This privacy notice explains how Suomen Taidekasvatuksen Tutkimusseura ry (the Finnish Society for Research in Art Education) processes personal data on this website. It does not cover the Society's separate membership register — see section 9.
1. Controller
Suomen Taidekasvatuksen Tutkimusseura r.y. (Business ID 3038977-4).
2. Contact for data-protection matters
stts@uniarts.fi. The Society has not separately appointed a Data Protection Officer: Article 37 GDPR's appointment requirement applies to public authorities and to organisations carrying out large-scale, regular monitoring or large-scale processing of special categories of data, and neither ground applies to this website's own processing.
3. What data we process
- Ordinary technical log data (including your IP address) when you visit the site — to keep the site secure and working correctly.
- Visitor statistics (WP Statistics): the site processes visitors' IP addresses to maintain simple, aggregate visitor statistics for understanding site usage. The IP address is truncated and hashed before storage, so the original IP address is not retained, and it is used to derive a coarse geographic location (e.g. country). Data is stored only in the site's own database, and this feature does not store any cookies in your browser.
- If you contact us by email, we process the information you send (e.g. your name, email address and message content) in order to respond to you.
The site does not use advertising or profiling cookies, does not embed social-media content, and does not use external font or map services.
4. Purposes of processing and legal bases
- Website security and technical functioning — legitimate interest (Article 6(1)(f) GDPR).
- Visitor statistics (WP Statistics): understanding site usage and maintaining aggregate usage statistics — legitimate interest (Article 6(1)(f) GDPR).
- Responding to enquiries — legitimate interest (Article 6(1)(f) GDPR).
5. Cookies
The site does not currently use cookies for ordinary, logged-out visitors. When content editors sign in to the WordPress admin area, WordPress's own cookies — strictly necessary to maintain login and session state — are used; these do not affect ordinary site visitors.
6. Recipients and processors
The site's technical implementation and maintenance may mean that the service provider handling its technical upkeep also processes log data as part of ordinary server administration. Data is not disclosed for marketing or advertising purposes.
7. Transfers outside the European Economic Area
No transfers of data outside the European Economic Area have been identified in connection with this website's own processing.
8. Retention period
We retain data only for as long as necessary for each processing purpose. Visitor-statistics (WP Statistics) data is automatically deleted by a scheduled database-maintenance routine approximately every 180 days. Server technical log data is retained for as long as the site's technical maintenance and security require. Data relating to enquiries is retained for as long as handling the enquiry and any necessary follow-up require.
9. Membership register (separate service)
The Society's membership register is maintained in a separate service, FloMembers. This privacy notice covers only this website — it is not the membership register's own privacy notice. For more information about how the membership register is handled, contact the Society at stts@uniarts.fi.
10. Your rights
You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, and to withdraw your consent at any time where processing is based on consent. The right to data portability applies only to processing based on consent or contract that is carried out by automated means, and does not, as such, apply to the legitimate-interest-based processing described in this notice. To exercise these rights, contact the address given in section 2.
11. Right to lodge a complaint
If you consider that the processing of your personal data breaches data-protection law, you have the right to lodge a complaint with a supervisory authority. In Finland, the competent authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).
12. Automated decision-making
We do not use automated decision-making or profiling.
13. Updates to this notice
We may update this notice. This version was last updated on 16.9.2026.