This page contains information regarding the collection and processing of data in accordance with and as mandated by the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

 

The Privacy and Cookies Policy was last updated on May 28, 2026. 

1. Preamble 
 

Data protection safeguards individuals’ rights regarding the collection, processing, and storage of their personal data. 
 

Protect Children values data privacy and collects and treats personal information in accordance with data protection regulations. Particularly, Protect Children complies with the obligations under the EU’s General Data Protection Regulation (GDPR), the Finnish Associations Act (503/1989), and other good data protection practices.
 

Protect Children has a robust Privacy Policy in place: Protect Children Privacy Policy.
 

2. Controller & Data Protection Officer

​

Suojellaan Lapsia ry/ Protect Children 

Käenkuja 3a, 6th floor, 00500 Helsinki, Finland 

  

The data controller and Data Protection Officer is Protect Children’s Executive Director Nina Vaaranen-Valkonen.  

Contact details: +358 40747 8829, nina.vaaranen-valkonen@suojellaanlapsia.fi

 

Only employees of Protect Children process any personal data collected through the organisation’s projects and activities.

​

3. Data collection, purposes and legal basis of processing

​

Protect Children is committed to protecting the privacy and personal data of all individuals who use More Than a Device Training Platform and participate in project activities. The More Than a Device Training Platform contains podcasts, short video series, and interactive exercises about digital safety skills, to enable and empower parents and caregivers to discuss digital safety with their children.

​

The More Than a Device Project is designed to minimise the collection of personal data and does not intentionally collect personal data from users. However, users may voluntarily provide personal data when submitting feedback through the forms included in the More Than a Device Training Platform. Users are encouraged not to submit personal or sensitive information through feedback forms.

​

Any personal data voluntarily submitted through the More Than a Device Training Platform feedback forms will only be processed for the following purposes:

• Evaluating and improving the More Than a Device Training Platform and its contents

• Monitoring and assessing More Than a Device Project impact

• The legal basis for processing such personal data is:

• The legitimate interests of Protect Children in evaluating and improving the More Than a Device Training Platform

• The data subject’s consent when voluntarily submitting information through feedback forms

​

​4. Data storage and service providers

​

Any personal data voluntarily submitted through More Than a Device Training Platform feedback forms will be securely stored on Wix, the website hosting and content management platform used by the More Than a Device Training Platform. Wix implements industry-standard security measures to protect user data from unauthorised access, loss, or misuse. More information is available in the Wix.com Privacy Policy: https://www.wix.com/about/privacy.  

​

5. Cookies 

​

​The More Than a Device Training Platform website uses cookies for the website functionality, security and analytics.

More information about the use of cookies is available in: Protect Children Cookies Policy.

​

​6. Data retention 

​

​More Than a Device Project abides by data privacy laws and good data protection practices when processing personal data. 

Personal data submitted through More Than a Device Training Platform feedback forms will only be retained for as long as the intended purpose of the More Than a Device Project remains relevant, e.g., for the duration of the project and related reporting obligations.

​

​7. Rights of the data subject 

​

​According to the EU General Data Protection Regulation (2016/679), the data subject has the right to:

• Be informed about the processing of their personal data (article 13)

• Access the personal data the data controller has on them (article 15)

• Obtain the rectification from the data controller of inaccurate personal data concerning them (article 16)

• Obtain from the controller the erasure of personal data concerning them (article 17)

• Obtain from the controller the restriction of processing their personal data (article 18)

• Not to be subject to a decision based solely on automated processing (article 22)
   

The data subject may exercise these rights by contacting the controller or Data Protection Officer.

​

The data subject has the right to lodge a complaint with a supervisory authority if they find that the data protection regulation has been infringed upon in the processing of their personal data.

​

In Finland the Data Protection Authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).