Updated 2026-09-04
1. Controller
Frans DGT Oy (Business ID 2880903-9), which operates the Visit Suomu website, Suomu, Kemijärvi, Lappi, Finland. Email info@visitsuomu.fi, phone +358 400 358 557.
All privacy requests and questions can be sent to the email address above.
2. What personal data we process
- Aurora alert subscriber register: email address, chosen language, alert threshold, subscription status (unconfirmed or confirmed), subscription and confirmation time, time of the latest alert, and a random token that makes the confirmation and unsubscribe links work.
- Contact requests: the information you give by email or phone, such as your name, contact details and the content of your message.
- Technical data: the web server processes your IP address and basic browser information to deliver the site and keep it secure. Visitor statistics (Vercel Web Analytics) are anonymous, use no cookies and do not identify individual visitors.
We collect no data for the aurora alert beyond what is listed above. The map on the map page is loaded from Mapbox, so your browser's IP address is passed to Mapbox to deliver the map tiles.
3. Purpose and legal basis
- Aurora alert: we email you when the chance of auroras in Suomu is good. The basis is your consent (GDPR Article 6(1)(a)). The subscription is confirmed with a link sent to your email, and consent can be withdrawn at any time via the unsubscribe link in every message.
- Contact requests: answering your questions and helping you plan your stay. The basis is our legitimate interest and, where relevant, steps prior to entering into a contract.
- Technical data: delivering, developing and securing the site. The basis is our legitimate interest.
We do not use the data for marketing, profiling or automated decision-making, and we do not disclose it to third parties for marketing purposes.
4. Retention
- Confirmed alert subscription: until you unsubscribe. On unsubscribing, the data is deleted immediately.
- Unconfirmed subscription: deleted automatically after 30 days.
- Alert runs store only space weather and weather figures and the number of messages sent, no personal data.
- Contact requests: as long as handling the matter requires.
5. Processors and transfers outside the EU
We use the following service providers, which process data on our behalf and under our instructions:
- Neon (Vercel Marketplace): database for alert subscriptions. Servers are located in the EU (Frankfurt, Germany).
- Vercel Inc. (USA): hosting of the website and application.
- Resend Inc. (USA): delivery of confirmation and alert emails.
- GitHub (Microsoft): schedules the alert check. No personal data is passed to it.
Transfers outside the EU are based on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. Data processing agreements are in place with the processors.
6. Your rights
You have the right to:
- know what data we process about you and receive a copy of it
- request correction of inaccurate data
- request erasure of your data (you can remove an alert subscription yourself via the unsubscribe link)
- request restriction of processing or object to processing
- receive the data you provided in a portable format
- withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal
Requests can be sent to info@visitsuomu.fi. We respond within one month. If you believe we process your data unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
7. Security
The connection to the site is TLS-encrypted. The database is encrypted and accessible only to administrators. Confirmation and unsubscribe tokens are random and cannot be guessed. Email addresses are not written to server logs.
8. Changes
We update this notice if the processing changes. The current version is always on this page, and the update date is shown at the top.