PRIVACY POLICY

1. Data Controller

This Privacy Policy explains how personal data is collected, processed, and protected when you visit pirkkaraisanen.com or subscribe to the newsletter.

• Data Controller: Pirkka Räisänen
• Contact Email:pirkka@pirkkaraisanen.comCopied!

2. Website Hosting & Analytics

This website is hosted by Netlify, Inc. (acting as our Data Processor).

• Server Logs: When you access this site, Netlify automatically processes standard server access logs (including your IP address) solely to maintain the security, stability, and technical performance of the site. These logs are retained on Netlify's secure servers for up to 30 days before being automatically deleted.
• Web Analytics: We use Netlify Web Analytics, a privacy-friendly, server-side tool. It analyzes aggregated, non-identifiable data from server logs to track general page views.No tracking cookies are placed on your device, and no cross-site tracking is performed.
• International Data Transfer: Netlify processes data on servers located in the United States. This transfer is legally safeguarded by Netlify's active certification under the EU-U.S. Data Privacy Framework (DPF) and their Data Processing Agreement.

3. Email Newsletter & Subscriptions (beehiiv)

When you opt-in to our newsletter via a subscribe form on this site, your data is processed by beehiiv, Inc., our email marketing platform (acting as a Data Processor).

• Data Collected: We collect your email address and, optionally, your first name.
• Purpose of Collection: We use your email address to deliver our regular newsletter, which covers music production, app development, on-device AI, and builder mindset lessons, as well as occasional updates about new tools or digital products.
• Email Analytics & Tracking: beehiiv emails may contain standard industry web beacons or tracking pixels to measure campaign metrics (such as email open rates and link clicks). This helps us improve our content and deliver more relevant updates.
• Data Storage: Data collected via beehiiv is securely stored on beehiiv's servers. beehiiv maintains technical and organizational measures to ensure your data is safeguarded in accordance with applicable data privacy regulations, including GDPR.
• International Data Transfer: Subscriber data collected via beehiiv is transferred to and processed on servers in the United States. This transfer complies with GDPR through beehiiv's adherence to the EU-U.S. Data Privacy Framework (DPF) and the implementation of Standard Contractual Clauses (SCCs).

4. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process your personal data under the following legal grounds:

• Consent (Article 6(1)(a) GDPR): Processing your email address for our newsletter and digital downloads is based on your explicit, affirmative consent provided at the time of subscription. Consent to marketing is optional and unbundled from access to general website content. You may withdraw your consent at any time.
• Legitimate Interest (Article 6(1)(f) GDPR): Processing IP addresses in Netlify's server logs is based on our legitimate interest in ensuring site security, server performance, and cyber defense.

5. Managing Your Subscription & Data Retention

• Unsubscribing: Every email sent via beehiiv includes a clear, automated Unsubscribe link at the bottom. You can opt-out of receiving future emails at any time with a single click.
• Data Retention: We retain your subscriber information only for as long as you remain an active subscriber. If you unsubscribe or request data deletion, your personal data will be removed or permanently deleted from our active mail lists.

6. Your Rights Under GDPR

Under Articles 15–21 of the GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your personal data.
• Right to Withdraw Consent: Withdraw your marketing consent at any time without penalty.
• Right to Data Portability: Request your personal data in a readable digital format.

To exercise any of these rights, please emailpirkka@pirkkaraisanen.comCopied!. If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with the Finnish Data Protection Authority (Tietosuojavaltuutetun toimisto).

7. External Links & Third-Party Platforms

This site may contain links to third-party platforms (e.g., Apple App Store, GitHub, YouTube). Once you leave pirkkaraisanen.com, your activity and data are governed by the respective privacy policies of those external platforms.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or our service setup. The "Last Updated" date at the top indicates when the latest revision took effect.