Privacy Policy

Last updated: 25 March 2026

PinFin (“we”, “us”) operates this website for the Pakistanis in Finland community. This notice explains how we collect and use personal data when you use our website, in line with the EU General Data Protection Regulation (GDPR) and applicable Finnish law.

This document is provided for transparency. It is not a substitute for legal advice. If you need a formal decision about your data, contact us using the details below.

1. Data controller

The data controller for personal data processed through this website is PinFin – Pakistanis in Finland (yhdistys / registered association), unless another entity is identified in a specific service or contract. For general privacy questions, email admin@pinfin.fi.

2. What personal data we may process

Depending on how you use the site, this may include:

• Account and profile: name, email, phone number, username, password (stored in hashed form), city of birth, education, profession, areas of interest, and similar fields you choose to provide.
• Community features: content you post (for example wall posts, blogs, cast links, business listings, reviews, job ads, library items, Rishta Rahbar profile information, messages, and favourites).
• Health-related community tools: if you use “Ask a Doctor” or related features, questions and answers you submit.
• Technical and security data: IP address, browser type, session identifiers, timestamps, and similar data needed to secure the service and troubleshoot issues.
• Communications: emails or SMS messages we send or receive in connection with your account, verification, or notifications (subject to settings and service design).

Some features may process sensitive categories of data (for example health-related content, or biometric-related data where a feature compares face data for verification). We only use such features where the service requires it and appropriate safeguards apply; see also our Cookie Policy.

3. Purposes and legal bases (summary)

We process personal data for purposes such as:

• Providing accounts, authentication, and core website functionality (typically performance of a contract or steps prior to a contract, and legitimate interests in operating a secure community platform).
• Moderation, safety, and abuse prevention (legitimate interests; sometimes legal obligation where applicable).
• Sending service-related messages (for example security alerts or account notifications) (legitimate interests / contract).
• Where required, consent for specific optional processing (for example certain communications or optional features)—we will ask separately when consent is the legal basis.

4. Recipients and processors

We use service providers where needed to run the site—for example hosting, email delivery, SMS providers, or backup services. They process data on our instructions and under appropriate agreements. Some providers may be located outside the European Economic Area; where personal data is transferred internationally, we use safeguards required by GDPR (such as standard contractual clauses) when applicable.

5. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, or security requirements. Retention periods can differ by data type (for example account data, logs, backups, or community content). You may request deletion of your account where the service allows it; some information may be retained in anonymised form or where we must keep it by law.

6. Your rights

Under GDPR you may have the right to:

• Access your personal data and receive certain information about processing.
• Rectify inaccurate data.
• Request erasure, restriction of processing, or object to processing in certain situations.
• Data portability for data you provided, where processing is based on consent or contract and is automated.
• Withdraw consent at any time, where processing is based on consent (without affecting earlier lawful processing).
• Lodge a complaint with a supervisory authority. In Finland, the Office of the Data Protection Ombudsman: tietosuoja.fi.

To exercise your rights, contact admin@pinfin.fi. We may need to verify your identity before responding.

7. Security

We implement appropriate technical and organisational measures to protect personal data. No online service can guarantee absolute security; please use a strong, unique password and protect your login details.

8. Children

Our services are intended for adults and community members. If you believe a child has provided personal data through this site, please contact us and we will take appropriate steps.

9. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. We encourage you to review this page periodically.