Skip to Content

Privacy policy

Updated: 2 October 2026

Data controller

RockIT Oy
Business ID: 2285205-2
Address: Sukkavartaankatu 15 B 9, 33100 Tampere, Finland
Email: asiakaspalvelu@juomakartta.fi

Name of the service: Juomakartta (juomakartta.fi)

What data we process

A) Public directory (producers and drinks)

The directory mainly shows information that is public or provided by the producer itself, for example:

  • name, location and licence-related information (LVV / avoindata.suomi.fi)
  • company information (e.g. YTJ / PRH)
  • information from the producer's website or the producer portal (logo, short introduction, basic information about drinks)
  • where relevant, revenue and profit for the financial period from PRH's digital financial statement data, when available

This information generally concerns companies and their public business activities, not sensitive data about private individuals.

B) Producer user account (portal)

If a producer logs in to the service, we may process:

  • name, email address and login ID
  • company-related information that the user enters or approves
  • technical log data (e.g. time of login, and IP address where necessary for information security)

C) Contact requests

Messages sent via the contact form or by email: name, contact details, the content of the message and the metadata needed to handle it.

D) Cookies and technical data

See the Cookie policy. The technical operation of the service may collect IP addresses, browser type and similar information for information security and troubleshooting purposes.

If you accept optional cookies, we use Google Analytics to collect visitor statistics (for example which pages are viewed, approximate location at city level, device and browser type). Google Analytics is not loaded until you have given your consent.

Purposes and legal bases

Purpose Legal basis (GDPR)
Maintaining and displaying the public directory legitimate interest (public directory / open data) and/or statutory/public data; the producer's own input
Managing producer accounts contract / account maintenance
Responding to contact requests legitimate interest or steps prior to entering into a contract
Information security and maintenance of the service legitimate interest
Visitor statistics (Google Analytics) consent (you can withdraw it at any time)
Statutory obligations legal obligation

We do not use personal data for automated profiling that produces legal effects, and we do not sell personal data.

Where the data comes from

  • Valvira / LVV open data (avoindata.suomi.fi)
  • YTJ / Finnish Patent and Registration Office (PRH)
  • producers' websites and digital financial statements (when available)
  • the producer itself (portal, claim, permission for images/marketing texts)
  • the user themselves (contact requests, login)

To whom data is disclosed

Data is not sold. It may be processed by technical service providers (e.g. server hosting, email) acting on our instructions. The content of the public directory is intentionally public. We disclose data to authorities only when required by law.

Data is stored within the European Union.

The background map on the map views is loaded from the open map service of the National Land Survey of Finland (Maanmittauslaitos) in Finland. When the map loads, your browser sends your IP address and the address of this website to that service.

Google Analytics is provided by Google Ireland Limited. Statistics data may be transferred to Google LLC in the United States; the transfer is based on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Otherwise, personal data is not transferred outside the EU/EEA.

Retention periods

  • Public directory data: for as long as it is part of the service (e.g. the licence is valid / the producer is listed); data removed from publication is deleted or archived in accordance with the rules of the service
  • User accounts: for as long as the account is active and for a short period afterwards for technical and legal needs
  • Contact requests: typically no longer than 2 years, unless the matter requires a longer period
  • Logs: for a short period for information security purposes
  • Visitor statistics (Google Analytics): 14 months

Your rights

You have the right to request access to your data, rectification, erasure and restriction of processing, and to object to processing insofar as it is based on legitimate interest. You may also lodge a complaint with the Data Protection Ombudsman (www.tietosuoja.fi).

A company's public register data cannot always be removed from the directory merely on request if it is based on open data from public authorities; in such cases we will explain the reason.

Contact for data protection matters: asiakaspalvelu@juomakartta.fi

Changes

We update this policy as necessary. The current version is always available on this page.