if enabled)<\/li>\n<\/ul>\n<p><strong>We do not collect sensitive personal data<\/strong> (such as bank account numbers, national ID numbers or credit information). Any such data is provided directly to the lender through their own forms outside of Lainafy.<\/p>\n<h2>4. Legal bases for processing (GDPR Art. 6)<\/h2>\n<ul>\n<li><strong>Art. 6(1)(a) \u2013 Consent:<\/strong> analytics and marketing cookies, retargeting<\/li>\n<li><strong>Art. 6(1)(b) \u2013 Performance of a contract:<\/strong> responding to contact requests<\/li>\n<li><strong>Art. 6(1)(c) \u2013 Legal obligation:<\/strong> accounting law retention, authority requests<\/li>\n<li><strong>Art. 6(1)(f) \u2013 Legitimate interests:<\/strong> essential technical operation, security, abuse prevention<\/li>\n<\/ul>\n<h2>5. Purposes of processing<\/h2>\n<ol>\n<li>Providing and developing the loan comparison service<\/li>\n<li>Ensuring site operation and security<\/li>\n<li>Measuring and improving user experience (analytics)<\/li>\n<li>Tracking affiliate commissions and targeted marketing (with consent only)<\/li>\n<li>Responding to contact requests<\/li>\n<li>Fulfilling legal obligations<\/li>\n<\/ol>\n<h2>6. Sources of data<\/h2>\n<p>Personal data is primarily collected directly from you when visiting the site (cookies, behavioural data, any forms). Additionally, we may receive anonymous conversion data from our affiliate partners indicating that your click has led to a loan application (we do not receive personal data).<\/p>\n<h2>7. Disclosures to third parties<\/h2>\n<p>We do not sell or rent personal data to outside parties. However, we may share data with the following:<\/p>\n<h3>7.1 Data processors<\/h3>\n<ul>\n<li><strong>Web hosting provider:<\/strong> technical server maintenance<\/li>\n<li><strong>Google LLC \/ Google Ireland Ltd.:<\/strong> Google Analytics and Google Ads (with consent only)<\/li>\n<li><strong>Meta Platforms Ireland Ltd.:<\/strong> Meta Pixel for retargeting (with consent only)<\/li>\n<li><strong>Affiliate networks and lender partners:<\/strong> click and conversion tracking (with consent only)<\/li>\n<\/ul>\n<p>A GDPR Article 28-compliant Data Processing Agreement (DPA) has been signed with all processors.<\/p>\n<h3>7.2 Authorities<\/h3>\n<p>We disclose data to authorities only when required by law, such as in the case of a suspected crime or on request from the tax authority.<\/p>\n<h2>8. Data transfers outside the EU\/EEA<\/h2>\n<p>Some of the services we use (e.g., Google Analytics, Meta Pixel) may process data in the United States or other countries outside the EU\/EEA. Such transfers are based on:<\/p>\n<ul>\n<li><strong>The EU\u2013US Data Privacy Framework decision<\/strong> (European Commission, July 2023), which guarantees an adequate level of data protection for data transferred to the United States<\/li>\n<li><strong>Standard Contractual Clauses (SCC)<\/strong> of the European Commission, ensuring EU-level data protection in transfers<\/li>\n<li><strong>The user&#8217;s explicit consent<\/strong> in the case of marketing cookies<\/li>\n<\/ul>\n<h2>9. Data retention periods<\/h2>\n<table>\n<thead>\n<tr>\n<th>Data category<\/th>\n<th>Retention period<\/th>\n<th>Basis<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Server logs (IP, user agent)<\/td>\n<td>Up to 90 days<\/td>\n<td>Security and abuse prevention<\/td>\n<\/tr>\n<tr>\n<td>Analytics cookies (Google Analytics)<\/td>\n<td>14 months<\/td>\n<td>GA default setting; user identifiable only in aggregate<\/td>\n<\/tr>\n<tr>\n<td>Marketing cookies<\/td>\n<td>30\u2013365 days<\/td>\n<td>Affiliate network operation<\/td>\n<\/tr>\n<tr>\n<td>Contact requests<\/td>\n<td>2 years after the message<\/td>\n<td>Customer service and accountability<\/td>\n<\/tr>\n<tr>\n<td>Accounting data (commission reports)<\/td>\n<td>6 years after end of financial year<\/td>\n<td>Finnish Accounting Act (1336\/1997)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Data is deleted or anonymised at the end of the retention period.<\/p>\n<h2>10. Register protection<\/h2>\n<p><strong>Technical safeguards:<\/strong><\/p>\n<ul>\n<li>All site traffic is encrypted via HTTPS\/TLS 1.2+<\/li>\n<li>Server located in the EU, in the service provider&#8217;s secure data centre<\/li>\n<li>Servers are protected by firewall and DDoS protection<\/li>\n<li>Software updates are installed regularly to patch critical vulnerabilities<\/li>\n<li>Backups are encrypted and stored separately from the main server<\/li>\n<\/ul>\n<p><strong>Organisational safeguards:<\/strong><\/p>\n<ul>\n<li>Access to personal data is limited to representatives of the data controller<\/li>\n<li>Access requires a personal user ID and strong password<\/li>\n<li>DPAs (GDPR Art. 28) are in place with all processors<\/li>\n<\/ul>\n<h2>11. Automated decision-making and profiling<\/h2>\n<p>Lainafy.com does not carry out fully automated decisions with legal effects as defined in GDPR Article 22. Nor do we perform profiling that would significantly affect the rights of the user.<\/p>\n<p>The site may use automated content targeting (e.g., relevant lender recommendations on loan type pages), but this is not GDPR-defined profiling as no decisions are made on behalf of the person.<\/p>\n<h2>12. Rights of the data subject<\/h2>\n<ul>\n<li><strong>Right of access (Art. 15):<\/strong> you can request a copy of the data we process about you<\/li>\n<li><strong>Right to rectification (Art. 16):<\/strong> you can request correction of inaccurate data<\/li>\n<li><strong>Right to erasure (Art. 17):<\/strong> the &#8221;right to be forgotten&#8221; \u2013 you can request deletion of your data<\/li>\n<li><strong>Right to restriction (Art. 18):<\/strong> you can require suspension of processing in certain situations<\/li>\n<li><strong>Right to data portability (Art. 20):<\/strong> you can receive your data in a machine-readable format<\/li>\n<li><strong>Right to object (Art. 21):<\/strong> you can object to the use of your personal data e.g. for direct marketing<\/li>\n<li><strong>Right to withdraw consent (Art. 7):<\/strong> you can withdraw consent to cookies at any time via the cookie settings in the footer<\/li>\n<li><strong>Right to lodge a complaint with the supervisory authority (Art. 77):<\/strong> Office of the Data Protection Ombudsman, <a href=\"https:\/\/tietosuoja.fi\/en\" rel=\"noopener\">tietosuoja.fi<\/a><\/li>\n<\/ul>\n<p>Requests can be made by sending an email to <a href=\"mailto:hello@qupiosolutions.fi\">hello@qupiosolutions.fi<\/a>. We respond to requests within one month at the latest, in accordance with GDPR Art. 12(3). You must prove your identity in the request to prevent wrongful disclosure of data.<\/p>\n<h2>13. Cookies<\/h2>\n<p>The site uses three types of cookies:<\/p>\n<ul>\n<li><strong>Essential:<\/strong> basic site functions such as session management, security and remembering cookie settings. These do not require consent (GDPR Art. 6(1)(f)).<\/li>\n<li><strong>Analytics (Google Analytics or similar):<\/strong> only after consent. Helps us understand service usage and develop it.<\/li>\n<li><strong>Marketing and affiliate tracking:<\/strong> only after consent. Used to measure conversions and for possible retargeting.<\/li>\n<\/ul>\n<p>You can change or withdraw your consent at any time via the <em>\ud83c\udf6a Cookie settings<\/em> button in the footer or through your browser settings.<\/p>\n<h2>14. Affiliate link tracking and marketing partnerships<\/h2>\n<p>Lainafy.com is an <strong>affiliate comparison service<\/strong>. When you click a lender&#8217;s link on the site (&#8221;Apply&#8221; or similar), you are directed to the lender&#8217;s own site, and Lainafy may receive a commission from the possible loan activation. This does not affect the loan interest, terms or fees you receive.<\/p>\n<p>We do not perform credit checks or process loan decisions. All loan terms and data processing in the loan process take place in the lender&#8217;s own systems and in accordance with their own privacy policy.<\/p>\n<p>Affiliate tracking is based on the user&#8217;s consent (GDPR Art. 6(1)(a)) and is done with anonymous identifiers (click ID, cookie ID). We do not link affiliate tracking to identified user accounts.<\/p>\n<h2>15. Privacy of minors<\/h2>\n<p>The Lainafy.com service is not directed at persons under the age of 16. We do not knowingly collect the personal data of persons under 16. If a guardian becomes aware that a child has provided us with data, please contact <a href=\"mailto:hello@qupiosolutions.fi\">hello@qupiosolutions.fi<\/a> \u2013 we will remove the data without delay.<\/p>\n<h2>16. Data breaches<\/h2>\n<p>If we detect a personal data breach that is likely to result in a high risk to the rights and freedoms of data subjects, we will notify:<\/p>\n<ul>\n<li>The Data Protection Ombudsman within 72 hours of becoming aware of the breach (GDPR Art. 33)<\/li>\n<li>The affected data subjects without undue delay (GDPR Art. 34)<\/li>\n<\/ul>\n<h2>17. Changes to the privacy policy<\/h2>\n<p>This policy may be updated due to changes in legislation, the introduction of new services or other justified reason. We will notify you of significant changes on our site. The last update date of the policy is shown at the top of the page.<\/p>\n<h2>18. Contact details for privacy matters<\/h2>\n<p>For all matters relating to the processing of personal data, please contact:<\/p>\n<p><strong>Qupio Solutions Oy<\/strong><br \/>\nBusiness ID: 2849637-8<br \/>\nVantaa, Finland<br \/>\nEmail: <a href=\"mailto:hello@qupiosolutions.fi\">hello@qupiosolutions.fi<\/a><\/p>\n<p>Supervisory authority: <strong>Office of the Data Protection Ombudsman<\/strong><br \/>\nP.O. Box 800, FI-00521 Helsinki<br \/>\nPhone: +358 29 566 6700 (switchboard)<br \/>\nWebsite: <a href=\"https:\/\/tietosuoja.fi\/en\" rel=\"noopener\">tietosuoja.fi\/en<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Effective from 29 August 2026. This privacy policy describes how Lainafy.com collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR 2016\/679) and the Finnish Data Protection Act (1050\/2018). 1. Data controller Qupio Solutions Oy (Business ID 2849637-8) Vantaa, Finland Email: hello@qupiosolutions.fi The data controller is responsible for the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-9","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Tietosuojaseloste - Lainafy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lainafy.com\/tietosuojaseloste\/\" \/>\n<meta property=\"og:locale\" content=\"fi_FI\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tietosuojaseloste - Lainafy\" \/>\n<meta property=\"og:description\" content=\"Effective from 29 August 2026. This privacy policy describes how Lainafy.com collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR 2016\/679) and the Finnish Data Protection Act (1050\/2018). 1. Data controller Qupio Solutions Oy (Business ID 2849637-8) Vantaa, Finland Email: hello@qupiosolutions.fi The data controller is responsible for the [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lainafy.com\/tietosuojaseloste\/\" \/>\n<meta property=\"og:site_name\" content=\"Lainafy\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-23T15:20:10+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Arvioitu lukuaika\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minuuttia\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/tietosuojaseloste\\\/\",\"url\":\"https:\\\/\\\/www.lainafy.com\\\/tietosuojaseloste\\\/\",\"name\":\"Tietosuojaseloste - Lainafy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/#website\"},\"datePublished\":\"2026-05-11T09:00:08+00:00\",\"dateModified\":\"2026-08-23T15:20:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/tietosuojaseloste\\\/#breadcrumb\"},\"inLanguage\":\"fi\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.lainafy.com\\\/tietosuojaseloste\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/tietosuojaseloste\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Etusivu\",\"item\":\"https:\\\/\\\/www.lainafy.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tietosuojaseloste\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/#website\",\"url\":\"https:\\\/\\\/www.lainafy.com\\\/\",\"name\":\"Lainafy\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.lainafy.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fi\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/#organization\",\"name\":\"Lainafy\",\"url\":\"https:\\\/\\\/www.lainafy.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fi\",\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.lainafy.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Lainafy-Logo.png\",\"contentUrl\":\"https:\\\/\\\/www.lainafy.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Lainafy-Logo.png\",\"width\":1254,\"height\":1254,\"caption\":\"Lainafy\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lainafy.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Tietosuojaseloste - Lainafy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lainafy.com\/tietosuojaseloste\/","og_locale":"fi_FI","og_type":"article","og_title":"Tietosuojaseloste - Lainafy","og_description":"Effective from 29 August 2026. This privacy policy describes how Lainafy.com collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR 2016\/679) and the Finnish Data Protection Act (1050\/2018). 1. Data controller Qupio Solutions Oy (Business ID 2849637-8) Vantaa, Finland Email: hello@qupiosolutions.fi The data controller is responsible for the [&hellip;]","og_url":"https:\/\/www.lainafy.com\/tietosuojaseloste\/","og_site_name":"Lainafy","article_modified_time":"2026-08-23T15:20:10+00:00","twitter_card":"summary_large_image","twitter_misc":{"Arvioitu lukuaika":"6 minuuttia"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.lainafy.com\/tietosuojaseloste\/","url":"https:\/\/www.lainafy.com\/tietosuojaseloste\/","name":"Tietosuojaseloste - Lainafy","isPartOf":{"@id":"https:\/\/www.lainafy.com\/#website"},"datePublished":"2026-05-11T09:00:08+00:00","dateModified":"2026-08-23T15:20:10+00:00","breadcrumb":{"@id":"https:\/\/www.lainafy.com\/tietosuojaseloste\/#breadcrumb"},"inLanguage":"fi","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lainafy.com\/tietosuojaseloste\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.lainafy.com\/tietosuojaseloste\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Etusivu","item":"https:\/\/www.lainafy.com\/"},{"@type":"ListItem","position":2,"name":"Tietosuojaseloste"}]},{"@type":"WebSite","@id":"https:\/\/www.lainafy.com\/#website","url":"https:\/\/www.lainafy.com\/","name":"Lainafy","description":"","publisher":{"@id":"https:\/\/www.lainafy.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lainafy.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fi"},{"@type":"Organization","@id":"https:\/\/www.lainafy.com\/#organization","name":"Lainafy","url":"https:\/\/www.lainafy.com\/","logo":{"@type":"ImageObject","inLanguage":"fi","@id":"https:\/\/www.lainafy.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.lainafy.com\/wp-content\/uploads\/2026\/05\/Lainafy-Logo.png","contentUrl":"https:\/\/www.lainafy.com\/wp-content\/uploads\/2026\/05\/Lainafy-Logo.png","width":1254,"height":1254,"caption":"Lainafy"},"image":{"@id":"https:\/\/www.lainafy.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/pages\/9","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/comments?post=9"}],"version-history":[{"count":3,"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/pages\/9\/revisions"}],"predecessor-version":[{"id":545,"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/pages\/9\/revisions\/545"}],"wp:attachment":[{"href":"https:\/\/www.lainafy.com\/en\/wp-json\/wp\/v2\/media?parent=9"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}