Privacy
Privacy notice
This notice explains how the markushuotari.fi website processes technical usage data. The website is not a patient record system and does not receive appointment or patient data from Mehiläinen.
1
Controller and contact
Markus Huotari
markushuotari.fi
Markus.huotari@mehilainen.fi
Use this address for privacy requests concerning this website. Do not send patient information or other health identifiers by ordinary email.
2
What data is processed and why
Technical server logs
The hosting environment may record information needed to deliver and secure the site, such as the request time, requested address, IP address, browser or device information and technical error data. The purpose is service delivery, security, fault diagnosis and abuse prevention. The legal basis is the controller’s legitimate interest in operating a secure website.
Google Analytics 4
Google Analytics is loaded only after you have actively allowed analytics. The purpose is to understand aggregate use of the site and appointment-link clicks. The legal basis is consent. You can continue using the site with essential functions only.
3
Analytics data and minimisation
The standard Analytics implementation may process session statistics, approximate location and general browser and device information. This site configures analytics without Google Signals or advertising personalisation and sends its own page location without query parameters or fragments.
The site may measure an appointment-link click and where the link was located. On the professional-tools landing page, it may measure that a named tool link was opened. Calculator inputs, calculation results, form contents, personal identity codes, patient data, free text, medicine or symptom details are not sent to Analytics.
A visited page address may reveal a health-related interest even though it is not a diagnosis or patient record. For that reason analytics is optional, consent-based and minimised.
4
Recipients, transfers and retention
Technical log data may be processed by the website hosting and technical service providers to the extent necessary to provide and secure the service. When analytics is allowed, Google Ireland Limited and its group companies may process Analytics data under Google’s terms and privacy safeguards.
Google states that data from EU-based devices is collected through EU-based domains and servers before traffic may be forwarded for Analytics processing. Processing or access may nevertheless involve countries outside the EU/EEA. Google describes the applicable safeguards in its Analytics data-protection terms and privacy information.
Server logs are retained only as long as needed for service operation, security and fault investigation, after which they are deleted or overwritten according to the hosting provider’s practice. In a standard GA4 property, user- and event-level data is retained according to the property setting, with a maximum selectable period of 14 months; standard aggregated reports may not be governed by the same setting. This site retains the data for no longer than the period configured in that setting, unless it is deleted earlier.
5
Your choices and rights
You can allow or decline analytics in the consent banner. You can change the choice at any time using “Privacy settings” in the footer. Withdrawal does not affect processing carried out before withdrawal. Declining removes Analytics cookies that the site can identify in the browser.
Depending on the processing and legal basis, you may have the right to access, rectify or erase personal data, restrict processing, object to processing and receive information about processing. Not all rights apply in every situation. Send a sufficiently specific request to the contact address above.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you consider the processing unlawful. Finnish Data Protection Ombudsman.
6
Mehiläinen and appointment data
Appointment links take you to Mehiläinen’s service. Mehiläinen is responsible for the personal and patient data processed in its appointment and healthcare services under its own privacy notices. markushuotari.fi does not receive the information you enter there.
7
Changes to this notice
This notice is updated when the site’s data processing, service providers or legal requirements materially change.
Last updated: 12 July 2026.