Privacy
Privacy notice
This notice explains how the markushuotari.fi website processes technical usage data. The website is not a patient record system and does not receive appointment or patient data from Mehiläinen.
1
Controller and contact
Markus Huotari
markushuotari.fi
tietosuoja@markushuotari.fi
Use this address for privacy requests concerning this website. Do not send patient information or other health identifiers by ordinary email.
2
What data is processed and why
Technical server logs
The hosting environment may record information needed to deliver and secure the site, such as the request time, requested address, IP address, browser or device information and technical error data. The purpose is service delivery, security, fault diagnosis and abuse prevention. The legal basis is the controller’s legitimate interest in operating a secure website.
Google Analytics 4
Google Analytics is loaded only after you have actively allowed analytics. The purpose is to understand aggregate use of the site and appointment-link clicks. The legal basis is consent. You can continue using the site with essential functions only.
3
Analytics data and minimisation
With your consent, Google Analytics is loaded only on the Finnish and English homepages and the Symptoms and Patient guides index pages. It is not loaded on symptom-specific service pages, clinical articles, aftercare guides or professional calculators, even if you previously allowed analytics.
On the eligible pages, analytics measures aggregate visits and clicks on booking links. Page addresses exclude query parameters and fragments; titles identify only the general page group, and the referring page address is not sent in the analytics configuration. Booking-click events contain a fixed button-location category, not symptoms, calculator inputs or the information entered in Mehiläinen.
Analytics may process technical browser and device information and approximate location. Google Signals and advertising personalisation are disabled. Technical server logs are separate from analytics and may contain the requested address as described above.
4
Recipients, transfers and retention
Technical log data may be processed by the website hosting and technical service providers to the extent necessary to provide and secure the service. When analytics is allowed, Google Ireland Limited and its group companies may process Analytics data under Google’s terms and privacy safeguards.
Google states that data from EU-based devices is collected through EU-based domains and servers before traffic may be forwarded for Analytics processing. Processing or access may nevertheless involve countries outside the EU/EEA. Google describes the applicable safeguards in its Analytics data-protection terms and privacy information.
Server logs are retained only as long as needed for service operation, security and fault investigation, after which they are deleted or overwritten according to the hosting provider’s practice. In a standard GA4 property, user- and event-level data is retained according to the property setting, with a maximum selectable period of 14 months; standard aggregated reports may not be governed by the same setting. This site retains the data for no longer than the period configured in that setting, unless it is deleted earlier.
5
Your choices and rights
You can allow or decline analytics in the consent banner. You can change the choice at any time using “Privacy settings” in the footer. Withdrawal does not affect processing carried out before withdrawal. Declining removes Analytics cookies that the site can identify in the browser.
Depending on the processing and legal basis, you may have the right to access, rectify or erase personal data, restrict processing, object to processing and receive information about processing. Not all rights apply in every situation. Send a sufficiently specific request to the contact address above.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you consider the processing unlawful. Finnish Data Protection Ombudsman.
6
Mehiläinen and appointment data
Appointment links take you to Mehiläinen’s service. Mehiläinen is responsible for the personal and patient data processed in its appointment and healthcare services under its own privacy notices. markushuotari.fi does not receive the information you enter there.
7
Changes to this notice
This notice is updated when the site’s data processing, service providers or legal requirements materially change.
Last updated: 8 September 2026.
Professional tools
Local calculation, the session acknowledgement and server logs for the professional tools are described in a separate privacy notice (Finnish).