Privacy Policy

This document is available in English.

Last updated: 26 October 2026

1. Introduction

This Privacy Policy explains how we process personal data when you visit our website, which provides publicly available company information. It describes the information we may collect, the purposes and legal bases for processing it, how we protect your information, and your rights under the General Data Protection Regulation (GDPR).

The website is intended for visitors located in the European Union and European Economic Area (EU/EEA). The website does not require user registration, and visitors cannot create accounts or publish content through the website.

The company information displayed on this website may originate from publicly available sources. Some information may relate to identifiable individuals, for example, sole traders or company representatives. Where such information constitutes personal data, we process it in accordance with applicable data protection legislation.

2. Data Controller

The controller responsible for processing personal data is:

3. Data Protection Officer

We have not appointed a Data Protection Officer because we understand that we are not legally required to do so. Privacy-related inquiries are handled by our management team using the contact details provided in this Privacy Policy.

4. Categories of Personal Data We Process

Because the website does not require registration or provide visitor accounts, we do not collect account profiles, passwords, or user-generated posts through registration or account-based features.

Depending on how you access and use the website, we may process the following categories of data:

4.1 Technical and connection data

• IP address, potentially anonymized or truncated where technically feasible.
• Date and time of access.
• Requested pages and resources.
• Browser type and version.
• Operating system and device information.
• Technical error and security logs.
• Information needed to detect abuse and maintain service availability.

4.2 Public company information

The website displays company information obtained from public sources. Depending on the source and the information displayed, this may include information relating to identifiable natural persons.

We process such information for the purpose of providing company information to website visitors. Where the information constitutes personal data, the legal basis for processing will generally be our legitimate interests, subject to an assessment of the rights and freedoms of the individuals concerned.

4.3 Information you voluntarily provide

If you contact us by email or through a contact form, if available, we may process the information you provide, such as your name, email address, and the contents of your message.

We use this information to respond to your inquiry and handle any related requests.

5. Purposes and Legal Bases for Processing

We process personal data only where an applicable legal basis exists.

5.1 Legitimate interests

Under Article 6(1)(f) GDPR, we may process personal data where necessary for our legitimate interests, provided those interests are not overridden by the rights and freedoms of the individuals concerned.

Our legitimate interests may include:

• Providing publicly available company information.
• Operating, maintaining, and improving the website.
• Protecting the website against malicious activity, abuse, and unauthorized access.
• Diagnosing technical problems and maintaining service availability.
• Handling inquiries and requests concerning information published on the website.

We apply data minimization and appropriate technical and organizational safeguards when processing personal data for these purposes.

5.2 Legal obligations

Under Article 6(1)(c) GDPR, we may process personal data when necessary to comply with a legal obligation applicable to us.

5.3 Consent

Where consent is required by applicable law, for example, before using non-essential cookies or similar technologies, we will request your consent before activating the relevant technologies.

6. Cookies and Similar Technologies

The website may use cookies or similar technologies that are necessary for its operation, security, and delivery of requested functionality.

Where analytics or other non-essential cookies or technologies are used, they will be activated only where the required consent has been obtained. You can manage your preferences through the website's cookie settings, where available, or through your browser settings.

Disabling certain cookies may affect the functionality of the website.

7. Hosting, Content Delivery, and Third-Party Processors

We may use hosting providers, content delivery network (CDN) providers, and other technical service providers to operate and secure the website. These providers may process technical data, including IP addresses and connection information, when delivering website content or protecting the service against abuse.

Where service providers process personal data on our behalf, we apply appropriate contractual and organizational safeguards in accordance with Article 28 GDPR, where applicable.

We do not sell personal data.

We aim to keep personal data processing within the EU/EEA. If a service provider or processing activity involves a transfer of personal data outside the EU/EEA, we will ensure that the transfer complies with Chapter V GDPR and that an appropriate transfer mechanism is in place.

8. International Data Transfers

Personal data is intended to be processed within the EU/EEA. However, the location of a service provider's infrastructure, its support arrangements, and any access from outside the EU/EEA may affect whether an international transfer takes place.

Where personal data is transferred outside the EU/EEA, we will apply an appropriate legal transfer mechanism under the GDPR, where required.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal obligations and legitimate business needs.

• Technical and security logs: retained for the period necessary to maintain security, investigate incidents, and diagnose technical problems.
• Contact messages: retained for the period necessary to respond to the inquiry and handle any related follow-up, unless a longer retention period is required by law or justified by a legitimate need.
• Public company information: retained and updated according to the purpose of the website, the relevance of the information, applicable legal requirements, and the rights of individuals where the information constitutes personal data.
• Backups: retained according to the applicable backup rotation and deletion procedures.

10. Data Security

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

Depending on the relevant processing activity, these measures may include:

• HTTPS and TLS encryption for data transmitted between your browser and the website.
• Access controls and least-privilege principles.
• Technical monitoring and security logging.
• Protective measures against malicious traffic and unauthorized access.
• Backups and procedures for restoring service following an incident.

No internet-based service can guarantee absolute security, but we take reasonable measures to protect the information we process.

11. Your Rights Under the GDPR

If we process personal data relating to you, you may have the following rights under the GDPR, subject to the applicable legal conditions and exceptions:

• Right of access: request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: request correction of inaccurate personal data and completion of incomplete data.
• Right to erasure: request deletion of your personal data where the conditions for erasure are met.
• Right to restriction: request restriction of processing in circumstances specified by the GDPR.
• Right to object: object to processing based on legitimate interests, including processing for direct marketing where applicable. If you object to processing based on legitimate interests, we will assess whether compelling legitimate grounds for continued processing exist.
• Right to data portability: receive personal data you have provided to us in a structured, commonly used, machine-readable format, where this right applies.
• Right to withdraw consent: where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: submit a complaint to the competent data protection supervisory authority.

These rights are subject to the conditions and exceptions set out in the GDPR. For example, the right to data portability does not apply to every type of processing, and the right to erasure is not absolute.

To exercise your rights or ask questions about personal data displayed on this website, contact us at info@youlearn.fi.

12. Publicly Available Company Information

Information being publicly available does not automatically mean that it falls outside the scope of data protection law. If you believe that information published on this website contains inaccurate personal data or otherwise raises a data protection concern, you may contact us at info@youlearn.fi.

Please identify the relevant page and describe the information concerned so that we can assess your request. We will review the request in accordance with applicable law.

We may need to retain or display certain information where there is a valid legal basis to do so. A request for correction or removal will therefore be assessed on its individual circumstances.

13. Supervisory Authority

You have the right to lodge a complaint with the Finnish supervisory authority if you believe that the processing of your personal data infringes the GDPR.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our website, processing activities, service providers, or applicable legal requirements change. The latest revision date will be displayed at the beginning of this policy.

15. Contact

For questions about this Privacy Policy, requests concerning personal data, or other privacy-related matters, please contact: