More variety in everyday meals

Privacy policy

Last updated: 14 May 2026. This policy explains how Pluzarinshimor.world (“we”, “us”), trading under Finnish Business ID (Y-tunnus) 3250442-2, processes personal data when you use our website, send us a message, sign up for tips by email, or use optional cookies. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018), together with other applicable EU and Finnish law (including rules on cookies and electronic direct marketing where they apply).

This text is provided for transparency. It does not replace legal advice for your own situation.

1. Data controller

Controller: Pluzarinshimor.world
Finnish Business ID (Y-tunnus): 3250442-2
Postal address: Rantakatu 3, FI-65100 Vaasa, Finland
Email: mailuse@pluzarinshimor.world
Phone: +358 40 591 2117

You can check business IDs in Finland via the YTJ (Business Information System) service.

We have not appointed a Data Protection Officer (DPO) under GDPR Articles 37–39, as we are not required to do so. For privacy requests, contact us using the details above.

2. Categories of personal data

Depending on how you use the site, we may process:

• Identity and contact data — for example name, email address, and the content of your message when you use the contact form or email us.
• Newsletter or tips-by-email data — email address and related preferences if you sign up for messages (we process this only on a legal basis set out below).
• Technical and usage data — for example IP address, browser type, device identifiers, date and time of access, and pages requested. This data may be generated when you load the site, when forms are submitted, or when optional analytics tools are activated after consent.
• Consent records — information about your cookie choices stored locally in your browser (see our cookie policy).

We do not ask you to provide special categories of personal data within the meaning of GDPR Article 9 (for example data about health). If you voluntarily include such information in a free-text message, we will use it only to handle your enquiry—or delete it if there is no need to retain it—and not for unrelated purposes, unless a separate legal basis applies.

3. Sources of personal data

We receive personal data directly from you (forms, email, phone) and from technical processes necessary to display the site (server and, where applicable, hosting or analytics logs).

4. Purposes and legal bases (GDPR Article 6)

• Answering your contact request — GDPR Article 6(1)(b) (steps at your request prior to a possible contract) and/or Article 6(1)(f) (legitimate interest in responding to routine enquiries). The contact form includes a specific consent checkbox; where Finnish law treats that confirmation as necessary for fairness and transparency, it supports the same purpose.
• Operating the website and delivering content — Article 6(1)(f) (legitimate interest in providing a functional, secure service).
• Security, misuse prevention, and technical logs — Article 6(1)(f) (legitimate interest in integrity and availability of the service).
• Electronic direct marketing (e.g. tips by email) — Article 6(1)(a) (consent) where Finnish and EU rules require prior consent for marketing messages. You may withdraw consent at any time using the unsubscribe mechanism we provide or by contacting us.
• Compliance with a legal obligation — Article 6(1)(c), for example bookkeeping, tax, or authority requests where applicable.
• Non-essential cookies (analytics, marketing) — Article 6(1)(a) (consent), in line with the ePrivacy rules as applied in Finland together with the GDPR. Details are in the cookie policy.

Where we rely on legitimate interests (Article 6(1)(f)), you have the right to object under GDPR Article 21, subject to the conditions of that article.

5. Automated decision-making and profiling

We do not use automated decision-making, including profiling, which produces legal or similarly significant effects concerning you within the meaning of GDPR Article 22.

6. Form submissions and URLs

Some forms on this static site may use the HTTP GET method for demonstration. That can place the values you enter in the browser address bar and in standard web server access logs. In production we recommend configuring forms to use POST and server-side handling to reduce unnecessary exposure of personal data in URLs. Until then, assume hosting logs may contain query parameters.

7. Retention

We keep personal data only as long as necessary for the purposes above. Indicative periods:

• Contact messages — typically up to twenty-four (24) months after the last message in a thread, unless a longer period is required for legal claims, accounting, or statutory retention.
• Marketing or newsletter lists — until you unsubscribe or withdraw consent, then we delete or anonymise without undue delay unless another law requires retention.
• Server and security logs — according to our hosting provider’s technical defaults, adjusted where we can contractually require shorter retention and minimisation.
• Cookie / consent preferences — stored in your browser until you clear site data; see the cookie policy.

8. Recipients and processors

Personal data may be processed by service providers we use as processors (for example IT hosting, email delivery, or analytics if enabled after consent). We choose providers with appropriate agreements and, where required, data processing terms under GDPR Article 28. We do not sell your personal data.

Authorities may receive data where the law requires a disclosure.

9. Transfers outside the EU/EEA

Where personal data is transferred to countries outside the European Union or the European Economic Area, we rely on a transfer tool recognised under GDPR Chapter V (for example the European Commission’s standard contractual clauses, an adequacy decision, or another permitted derogation where applicable). You may request further information about safeguards by contacting us.

10. Your rights

Under the GDPR and the Finnish Data Protection Act, you have the following rights where the legal conditions are met:

• Right of access (Article 15) — to obtain confirmation of processing and a copy of your personal data.
• Right to rectification (Article 16) — to correct inaccurate data.
• Right to erasure (“right to be forgotten”) (Article 17) — in defined cases.
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20) — for data you provided, where processing is based on consent or contract and is automated.
• Right to object (Article 21) — notably to processing based on legitimate interests, and to direct marketing.
• Right to withdraw consent (Article 7(3)) — at any time, without affecting the lawfulness of processing before withdrawal, where processing is based on consent.
• Right to lodge a complaint with a supervisory authority (Article 77) — see section 11.

To exercise your rights, contact us at the email address in section 1. We will normally respond within one (1) month as required by GDPR Article 12(3). That period may be extended by up to two (2) further months where permitted by Article 12(3) and we will inform you of any extension and reasons.

11. Supervisory authority (Finland)

If you consider that our processing infringes applicable data protection law, you have the right to lodge a complaint with the supervisory authority in your place of residence, place of work, or the place of the alleged infringement. In Finland the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto):

Office of the Data Protection Ombudsman
Street address: Lintulahdenkuja 4, FI-00530 Helsinki, Finland
Postal address: PO Box 800, FI-00531 Helsinki, Finland
Phone: +358 29 566 6700
Email: tietosuoja@om.fi
Website: tietosuoja.fi/en

12. Security

We apply appropriate technical and organisational measures under GDPR Article 32, such as access controls, agreements with processors, and encryption in transit where available. No method of transmission over the Internet is completely secure.

13. Children

The site is intended for adults planning household meals. We do not knowingly collect personal data relating to children without an appropriate legal basis (for example parental authority where required). If you believe we have collected a child’s data in error, please contact us and we will take steps to delete it.

14. Changes to this policy

We may update this policy to reflect legal changes or our practices. The “Last updated” date will change accordingly. Material changes will be highlighted on the site where appropriate.

Contact the controller