1. Controller Information

Relefy Media is the data controller responsible for your personal data. For privacy-related inquiries, please contact us at:

Relefy Media Oy
Business ID: 3583987-7
Lapinlahdenkatu 13 A 10, 00180 Helsinki, Finland
Email: Get in Touch

Data Protection Officer (DPO): Relefy Media Oy is not legally required to appoint a DPO under GDPR Art. 37, as we do not engage in large-scale systematic monitoring or processing of special category data. Privacy-related requests are handled directly by our team at Get in Touch.

2. Data We Collect

2.1 Visitors (No Account)

2.2 Registered Users

3. Legal Basis for Processing

• Contract (Art. 6(1)(b)): Account creation, saved articles, and core account features.
• Consent (Art. 6(1)(a)): Language preference, newsletter subscription, and posting comments.
• Legitimate Interest (Art. 6(1)(f)): Scroll position restoration, session management, and aggregated anonymous visit source analytics.
• Legal Obligation (Art. 6(1)(c)): Data retention required by law or for legal claims.

Withdrawing consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. To withdraw consent:

• Newsletter: Use the unsubscribe link in any email we send you.
• Language preference: Clear your browser’s localStorage at any time.
• Comments: Delete your comment(s) from your account, or contact us at Get in Touch to request removal.

4. How We Use Your Data

• Authentication: To verify your identity and secure your account.
• Comments: To display your comments publicly on articles.
• Saved Articles: To provide your personal reading list.
• Newsletter: To send you weekly updates (only if you subscribe).
• Site Improvement: Aggregated, anonymous analytics to improve our service.

5. Data Sharing

We use trusted third-party services to operate our platform. Your data may be processed by:

• Google LLC: Firebase (authentication, database), Google OAuth (login).
• Email Service Provider: Mailgun and/or Brevo (newsletter delivery).

All third-party processors comply with GDPR through Standard Contractual Clauses. We do not sell your personal data to anyone.

6. Data Retention

• Account data: Retained until you request deletion.
• Saved articles: Retained until you remove them or delete your account.
• Comments: You can delete your own comments anytime. Otherwise, retained until the article is deleted.
• Newsletter subscription: Retained until you unsubscribe.
• Consent records: Retained for 6 years after account deletion (legal compliance).

7. Your Rights Under GDPR

As a user in Finland/EU, you have the following rights:

• Right to Access: Request a copy of all data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Delete your account and associated data (with some legal exceptions).
• Right to Portability: Export your data in a machine-readable format (JSON).
• Right to Object: Unsubscribe from newsletters or opt out of certain processing.
• Right to Restrict Processing: Limit how we use your data in specific circumstances.

To exercise these rights, contact us at Get in Touch. We will respond within 30 days as required by GDPR Art. 12(3).

Right to Lodge a Complaint: You have the right to lodge a complaint with the Finnish supervisory authority (Office of the Data Protection Ombudsman) or the supervisory authority in your EU member state of residence, if you believe our processing of your personal data violates GDPR.

8. Cookies and Browser Storage

We use browser storage technologies to enhance your experience:

• localStorage: Stores your language preference permanently (until you clear browser data).
• sessionStorage: Temporarily stores scroll position during your browsing session.
• Cookies: Firebase Authentication may use cookies for session management (essential for login).

You can manage or clear this data through your browser settings. Note that disabling storage may affect site functionality.

9. Cross-Border Data Transfers

Your data is primarily stored in the European Economic Area (EEA). However, some data may be transferred to the United States when processed by Google Firebase. These transfers are protected by Standard Contractual Clauses approved by the European Commission, ensuring GDPR-equivalent protection.

10. Automated Decision-Making

We do not make any automated decisions about you that produce legal or similarly significant effects (GDPR Art. 22). Our AI pipeline is used solely to enrich and summarize article content. It does not profile users or make decisions about individual users.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated to registered users by email at least 14 days before taking effect. Non-material changes (e.g. clarifications, typo corrections) will be posted on this page with an updated revision date. Continued use of the service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data rights, please contact:

Data Protection Contact
Relefy Media Oy
Email: Get in Touch
Response time: Within 30 days

Supervisory Authority
Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Email: Get in Touch
Website: tietosuoja.fi