Sunday, September 20, 2026 Tampere
🌧️ 14°C
TAMPERETODAY

Privacy Policy

tamperetoday.fi

Effective date: March 4, 2026

1. Data Controller

The data controller for this website is:

NordHerd

Operating the website: https://tamperetoday.fi

Email: [email protected]

This privacy policy explains how we collect, use, store, and protect personal data on tamperetoday.fi in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Finnish Data Protection Act (Tietosuojalaki 1050/2018), and the Finnish Act on Electronic Communications Services (Sähköisen viestinnän palveluista 917/2014).

2. About the Service

Tampere Today is an English-language news website focused on Tampere, Finland, operated by NordHerd. The service aggregates news from various Finnish-language news sources and presents original English-language summaries. Full source articles are not reproduced; only independently written summaries are published, in compliance with Finnish and EU copyright legislation. In addition to aggregated news, the website features original editorial content.

News summaries are generated with the assistance of automated language technology. This processing relates solely to publicly available news content from third-party sources and does not involve the processing of visitors’ personal data. No personal data submitted by users is used in this process, and no automated decision-making affecting individuals takes place.

The service is planned to expand in the future to include an event calendar, a job board, and a newsletter. When those features are launched, this privacy policy will be updated accordingly to reflect any additional data processing.

3. Personal Data We Collect

We may collect the following categories of personal data when you use our website:

3.1 Automatically Collected Data

When you visit tamperetoday.fi, certain technical data may be collected automatically:

  • IP address (anonymised where possible)
  • Browser type and version
  • Operating system
  • Referring website URL
  • Pages visited, date, and time of access
  • Device type (desktop, mobile, tablet)

3.2 Analytics

We use Cloudflare Web Analytics to understand how visitors use our website. Cloudflare Web Analytics is a privacy-focused analytics service that does not use cookies, does not track individual visitors across sites, and does not collect personal data. It operates by collecting aggregated, non-identifiable metrics such as page views, referrers, and browser information. No personal data is processed by Cloudflare Web Analytics beyond what is described in Section 3.1 above.

3.3 Cookies and Similar Technologies

We do not currently place any non-essential cookies or similar tracking technologies on your device. Our analytics solution (Cloudflare Web Analytics) does not use cookies, and we do not use advertising, social media, or third-party tracking cookies. The only cookies set are strictly necessary cookies required for the website to function (such as session and security tokens), which are exempt from consent requirements under Section 205 of the Finnish Act on Electronic Communications Services. If we introduce any non-essential cookies in the future, we will request your consent first, in compliance with GDPR Article 6(1)(a) and Finnish law, and this policy will be updated accordingly.

3.4 Voluntarily Provided Data

If you contact us via email, we may collect your name, email address, and any information you include in your message. We do not currently operate a contact form on the website.

3.5 Future Features

The following features are planned but not yet active. No data is collected for these purposes at present. This policy will be updated before each feature goes live:

  • Event calendar and job board: We may collect additional personal data such as the name, email address, and other details of event organisers or job advertisers.

3.6 Newsletter

If you subscribe to our weekly newsletter, we collect your email address and, as a record of your consent, the IP address and timestamp of your sign-up. We operate a double opt-in process: after you sign up we send a confirmation email, and you only receive the newsletter after you click the confirmation link. The legal basis for this processing is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time by using the unsubscribe link included in every newsletter email.

The newsletter is delivered using Amazon Web Services (Amazon SES), acting as our data processor. This may involve transferring your email address to servers located in the United States; such transfers are governed by appropriate safeguards, including the European Commission's Standard Contractual Clauses.

We measure the overall performance of each newsletter — how many recipients opened it and which articles were clicked — using a tracking pixel and link redirects. These measurements are aggregated and are not used to build a profile of, or to identify, individual subscribers. We retain your subscription data until you unsubscribe, after which your address is removed from active mailings.

4. Legal Basis for Processing

We process personal data based on the following legal grounds under GDPR Article 6(1):

  • Consent (Article 6(1)(a)): For non-essential cookies, the newsletter, and any future marketing communications. You may withdraw consent at any time.
  • Legitimate interest (Article 6(1)(f)): For website analytics (using privacy-focused, cookie-free analytics), security monitoring, and improving user experience. We have conducted a balancing test to ensure our interests do not override your rights.
  • Legal obligation (Article 6(1)(c)): Where we are required by Finnish or EU law to process or retain certain data.

5. Purposes of Processing

We process personal data for the following purposes:

  • Providing and maintaining the website and its news content
  • Analysing website usage through privacy-focused analytics to improve our service and content selection
  • Ensuring the security and technical functionality of the website
  • Responding to enquiries received via email
  • Complying with legal obligations under Finnish and EU law

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Finnish and EU legislation. Specifically:

  • Server log data: retained for a maximum of 90 days, then deleted or anonymised
  • Analytics data: Cloudflare Web Analytics retains aggregated, non-personal metrics; no individual visitor data is stored
  • Email correspondence: retained for 12 months after the last communication, unless a longer period is required by law
  • Newsletter subscriber data: retained until you unsubscribe or withdraw consent

After the retention period expires, data is securely deleted or irreversibly anonymised.

7. Data Sharing, Processors, and Transfers

We do not sell, trade, or rent your personal data to third parties. We may share data with:

  • Service providers (data processors): Third-party companies that process data on our behalf under a Data Processing Agreement (GDPR Article 28), as listed below.
  • Legal authorities: Where required by Finnish law, a court order, or a binding request from a competent authority.

We do not share any visitor data with the third-party news sources from which content is aggregated.

7.1 Hosting and Infrastructure Providers

The following third-party service providers act as data processors for the operation of tamperetoday.fi:

  • DigitalOcean, LLC — Server hosting. Our server is located in DigitalOcean’s Amsterdam (Netherlands) data centre, within the European Economic Area. DigitalOcean is a US-based company and processes data under Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Cloudflare, Inc. — Content delivery network (CDN), DNS, DDoS protection, and web analytics. Cloudflare routes web traffic through its global network, which may include nodes outside the EEA. Cloudflare is a US-based company and processes data under Standard Contractual Clauses (SCCs) and has committed to additional safeguards including its Data Localisation Suite. Cloudflare may process limited technical data (such as IP addresses and request metadata) as part of delivering and securing the website. Cloudflare Web Analytics collects only aggregated, non-identifiable metrics and does not use cookies or track individual visitors. We also use Cloudflare Turnstile, a privacy-focused CAPTCHA alternative, on the newsletter signup form to prevent automated abuse; it does not use cookies and does not track users across websites.

We may use additional processors in the future (e.g. email delivery for the newsletter). This section will be updated accordingly.

7.2 International Data Transfers

As described above, some of our service providers are based in the United States. Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place in accordance with GDPR Chapter V, including:

  • Standard Contractual Clauses approved by the European Commission (GDPR Article 46(2)(c))
  • European Commission adequacy decisions, where applicable (GDPR Article 45)
  • Supplementary measures as recommended by the European Data Protection Board, where necessary

8. Your Rights

Under the GDPR and the Finnish Data Protection Act, you have the following rights regarding your personal data:

  • Right of access (Article 15): You may request a copy of the personal data we hold about you.
  • Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
  • Right to erasure (Article 17): You may request deletion of your data where there is no legitimate reason for continued processing.
  • Right to restriction (Article 18): You may request restriction of processing under certain conditions.
  • Right to data portability (Article 20): You may receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Article 21): You may object to processing based on legitimate interests, including profiling.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month, as required by GDPR Article 12(3). In complex cases, this period may be extended by two additional months.

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto):

Office of the Data Protection Ombudsman

Address: Lintulahdenkuja 4, 00530 Helsinki, Finland

Phone: +358 29 566 6700

Email: [email protected]

Website: https://tietosuoja.fi/en

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with GDPR Article 32. These measures include:

  • HTTPS/TLS encryption for all data transmitted between your browser and our servers
  • Cloudflare DDoS protection and web application firewall
  • Access controls limiting data access to authorised personnel only
  • Regular security assessments and updates

While we take all reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee the absolute security of your data.

11. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete it promptly. This age limit is in accordance with the Finnish Data Protection Act’s implementation of GDPR Article 8.

12. Links to Third-Party Websites

Our news summaries include links to the original articles on third-party news websites. When you follow these links, you leave tamperetoday.fi and become subject to the privacy policies of those third-party sites. We are not responsible for the privacy practices or content of external websites and encourage you to review their policies.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time, in particular when new features such as the newsletter, event calendar, or job board are launched, or when we add or change service providers. Any changes will be posted on this page with an updated effective date. If we make significant changes, we will provide a more prominent notice where appropriate. We encourage you to review this policy periodically.

14. Contact Information

If you have any questions about this privacy policy or our data processing practices, please contact us at:

NordHerd

Email: [email protected]

Website: https://tamperetoday.fi

This privacy policy was prepared in accordance with EU Regulation 2016/679 (GDPR), the Finnish Data Protection Act (1050/2018), and the Finnish Act on Electronic Communications Services (917/2014).