Privacy Policy 

1. What this policy covers

 

How we collect, use, share, store, and protect personal data of learners, instructors, and site visitors, including when using our

​

• Website

• Community

• Chat

• Analytics tools 

 

Platform provider (Wix). Our website is built and hosted on Wix.com Ltd. (“Wix”). Wix provides the online platform that allows us to operate this site and related services. In relation to personal data of our site visitors and customers, we act as the data controller and Wix generally acts as our data processor, processing data on our instructions under Wix’s Data Processing Agreement. You can learn more in Wix’s Privacy Policy, DPA, and Sub-processor list: Wix Privacy Policy, Wix Data Processing Addendum, Wix sub-processors.

 

2. The data we collect

2.1 Data you provide

 

• Account & profile: name, email, password, image, time zone, language, job title.
   

• Support & communication: messages and responses.
   

• Community/UGC: posts, comments, likes, uploaded files.

 

2.2 Data collected automatically

 

• Device & usage: IP address, device/browser, pages viewed, session duration and session recording.

 

• Cookies & similar tech: see Cookie Policy for details and choices. Because we use Wix, the platform may set functional and security cookies (e.g., session management, fraud prevention, load balancing) that are necessary for the site to work. Non-essential cookies (analytics/marketing) run only with your consent.

 

2.3 Data from third parties

 

• Single sign-on (SSO): name, email from Google/Microsoft/etc.

​

• Marketing & social ads: campaign IDs, conversions (pseudonymous).

 

3. Purposes & legal bases (GDPR)

When we process your personal data we only do so when permitted by law.

 

This includes:

Where the processing is necessary for our legitimate interests, only when your interests and rights do not override our interests (our interests include: monitoring interest in the toolbox development, monitoring the impact of the toolbox and generating interest in the toolbox).

​

4. Cookies & tracking

 

We use necessary, performance/analytics, functional, and advertising cookies. Non-essential cookies run only with your consent. Manage preferences any time via Cookie Settings in the footer. See our separate Cookie Policy for vendors, durations, and categories. Note: The Wix platform sets some necessary cookies to provide core site functionality and security.

​

5. Community features

 

Posts and profiles in forums/groups may be public to other enrolled users. Please avoid sharing sensitive personal data. We moderate per our Community Guidelines.

 

6. Sharing your data

 

We share data only as needed with:

 

Service providers (processors): Wix (hosting/platform), analytics (e.g., Wix analytics and TWIPLA).

​

We do not sell personal data.

 

7. International transfers

 

Where data is transferred outside the EEA/UK, we use approved safeguards (e.g., EU Standard Contractual Clauses) and assess local laws. Wix and some of our other processors may store and process data in multiple jurisdictions under such safeguards. Details and a list of sub-processors are available on request or in our DPA (and see Wix’s sub-processor list).

 

8. Data retention

 

We keep data only as long as necessary for the purposes above:

​

9. Your rights (GDPR)

 

You can request access, rectification, deletion, restriction, portability, or objection to processing. Where processing is based on consent, you can withdraw it at any time.

 

To exercise rights: contact toimisto@moniheli.fi.

EU/EEA users may lodge a complaint with their supervisory authority.

 

10. Security

 

We use measures appropriate to risk, including encryption in transit, access controls, MFA for staff, regular backups, and vendor due diligence. No method is 100% secure; if we detect a breach affecting you, we’ll notify you per applicable laws.

 

11. How to manage your data

 

Profile & settings: update info.

 

Account deletion: request deletion from your account settings or via email; some records may be retained per law.

 

12. Marketing communications

 

We send emails about the toolbox and updates only with your consent (or soft opt-in where permitted). You can unsubscribe anytime via the link in the email or from your profile.

 

13. Third-party links

 

Our site may link to external sites we don’t control. Their privacy policies apply.

 

14. Changes to this policy

 

We’ll update this policy when needed. Material changes will be announced via email or in-app notice. Check the Effective date above.

 

15. Contact us

​

Data Protection Officer:

Julie Breton

Executive Director

toimisto@moniheli.fi