Privacy Statement: Voxit Service (Motiva Oy)

This privacy statement applies to the service https://app.motiva.voxit.fi. It has been prepared in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller and Contact Details

Motiva Oy
Siltasaarenkatu 10, 00530 Helsinki
Business ID 2901139-5

Contacts regarding data protection: tietosuoja@motiva.fi

2. Data Processor

Haltu Oy
Technical implementation, maintenance, security, and server capacity of the service.

3. Purpose and Legal Basis of Processing

We process data to provide the Voxit participation platform as a secure and functional service for people taking part in discussions. The service is used to collect opinions, comments, and votes and to compile discussion results.

The legal basis for processing is the legitimate interest of the controller, the performance of a task carried out in the public interest, or another basis applicable to the organization of the discussion, depending on the use case.

4. Data Content of the Register

The service is designed so that participation is primarily anonymous. To ensure the technical operation of the service, the following data may be processed:

• IP address to prevent misuse and ensure service security
• Cookies and other technical identifiers for session management and to ensure service functionality
• Content data such as comments, opinions, and votes submitted by the user

Comments may be moderated before publication. Any identifiable personal data is removed where possible or prevented from being published.

5. Sources of Data

Data is primarily collected directly from the user when they use the service.

6. Recipients of Personal Data

Data may be processed by Motiva Oy and by Haltu Oy, which is responsible for the technical maintenance of the service, only to the extent necessary to provide, maintain, and develop the service.

7. Retention Period

Personal data is stored only for as long as necessary to provide the service, comply with legal obligations, or investigate misuse. IP addresses are stored for a limited period to ensure technical security.

8. Rights of the Data Subject

Under applicable data protection legislation, the data subject has the right to access data concerning them, request rectification or erasure, restrict processing, object to processing, and lodge a complaint with the supervisory authority.

9. Data Security

The security of the service is protected with appropriate technical and organizational measures. Access to data is limited to parties who need it for their work tasks.