Privacy

Principles

SuomiStat does not sell any personal data, collects only what is strictly necessary and does not require an account. The content of the website (statistics by municipality and by region) contains no personal data.

Audience measurement

SuomiStat measures its traffic with an in-house tool, without cookies, without storing anything in your browser and without any external service. For each page viewed, it records: the date and time, the address of the page (without its parameters), its title, the origin of the visit (direct access, search engine, social network, another website or campaign), the device, browser and operating system family, the connection type, the language, the city, region, country and network operator inferred from your IP address at the time of the visit, the time spent on the page, scrolling, clicks on links and on the form, and the loading time.

Your IP address and the full identification of your browser are never stored. A visit code, an irreversible hash calculated with a salt drawn at random each day and destroyed the next day, makes it impossible to recognise a visitor from one day to the next or from one website to another. Bots are not counted. This data is used solely to measure the website's audience and to improve it (legitimate interests of ALTI SAS), is not combined with any other processing, is not passed on to anyone and is kept for 25 months at most. The counting respects the “Do Not Track” and Global Privacy Control signals: if either is enabled, your page views are not counted.

This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.

Advertising and third-party cookies

The website displays Google AdSense advertisements. Google's advertising script is loaded for all visitors: to display an advertisement, Google receives the IP address of your request and technical information about your browser.

Cookies from Google and its partners, ad personalisation and any other collection for advertising purposes are used only with your consent, given or refused in Google's consent window, a consent management platform certified by Google and compliant with the IAB Transparency and Consent Framework (TCF), which is displayed in the European Economic Area, the United Kingdom and Switzerland. Without your consent, the advertisements displayed are not personalised or are limited. You can change your choices at any time using the “Manage cookies” link at the bottom of each page.

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website or to other websites. Google's and its partners' use of advertising cookies enables them to serve ads based on your visits to this site and to other sites. You can opt out of personalised advertising in Google Ads Settings or at aboutads.info. Google processes this data under its own rules: policies.google.com/technologies/ads and how Google uses data from partner sites.

Hosting and delivery

The website is hosted by Infomaniak (Switzerland), a country recognised by the European Commission as providing an adequate level of protection. It is delivered through the Cloudflare, Inc. network (United States), which processes the IP address of each request in order to route and protect the pages. The website's maps, fonts and scripts are served from the website itself.

Technical security logs

To ensure the operation and security of the website and to detect abuse, the host and Cloudflare keep technical logs of connections (including IP address, date and time, pages requested and browser type). They act on our behalf and keep these logs for as long as their commitments and the law require. The legal basis for this processing is the legitimate interests of website security.

Contact form

The name, email address and message you enter are stored in a database located on the website's hosting. They are used solely to reply to you (legitimate interests of ALTI SAS in replying to requests addressed to it) and are deleted after 365 days. They are necessary to process your request. No IP address is stored with the message, the website's server sends no email, and an internal anti-spam check protects the form. This data is neither sold nor passed on.

Purposes, legal bases, retention periods and recipients

  • Audience measurement: to measure and improve website traffic; legitimate interests; 25 months at most; no external recipient.
  • Advertising: to display advertisements and, with your consent, personalise them; consent for cookies and personalisation; period set by Google according to the type of cookie; recipient: Google.
  • Contact form: to reply to your request; legitimate interests; 365 days; recipients: ALTI SAS and its host.
  • Operation and security: to route and protect the pages; legitimate interests; period set by the host and Cloudflare; recipients: Infomaniak and Cloudflare.

Transfers outside the European Union

The data is processed by ALTI SAS in France. Some of it is processed in third countries: in Switzerland (hosting), a country recognised as adequate by the European Commission, and in the United States (Cloudflare, Google). These transfers rely on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for certified companies or, failing that, on standard contractual clauses and, for visitors from the United Kingdom and Switzerland, on the equivalent mechanisms provided for by their law.

Your rights

You have the right of access, rectification, erasure, restriction of processing and, where applicable, portability of your data, as well as the right to withdraw your consent at any time (“Manage cookies” link at the bottom of each page), without affecting what was done before the withdrawal. You may also set directives on what happens to your data after your death, in accordance with Article 85 of the French Data Protection Act (loi Informatique et Libertés).

Right to object to audience measurement

You may object at any time to audience measurement, on grounds relating to your particular situation. Simply enable the “Do Not Track” or Global Privacy Control signal in your browser, both of which are respected automatically, or send your request via the contact form.

Exercising your rights and complaints

To exercise your rights, use the contact form. We reply within one month, which may be extended by two further months if the request is complex, in which case we will inform you. Proof of identity is requested only where there is reasonable doubt about your identity. If you consider that your rights are not being respected, you may lodge a complaint with Office of the Data Protection Ombudsman or with the Commission nationale de l'informatique et des libertés (CNIL), the supervisory authority of ALTI SAS.

Automated decision-making and data protection officer

No decision based solely on automated processing and producing legal effects concerning you is taken. ALTI SAS has not appointed a data protection officer.

Data controller

The data controller is ALTI SAS. See the legal notice. Contact: contact form.

Changes to this policy

ALTI SAS may amend this policy to reflect changes to the website or to the law. Only the online version applies; in the event of a significant change, SuomiStat will say so on this page.