Privacy policy

Marjakori.fi
Contact in data protection matters: [info@marjakori.fi]

Account details: name, email address, password hash (we never store the password in plain text) or a Google identifier if you sign in with Google. Optionally a phone number and profile picture.

Listings: product, quantity, price, description, pickup location coordinates and municipality, publication and sale dates.

Messages: conversations between users and their timestamps.

Reviews: star ratings and comments on completed trades.

Location: if you give your browser permission, we use your location to find listings near you. Your location is not stored on the server — it stays in your browser only. The pickup location coordinates of a listing are stored, because they are part of the listing's content.

Analytics and advertising: only with your consent. See section 6. Individuals cannot be identified from the data, because it is stored on Google's servers and linked to a random identifier. Google may use the data for ad targeting.

• Providing the service (account, listings, messages, reviews) — the legal basis is the performance of a contract.
• Preventing misuse and service security — legitimate interest.
• Analytics and advertising — consent, which you can withdraw at any time.

Public: your name, the content and municipality of your listings, and the public reviews you have received and their average. These are also visible to visitors who are not signed in and to search engines.

Not public: your email address, phone number and conversations. Your phone number is visible only to you.

We keep account data for as long as the account exists. When you delete your account, we delete your data. Data on completed trades and reviews may be retained without identifying information, so that the other party's reputation does not change afterwards.

Essential: the sign-in credential is stored in your browser and a small cookie tells the server that a session exists. These are essential for the service to function and do not require consent.

Analytics: Google Analytics 4 via Google Tag Manager. We use Google's Consent Mode: no measurement takes place before consent.

Advertising: Google AdSense. Google and its partners may use cookies to display and measure ads. Without your consent, ads are non-personalised.

Consent is given and withdrawn in the consent window, which you can open at any time from your profile page under Settings → Cookie settings.

We do not sell or pass on your personal data.

Some service providers may process data outside the EU. Transfers are based on standard contractual clauses approved by the European Commission or on an adequacy decision.

You have the right to:

• know what data about you is processed, and receive a copy of it
• rectify inaccurate data (some of it you can correct yourself on your profile page)
• request the deletion of your data
• object to the processing or restrict it
• withdraw your consent to analytics and advertising at any time
• lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi)

Requests: contact form or the email above. We will respond as soon as possible.

Connections are protected with HTTPS encryption. Passwords are stored in encrypted form. Access to the production database is restricted. However, we cannot guarantee complete security — if you suspect misuse, contact us immediately.

We may update this policy. We will announce material changes in the service.