Privacy Statement (EU)

Controller

Generation AI project.

Privacy-related contact: info@generation-ai-stn.fi

Scope of this statement

This privacy statement applies to the Generation AI website and to the contact forms, newsletter and other communication features provided through the site.

Separate applications and research activities may have their own privacy statements.

What data we may process

We may process data such as:

• name
• email address
• organisation or role, if you provide it
• the content of a message or form submission
• newsletter subscription data
• technical log data, such as IP address and browser type, when needed for security, functionality or analytics

Why data is processed

Data may be used to:

• respond to messages and enquiries
• manage newsletter subscriptions
• ensure the security and proper functioning of the site
• analyse site usage at an aggregate level and improve the service
• communicate about the project when you have subscribed or otherwise provided your data for that purpose

Legal bases for processing

Processing may be based on:

• consent
• legitimate interest
• legal obligation
• contract or steps taken before entering into a contract

The applicable basis depends on the context in which the data is provided.

Services and third parties

The site currently uses the following services:

• Web3Forms for contact form delivery
• MailerLite for newsletter management, loaded only after user consent
• YouTube-nocookie when embedded videos are played
• vanilla-cookieconsent for consent management
• Cloudflare Web Analytics for aggregate website analytics

Data is processed within the EU/EEA where possible or subject to the safeguards used by the service providers.

Cookies and local storage

The site uses necessary storage mechanisms for functionality and user settings.

These include, for example:

• cc_cookie for storing the cookie consent state
• browser localStorage for accessibility settings under the key genai_a11y

Marketing-related scripts are not loaded without user consent.

Retention periods

Data is stored only for as long as necessary for the relevant purpose or as required by law.

For example:

• contact messages are stored for the duration of handling the matter and any reasonable follow-up period
• newsletter subscription data is stored until the subscription is cancelled
• technical logs are retained for a limited period for security and operational purposes

Your rights

Under applicable data protection law, you may have the right to:

• receive information about the processing of your personal data
• access your data
• request rectification
• request erasure
• request restriction of processing
• object to processing
• receive your data in a portable form where applicable
• withdraw consent where processing is based on consent

To exercise your rights, contact info@generation-ai-stn.fi.

Supervisory authority

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the relevant supervisory authority.