Privacy Policy

Last updated: 8 November 2026

This policy explains what personal data Aitoarvio (aitoarvio.fi) collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

Data controller: Mir Hasan Jamil, Finland
Email: contact@aitoarvio.fi

2. What we collect

When you write a review

• Name (shown publicly with your review)
• Email address (never shown publicly)
• Your rating, title and review text (shown publicly)
• IP address and date/time of submission (to prevent spam and duplicate reviews)

When you create an account

• Your name (shown publicly with your reviews and contributions)
• Your email address and password. The password is stored encrypted, so we can’t see it. If you sign in with Google, we receive your name and email from Google.
• Your reviews and the products and photos you add, with your points, level and badges
• Your profile photo, if you add one. It is only shown to you, in the top corner of the site, and is deleted when you remove it or delete your account.

When you add a product

The product details you type and, if you add one, your photo of the pack. Once approved, these are public. Please don’t include people or personal details in photos.

When you scan a barcode

The camera picture stays on your device; only the barcode number is sent to our site. To find product details, our server looks the number up on Open Food Facts. Your own data is not sent to Open Food Facts. On some phones (mainly iPhones), the scanner tool is loaded from the jsDelivr network, which can see your IP address.

When you contact us

Your email address and anything you include in your message.

When you visit the site

Our hosting provider’s servers record standard technical logs (IP address, browser type, pages visited, time). These are used only to keep the site running and secure.

3. Why we use your data, and the legal basis

• Publishing your review: your consent when you submit it (GDPR Art. 6(1)(a)).
• Checking reviews, preventing spam, fake and duplicate reviews: our legitimate interest in keeping reviews trustworthy (Art. 6(1)(f)).
• Showing reviews in both Finnish and English with automatic translation: our legitimate interest in making reviews understandable to everyone living in Finland (Art. 6(1)(f)).
• Running your account, points and badges: to provide the service you signed up for (Art. 6(1)(b)).
• Checking added products and photos before publishing: our legitimate interest in accurate, spam-free content (Art. 6(1)(f)).
• Visitor statistics with Google Analytics: only with your consent, given in the cookie banner (Art. 6(1)(a)). You can withdraw it at any time.
• Answering your messages: our legitimate interest in replying to you (Art. 6(1)(f)).
• Running and securing the website: legitimate interest (Art. 6(1)(f)).

We do not sell your data, and we do not use it for advertising profiles.

4. Who can see your data

• Your name, rating and review are public on the website.
• Your email and IP address are only visible to the site administrator.
• Our hosting provider, Hostinger (Vilnius, Lithuania), stores the website and its data on servers in Lithuania (EU) on our behalf.
• To translate reviews we use DeepL SE (Cologne, Germany, EU). Only the review title and text are sent to DeepL, never your name, email or IP address. DeepL may keep texts for a limited time and use them to improve its service. Reviews are public on the site anyway.
• If you accept analytics cookies, Google (Google Ireland Ltd) processes information about your visit (pages viewed, device, approximate location) for us. Google may transfer this data to the USA under the EU–US Data Privacy Framework.
• Fonts are currently loaded from Google Fonts, which means your browser connects to Google’s servers and Google can see your IP address.

Companies whose brands are reviewed do not receive reviewers’ email addresses.

5. How long we keep it

• Reviews stay published until you ask us to delete them or we remove them under our Review Guidelines.
• Rejected reviews are deleted within 30 days.
• Your account stays until you delete it. Ask us at contact@aitoarvio.fi and we delete it within one month. Your published reviews and products can be deleted too, or kept without your name. You choose.
• Messages to us are deleted when no longer needed, at the latest after 2 years.
• Server logs are kept for the period set by our hosting provider, normally a few weeks.

6. Cookies

Necessary cookies (always on)

• Login cookies when you log in, to keep you signed in.
• aito_consent: remembers your cookie choice for 6 months.

Analytics cookies (only if you click “Accept”)

• Google Analytics (_ga, _ga_…): counts visits and shows which pages are useful. Kept up to 2 years.

We don’t use advertising cookies. You can change your choice anytime with “Cookie settings” at the bottom of every page.

7. Your rights

You have the right to:

• see what data we hold about you,
• correct wrong data,
• have your data and your reviews deleted,
• object to how we use your data, or restrict it,
• get your data in a portable format,
• withdraw your consent at any time (this does not affect anything done before).

Email contact@aitoarvio.fi from the address you used for your review or account. We aim to reply within 48 hours, and always within one month at the latest.

You can also complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman (tietosuoja.fi).

8. Changes

If this policy changes, we update the date at the top of this page.