Privacy policy
A plain-language description of what data we process and why (GDPR Art. 13).
Updated 21 October 2026
1. Data controller
GM Report Media
Helsinki, Finland
Business ID: 4208653-4 · 09 5032211 · [email protected]
Privacy questions: [email protected] (subject line “Privacy”).
2. Personal data we process
- Newsletter: email address and the time you subscribed or unsubscribed.
- Enquiries: name, email address and the content of your message.
- Premium (after launch): basic account details and subscription status. We never store card details.
- Server logs: IP address, time and requested page, to keep the service secure.
3. Purpose and legal basis
- Sending the newsletter – consent (Art. 6(1)(a)).
- Answering enquiries – legitimate interest (Art. 6(1)(f)).
- Service security and abuse prevention – legitimate interest (Art. 6(1)(f)).
- Providing a Premium subscription – contract (Art. 6(1)(b)).
4. Retention periods
- Newsletter: until you unsubscribe.
- Enquiries: 12 months after the matter is closed.
- Server logs: up to 30 days.
- Bookkeeping records (Premium): for the period required by law.
5. Recipients
We never sell, rent or hand over personal data for marketing. We use hosting and email providers operating in the EU/EEA, bound by a data processing agreement under the GDPR.
6. Transfers outside the EU/EEA
Personal data is not transferred outside the EU/EEA.
7. Your rights
- Access to your data (Art. 15) and rectification (Art. 16).
- Erasure (Art. 17) and restriction of processing (Art. 18).
- Data portability (Art. 20).
- Objecting to processing (Art. 21) and withdrawing consent.
- Lodging a complaint with a data protection authority.
8. Automated decision-making
We make no automated decisions and do not profile users.
9. Changes
We update this policy when needed. Material changes are announced on the site and to newsletter subscribers at least 14 days in advance. See also our cookie policy.