Transparency layer
Cookie Policy
Cookies and similar technologies help this website remember consent, protect forms, and—only if you allow—measure visits or support advertising measurement. This policy explains what each category does, how long data typically remains, and how you can override defaults through your browser or our banner.
01What cookies and equivalents are
A cookie is a small file or memory entry placed on your device when you visit a site. Comparable tools include pixels, localStorage, sessionStorage, and software development kits embedded in pages. Throughout this policy the word “cookie” includes those parallels when they perform a similar function.
First-party entries are set by our domain; third-party entries come from embedded services (for example analytics scripts hosted elsewhere). Third parties must follow their own policies, but we only activate them after appropriate consent when required by law.
02Legal framework we follow
We design defaults around the EU ePrivacy Directive as implemented in Finland, the GDPR, and guidance from the Data Protection Ombudsman on valid consent. Strictly necessary tools can run without prior consent provided they are truly essential and proportionate.
Where Finnish national law introduces sector-specific requirements (for example rules governing electronic communications services), we adjust deployments to remain compliant as interpretations evolve.
03Strictly necessary storage
These items power security basics, load balancing memories, or remember your privacy choices so the banner does not loop endlessly. They are wired to Article 6(1)(f) GDPR legitimate interests in secure delivery unless a specific statute mandates them under Article 6(1)(c).
- Consent state keys that pair with the “Accept”, “Reject”, and “Save choices” actions.
- Session continuity tokens when you move between informational pages during the same browser session.
- Tamper resistance markers that help detect automated abuse of public forms.
You cannot disable this category through our interface without breaking core navigation; browsers may still block all cookies globally.
04Functional preferences
If we add optional convenience features—such as remembering a preferred language—they will be described here and activated only when you clearly opt in. Functional storage is distinct from analytics because it directly tailors layout rather than measuring audience size.
05Analytics cookies
When you enable the “Analytics / Marketing” group and we later deploy a vendor, analytics scripts may set pseudonymous identifiers, track page views, approximate geography, and measure scroll depth. We configure such tools to avoid collecting free-form text from forms or precise location beyond coarse network data.
Aggregated reporting might inform editorial choices for informational articles or break patterns. You may withdraw consent at any time; future page loads should omit the script once caches refresh.
06Marketing and advertising storage
Should we run advertising campaigns, marketing cookies could help attribute visits or cap how often creative assets display. In accordance with platform rules, we aim to exclude special-category targeting and to keep messaging consistent with our non-clinical informational stance.
Even with consent, you can use industry opt-out pages provided by major ad alliances; those operate separately from our banner but reinforce your autonomy.
07Managing choices on our site
Use “Cookie Settings” on the banner to toggle optional categories before saving. The interface keeps necessary items locked to avoid a scenario where we cannot prove what you selected. Rejecting optional tags does not disable informational reading access.
Clearing browser storage removes our consent record; you may see the banner again—please restate preferences if that happens.
08Browser and device controls
Major browsers let you delete cookies, block third parties, or isolate sessions. Mobile operating systems provide advertising identifiers with reset options. Because configurations differ, consult your vendor help center for step-by-step paths.
Aggressive blocking may break single sign-on experiences elsewhere; tune exceptions if you rely on password managers or enterprise portals in the same browser profile.
09Retention overview
Session cookies expire when you close the browser. Persistent first-party consent logs may last up to thirty-six months to satisfy accountability questions from regulators. Third-party analytics retention depends on vendor defaults but we prefer minimal periods and pseudonymisation settings where available.
10Policy updates
When we onboard new technologies, rename categories, or reorganize consent wording, we update this page and adjust the banner text if needed. Continued browsing after a non-material edit implies acknowledgment; material changes that expand tracking will not ride on silence—we will seek fresh consent when legal standards require it.
11Contact
Questions about this Cookie Policy may be directed to the controller email or postal address above. Include screenshots if a particular identifier is unclear so we can escalate to technical partners quickly.