Privacy notice
Last updated 5 October 2026
1. Controller
The controller is Roger Vergés. Contact: asumisvalinta@gmail.com.
2. Data processed
- Usage data: inputs to the calculator and the map, and the results shown. Events from one visit share a random number that is created when the page loads and is not stored on your device.
- Questions submitted to the assistant and the status of the answer. Questions from one visit share a random number that limits how many can be asked; it lives only in the open page and is not stored on your device.
- Page views, counted by Cloudflare Web Analytics without cookies or other identifiers.
- A keyed one-way hash of the IP address, used only to limit how often requests can be sent. The key changes daily and the hash is stored apart from all other data.
3. Purpose and legal basis
- Operating, developing and securing the service: legitimate interest (Article 6(1)(f) GDPR).
- Answering questions submitted to the assistant and their use for training AI models: consent (Article 6(1)(a) GDPR).
4. Recipients and transfers
- AI service providers: questions submitted to the assistant, including for the training of AI models. Data may be transferred outside the EU/EEA subject to appropriate safeguards (Chapter V GDPR).
- Hosting providers (Cloudflare, Google Cloud). The API runs in Finland and stored data are located in the EU.
5. Retention
Usage data and questions are deleted after twelve months. IP address hashes are deleted after one day.
6. Cookies
The service does not use cookies. Do Not Track and Global Privacy Control signals are respected.
7. Your rights
You have the right to access, rectify and erase your personal data, to object to its processing and to lodge a complaint with the Data Protection Ombudsman (tietosuoja.fi). Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
The controller does not link usage data or questions to an identified person and is not required to obtain additional information for that purpose (Article 11(1) GDPR). Where the controller is unable to identify you, your rights of access, rectification, erasure, restriction of processing and data portability under Articles 15 to 20 GDPR apply once you provide additional information that enables your data to be identified (Article 11(2) GDPR), such as the exact wording of a question you submitted and the approximate date and time it was sent. Requests should be sent to the contact address above.