Last updated: 12 October 2026
PinFin (“we”, “us”) operates this website for the Pakistanis in Finland community. This notice explains how we collect and use personal data when you use our website, in line with the EU General Data Protection Regulation (GDPR) and applicable Finnish law.
This notice explains our processing. Reading or submitting a form is not consent to analytics or marketing; those purposes require a separate choice.
The data controller for personal data processed through this website is the operator of PinFin – Pakistanis in Finland, unless another entity is identified in a specific service or contract. For general privacy questions, email admin@pinfin.fi.
Depending on how you use the site, this may include:
Some features may process sensitive categories of data (for example health-related content, or biometric-related data where a feature compares face data for verification). We only use such features where the service requires it and appropriate safeguards apply; see also our Cookie Policy.
Optional member profiles are private by default. Members can choose whether profile sections are visible only to themselves, accepted friends, or everyone, and can change or remove these settings in the dashboard. Arrival year, “recently arrived”, and “open to mentoring” are self-reported optional fields. Profile activity shows approved blogs and active business listings; Ask a Doctor answers are not reproduced on profiles. Public profile information may be accessible outside PinFin and can be copied or indexed by third parties.
We process personal data for purposes such as:
We use service providers where needed to run the site—for example hosting, email delivery, SMS providers, or backup services. They process data on our instructions and under appropriate agreements. Some providers may be located outside the European Economic Area; where personal data is transferred internationally, we use safeguards required by GDPR (such as standard contractual clauses) when applicable.
When a member requests an invitation and confirms that the recipient expects it, the recipient’s email address is used to deliver that one-time message through our configured email provider. PinFin keeps a one-way hash of the address, not the address itself, in its invitation database to prevent repeated invitations and limit abuse; those records are deleted within 90 days. Invitation emails do not include tracking pixels, and PinFin does not send invitees follow-up messages.
Account registration uses your identity and contact details to create and verify the account and deliver the services you request (performance of a contract or steps at your request before entering a contract). Event registration, including Curious Minds, uses your name, email, optional phone number, attendee counts and fee information to handle your booking, payment administration and event communications on the same basis. Required information is necessary to provide that service; without it we may be unable to process the request.
Reviews are published with your displayed member identity. Event feedback is used to improve events and, where contact details are provided, respond to you. Our legitimate interests are operating, moderating and improving the community service; you may object to processing based on legitimate interests. Service confirmations and booking messages are not marketing subscriptions. These forms do not enrol you in marketing.
Event registration and feedback may be accessible to the organisers involved in handling that event, including PinFin and any co-organiser identified on the event page, and the hosting and messaging providers used to deliver the service. Event records are retained while needed to administer the event and resolve related payment or support matters; records required by accounting or other laws are retained for the applicable legal period. Account data is retained while the account is active and thereafter only where needed for legal obligations or unresolved claims. Contact admin@pinfin.fi for the retention period applicable to your record.
Optional first-party analytics uses consent (GDPR Article 6(1)(a)). Only after you accept analytics, a random browser cookie lets us count page views and returning browsers, referrer hostname, coarse device/browser category, explicitly labelled actions and approximate visible-page time. Analytics records do not contain account IDs, names, form values, raw IP addresses, full user agents or URL query strings. This is pseudonymous data, not a count of identifiable people. Your IP and browser headers are received when requests reach our server; server and security logs are separate from the analytics database.
Analytics cookies last up to 180 days; individual analytics events and browser activity records have a 90-day retention limit. Consent receipts record the choice, timestamp, notice version and expiry, without raw IP addresses or account IDs, and are retained until 90 days after expiry. No external geolocation service or third-party analytics provider receives these analytics events. You can reject analytics without losing access to forms, and withdraw through Cookie settings in the footer. Withdrawal stops future analytics and deletes analytics and signup-tracking cookies; it does not by itself erase previously lawfully collected records. Email admin@pinfin.fi to request access or erasure; the cookie is a browser reference and we may need it to locate anonymous-to-us records.
We do not use these analytics for automated decisions with legal or similarly significant effects. Some community features involve health or other sensitive information and need their own purpose-specific safeguards; the general form notice is not explicit consent for those features.
We keep personal data only as long as needed for the purposes above, including legal, accounting, or security requirements. Retention periods can differ by data type (for example account data, logs, backups, or community content). You may request deletion of your account where the service allows it; some information may be retained in anonymised form or where we must keep it by law.
Invitation-prevention records contain only a one-way hash of the recipient email and are automatically removed within 90 days.
Under GDPR you may have the right to:
To exercise your rights, contact admin@pinfin.fi. We may need to verify your identity before responding.
We implement appropriate technical and organisational measures to protect personal data. No online service can guarantee absolute security; please use a strong, unique password and protect your login details.
Our services are intended for adults and community members. If you believe a child has provided personal data through this site, please contact us and we will take appropriate steps.
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. We encourage you to review this page periodically.
Choose Finland or Global, then select a service.
