Privacy & Cookies Policy
This page contains information regarding the collection and processing of data in accordance with and as mandated by the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
The Privacy Policy was last updated on September 23, 2026.
1. Preamble
Data protection safeguards individuals’ rights regarding the collection, processing, and storage of their personal data.
Protect Children is committed to protecting the privacy and personal data of all individuals who use More Than a Device Training Platform and participate in the project activities. The More Than a Device Training Platform contains podcasts, short video series, and interactive exercises about digital safety skills, to enable and empower parents and caregivers to discuss digital safety with their children.
Protect Children values data privacy and collects and treats personal information in accordance with data protection regulations. Particularly, Protect Children complies with the obligations under the EU’s General Data Protection Regulation (GDPR), the Finnish Associations Act (503/1989), and other good data protection practices.
This Privacy Policy is solely applicable to the More Than a Device training platform and its domain. For more information on Protect Children’s Privacy Policy, please consult: Protect Children Privacy Policy.
2. Data Controller & Contact Person
The data controller is Protect Children / Suojellaan Lapsia ry.
For all questions relating to this privacy policy, please contact Protect Children’s Chief Executive Director Nina Vaaranen-Valkonen:
-
Phone: +358 40747 8829
-
Address: Käenkuja 3a, 6th floor, 00500 Helsinki, Finland
3. Data collection, purposes and legal basis of processing
Personal data is being collected through the More Than a Device platform. Most of the personal data we process is provided by the user directly by:
-
Responding to our Feedback Survey
-
Visiting our platform (or website) and consent to our use of cookies
Feedback Survey
The More Than a Device Platform does not intentionally collect personal data from users through the feedback surveys. However, users may voluntarily provide personal data when submitting feedback through the forms. Users are encouraged not to submit any personal and/or sensitive data through the forms.
Any personal data voluntarily submitted through the More Than a Device Training Platform feedback forms will only be processed for the following purposes:
-
Evaluating and improving the More Than a Device Training Platform and its contents
-
Monitoring and assessing More Than a Device Project impact
The processing of such personal data relies on the data subject’s consent according to Article 6(1)(a) of the EU GDPR.
Personal data that is voluntarily provided through the feedback forms is retained only for as long as necessary for these purposes and in accordance with the retention periods set out in this Privacy Policy.
Website and campaign
Personal data will be collected through the website and throughout the More Than a Device campaign. Personal data collected might depend on the service used and may include information about language, gender, age, country, technical information, and online identifiers.
Please find below the purposes and legal basis of such processing.
Purposes> Legal Basis
Evaluating and improving the More Than a Device Training Platform and its contents> Legitimate interests (Article 6(1)(f) EU GDPR)
Monitoring and assessing More Than a Device Project impact> Legitimate interests (Article 6(1)(f) EU GDPR)
Operating and securing the platform> Legitimate interests (Article 6(1)(f) EU GDPR)
Remembering consent choices> Legitimate interests (Article 6(1)(f) EU GDPR)
Measuring platform use> Consent (Article 6(1)(a) EU GDPR)
Measuring Google Ads performance> Consent (Article 6(1)(a) EU GDPR)
Improving the platform and campaign> Consent (Article 6(1)(a) EU GDPR)
4. Data storage and service providers
Any personal data voluntarily submitted through More Than a Device Training Platform feedback forms will be securely stored on Wix, the website hosting and content management platform used by the More Than a Device Training Platform. Wix implements industry-standard security measures to protect user data from unauthorised access, loss, or misuse. More information is available in the Wix.com Privacy Policy: https://www.wix.com/about/privacy.
Other service providers used which may process personal data such as technical information and/or online identifiers:
Service providers
Usercentrics for Wix
This is a consent management service. The consent data (given consent and revocation of consent) are stored for one year. The data will then be deleted immediately.
The EU is the primary location where the collected data is being processed. If the data is also processed in other countries, the data subject is informed separately.
More information: https://usercentrics.com/en/wix-privacy-policy/
Google Ads, Google Analytics 4, Google Signals
More information: https://policies.google.com/privacy
TikTok website tracking
More information: https://www.tiktok.com/legal/page/us/privacy-policy/en
Visitor Analytics
This is an analytics service. It is used to track website statistics in a clean and easy-to-use interface.
This service uses cookies to collect data and is based on the data subject’s consent.
The EU is the primary location where the collected data is being processed. If the data is also processed in other countries, the data subject is informed separately.
The data will be deleted as soon as they are no longer needed for the processing purposes.
More information: https://www.twipla.com/en/support/legal-data-privacy-certificates/standard-integration/privacy-policy
Other services that are subordinate to this service (the consent status of this service applies to all subservices):
-
Cloudflare: https://www.cloudflare.com/privacypolicy/
Google Tag Manager
This is a tag management system. Via Google Tag Manager, tags can be integrated centrally via a user interface. Tags are small sections of code that can track activities. Script codes of other tools are integrated via the Google Tag Manager. The Tag Manager allows to control when a particular tag is triggered. This service uses website tags to collect data and is based on the data subject’s consent.
The data stored by this service is deleted within 14 days.
The EU is the primary location where the collected data is being processed. If the data is also processed in other countries, the data subject is informed separately. This service may forward the collected data to a different country.
More information: https://business.safety.google/privacy/
Other services that are subordinate to this service (the consent status of this service applies to all subservices):
-
Google AJAX: https://business.safety.google/privacy/
Google Tag Services
This is a single tag that can be added to a website to use a variety of Google products and services like Google Ads, Google Analytics, Campaign Manager, Display & Video 360, Search Ads 360.
This service uses cookies to collect data and is based on the data subject’s consent.
This service uses website tags to collect data and is based on the data subject’s consent.
The data will be deleted as soon as they are no longer needed for the processing purposes.
The EU is the primary location where the collected data is being processed. If the data is also processed in other countries, the data subject is informed separately. This service may forward the collected data to a different country.
More information: https://business.safety.google/privacy/
Other services that are subordinate to this service (the consent status of this service applies to all subservices):
-
Conversion Linker
-
Google Ads
-
DoubleClick Ad
ReflexAI
The More Than a Device Training Platform may provide users with a link to ReflexAI, a third-party platform used to access and test interactive simulations. Participants who choose to access the link will be directed to ReflexAI and may be required to create an account and provide their email address and other information directly to ReflexAI to be able to use the simulation. The processing of personal data by ReflexAI is subject to ReflexAI’s own Privacy Policy, available here: https://www.reflexai.com/privacy-policy.
5. Data retention
More Than a Device Project abides by data privacy laws and good data protection practices when processing personal data.
Personal data collected through the More Than a Device Training Platform will be retained for the entire duration of the More Than a Device Project, i.e., until the end of September 2027.
Once the project is finalised, personal data stored by Protect Children will be deleted.
6. Cookies
The More Than a Device Training Platform website uses cookies for the website functionality, security and analytics (learn more below).
7. Rights of the data subject
According to the EU General Data Protection Regulation (2016/679), the data subject has the right to:
-
Be informed about the processing of their personal data (article 13)
-
Access the personal data the data controller has on them (article 15)
-
Obtain the rectification from the data controller of inaccurate personal data concerning them (article 16)
-
Obtain from the controller the erasure of personal data concerning them or to withdraw consent when the processing is based on data subject’s consent (article 17)
-
Obtain from the controller the restriction of processing their personal data (article 18)
-
Receive the personal data concerning him/her, which he/she has provided to the controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. Only applicable if the processing is based on the data subject’s consent (article 20)
-
Object at any time to processing of personal data concerning them. Only applicable if the processing is based on the data controller’s legitimate interests (article 21)
-
Not to be subject to a decision based solely on automated processing (article 22)
The data subject may exercise these rights by contacting Protect Children’s Chief Executive Director Nina Vaaranen-Valkonen:
-
Phone: +358 40747 8829
-
Address: Käenkuja 3a, 6th floor, 00500 Helsinki, Finland
The data subject has the right to lodge a complaint with a supervisory authority if they find that the data protection regulation has been infringed upon in the processing of their personal data.
In Finland the Data Protection Authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
More Than a Device Platform - Cookies Policy
The Cookies Policy was last updated on September 23, 2026.
The More Than a Device Training Platform website uses cookies for the website functionality, security and analytics. This Cookies Policy is solely applicable to the More Than a Device platform.
For more information on Protect Children’s Privacy and Cookies policies, please visit: https://www.suojellaanlapsia.fi/en/tietosuojaseloste
1. Use of cookies by the More Than a Device Platform
Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
Please note that rejecting optional cookies does not prevent access to the core training content of the More Than a Device Platform.
2. Types of technology and cookies used
Essential
These components are required for the basic functions of the website and do not require any consent.
Usercentrics for Wix: Compliance with legal obligations and consent storage, Local storage, Pixel
XSRF-TOKEN: Cookie for fraud detection of calls, Session, First-party
hs: Security Cookie for Hive (legacy), Session, First-party
svSession: Session cookie for identification, Session, First-party
SSR-caching: Performance cookie for rendering, Session, First-party
TS*: Cookies for attack detection, Session, First-party
bSession: Used for system effectiveness measurement, Session, First-party
fedops.logger.sessionId: Tracking session errors and issues (resilience), Session, First-party
server-session-bindl, client-session-bind: Cookie for API protection, Session, First-party
Analytical
These components enable a website to analyse the website usage to measure and improve performance.
*_ignore_Visits_UniqueHash: This cookie is used to disable Visitor Analytics website analytics tracking for that specific web page. 365 days, Third-party
*_ignoreVisits_all: This cookie is used to disable website tracking analytics for all websites that use Visitor Analytics. 365 days. Third-party
Google Analytics
Marketing
These components enable tracking technologies to collect data about user behaviour on the website or across websites.
Google Tag Manager: Tag management, marketing and analytics, Website tags, 14 days
Google Tag Services: Personalisation, analytics and optimisation, Cookies, Session
TikTok Pixel
3. Managing Your Cookies Preferences
Cookie preferences may be changed at any time.
If you wish to further manage or rectify your cookie settings, most browsers enable you to do so through their own browser settings. You can find further information about how to enable or disable cookies at any time from your browser service provider, e.g.;