Skip to content

    Privacy policy

    Last updated: 19/09/2026

    1. Data controller

    The data controller for the Matkustelu.fi website is Matkustelu.fi.

    Contact details:
    Email: info@matkustelu.fi
    Location: Helsinki, Finland

    2. Personal data we process

    • Behavioural data: how you use our site (page views, clicks, link tracking)
    • Device data: device type, operating system, browser version
    • Location data: approximate location derived from your IP address
    • Third-party identifiers: affiliate link tracking

    3. Cookies and web tracking

    Matkustelu.fi uses cookies and other web tracking technologies to improve the user experience and to analyse how the site is used. All analytics cookies require your explicit consent before they are activated.

    3.1 Google Analytics (GA4)

    We use Google Analytics 4 to analyse site traffic and user behaviour. Google Analytics uses cookies to recognise a visitor between browser sessions. The following data is sent to GA4:

    • Page view data
    • Click data and event interactions
    • Device data (operating system, browser, device type)
    • Approximate location (never a precise address)

    3.2 Consent Mode (Google Consent Mode v2)

    The cookie banner on the site implements Google Consent Mode v2. By default, analytics and advertising-related consent states are denied. When the user accepts analytics cookies, only GA4 analytics storage is enabled.

    • The user clicks "Accept" in the cookie banner
    • The consent is stored in the browser's local storage
    • The GA4 analytics_storage: 'granted' flag is activated
    • The advertising-related ad_storage, ad_user_data and ad_personalization states remain denied

    3.3 Other cookies

    • Theme cookie: stores the user's dark/light theme preference
    • Consent cookie: remembers the cookie consent settings (key: matkustelu-cookie-consent)

    4. Legal basis for processing

    We process personal data on the following legal bases:

    • Consent (GDPR 6(1)(a)): analytics data is collected only with the user's explicit consent
    • Legitimate interest (GDPR 6(1)(f)): technical functionality and security of the site

    5. Third parties and data transfers

    Personal data may be transferred to the following third parties:

    • Google LLC (USA): the Google Analytics 4 platform. Google has committed to Standard Contractual Clauses (SCC) for data transfers.
    • Affiliate partners: Booking.com, GetYourGuide, Skyscanner and others receive link click and conversion data

    6. Data retention periods

    • GA4 data: 14 months by default
    • Cookie consent: stored in the browser's local storage until the user clears their browser data
    • Other cookies: vary by cookie (3 months – 1 year)

    7. Your rights (GDPR)

    In relation to the processing of your personal data you have the following rights:

    • Right of access (Art. 15)
    • Right to rectification (Art. 16)
    • Right to erasure (Art. 17), the "right to be forgotten"
    • Right to restriction of processing (Art. 18)
    • Right to data portability (Art. 20)
    • Right to object (Art. 21)

    You can also:

    • Decline analytics cookies in the cookie banner
    • Delete cookies in your browser settings
    • Use your browser's "Do Not Track" setting

    8. Withdrawing consent

    You can withdraw your analytics consent at any time:

    • Click the Cookie settings button at the bottom of the page
    • Choose "Decline" in the cookie banner that reopens
    • Remove the matkustelu-cookie-consent entry from your browser

    9. Security

    We are committed to protecting your personal data with appropriate technical and organisational safeguards, such as:

    • HTTPS encryption for all data transfers
    • Regular security reviews
    • Restricted access to personal data

    10. Contact and complaints

    If you have questions about our privacy practices or wish to exercise your GDPR rights:

    Email: info@matkustelu.fi

    You also have the right to lodge a complaint with the data protection authority (the Office of the Data Protection Ombudsman in Finland).

    11. Changes to this privacy policy

    We update this privacy policy as needed based on legislative changes or changes to our site. We will announce significant changes via the date above and/or by email.