Legal Documentation

Privacy Policy

Effective Date: January 1, 2026 • Last Revised: March 2026

At storyporchfreshsgn.pics, published by Storyporch Arctic Ventures Oy, we treat your personal privacy with the same straightforward honesty we bring to Arctic field advice. We adhere strictly to the European Union General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Finnish national data protection legislation (Tietosuojalaki 1050/2018).

1. Data Controller

2. Categories of Personal Data We Process

We do not require user accounts, passwords, or payment credentials to read any portion of this website. We collect personal data strictly when you provide it directly to us:

• Contact and Inquiry Records: When you send a query through our contact form, we collect your full name, email address, chosen inquiry topic, and message content.
• Technical Diagnostic Data: Ephemeral server logs including your IP address, browser type, operating system, and request timestamps, recorded automatically for security defense and network stability.
• Cookie & Consent Preferences: A local storage entry recording whether you accepted or customized our cookie preferences banner.

3. Lawful Bases for Processing

We process personal information under the following recognized GDPR legal grounds:

• Consent (Article 6(1)(a) GDPR): When you voluntarily submit a message through our inquiry form or activate non-essential browser cookies.
• Legitimate Interests (Article 6(1)(f) GDPR): Maintaining network security, preventing distributed denial-of-service (DDoS) disruptions, and answering reader correspondence regarding Arctic travel notes.
• Legal Obligation (Article 6(1)(c) GDPR): Preserving corporate correspondence where mandated by statutory Finnish accounting and commercial record rules.

4. Data Sharing and Third-Party Disclosures

We never sell, rent, monetize, or trade your personal information. Your information is never transferred to behavioral ad brokers. Personal data is only accessible to authorized team members and carefully audited technical infrastructure processors:

• Hosting and data center providers located within the European Economic Area (EEA).
• Encrypted email transport relays adhering to strict contractual data processing agreements (DPAs) meeting GDPR Article 28 standards.

5. Storage Retention Periods

We retain personal data only for as long as necessary to satisfy the purpose for which it was gathered:

• Inquiry messages sent via the contact form are retained for up to twelve (12) months after the final reply is transmitted, after which they are permanently deleted.
• Server diagnostic log records are automatically purged or anonymized within thirty (30) days.
• Browser cookie choice tokens remain in your browser storage for up to twelve (12) months unless cleared manually.

6. Your Statutory Rights Under the GDPR

As an individual in the EEA or worldwide interacting with our site, you possess the following rights:

• Right of Access (Article 15): Obtain confirmation as to whether we process your data and receive a copy of that data.
• Right to Rectification (Article 16): Correct inaccurate or incomplete contact records.
• Right to Erasure (Article 17): Request deletion of your contact records (“Right to be Forgotten”).
• Right to Restriction of Processing (Article 18): Request temporary limitation of processing while an inquiry is being verified.
• Right to Data Portability (Article 20): Receive a copy of your submitted data in a structured, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent: Revoke consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We respond to verified requests within thirty calendar days without charging an administrative fee.

7. Right to Lodge a Complaint

If you believe our processing of your personal information infringes upon European privacy regulations, you have the statutory right to file a complaint with your local supervisory authority or with our lead data protection authority in Finland:

8. Amendments to This Policy

We may occasionally update this Privacy Policy to reflect changing technical operations or legal adjustments. Any revisions will be published here with an updated revision date.