Privacy Policy
Last updated: 16.01.2026
1. Data Controller
The operator of the Salihaku service acts as the data controller. Privacy enquiries: [email protected] We provide the controller's identification details on request to the same address.
2. Data We Collect
Via the contact form we collect: • First name • Phone number • Email address • The gym or area you chose • A message, if you write one • The consents you give and when you gave them • The time the form was submitted, the page it was submitted from, the site language and any campaign identifiers (UTM parameters) • Technical data related to site usage (cookies, analytics) The IP address is used temporarily only to prevent misuse.
3. Purpose of Data Processing
We process your contact details only for the purpose you gave them for: to pass your contact request to the gym you chose, or to answer your question. We may contact you by email or phone about your request. We do not agree a trial time on your behalf and we do not make bookings in a gym's system — you arrange the time with the gym. We do not add your contact details to marketing lists and we do not use them for any other marketing. If you separately subscribed to offer emails, we also use your address for that, and you can unsubscribe at any time. Technical data collected from your use of the site is used only to monitor and improve how the service works. Section 4 explains disclosure to the gym you chose in more detail.
4. Disclosure of Data
Salihaku is an independent gym directory. We disclose your contact details only to the gym you chose, and only in order to pass on the contact request you submitted. To anyone else we disclose data only in the situations described below. Passing your details to the gym you chose IS the service the form performs, so it is part of the consent you give when you submit the form. The form's required consent text names the gym the details go to. Submitting the form is voluntary: you are free to contact the gym directly instead. Subscribing to offer emails is a separate, optional choice, and leaving it unticked does not prevent you from submitting the form. Once details have been disclosed to a gym, that gym processes them as an independent controller under its own privacy policy. After you send the form we ask whether you would also like a personal trainer to get in touch. You answer yes or no with its own button, and the question does not affect the request you have already sent. Only if you answer yes do we pass your contact details to a trainer; otherwise they go to no trainer, and the form can be submitted without it.
5. Legal Basis for Processing
Processing of the details you give on the contact form is based on your consent (GDPR Article 6(1)(a)). You give that consent by ticking the consent box before you submit the form. The same consent covers passing your contact details to the gym you chose: that is the service the form performs, and the consent text names that gym. Subscribing to offer emails is a separate, optional consent. You can withdraw your consent at any time by writing to [email protected]. Withdrawal does not affect the lawfulness of processing carried out before it. If your details have already been passed to a gym, you can also request deletion directly from that gym.
6. Data Retention Period
We keep your contact details for at most 6 months from the last contact, after which the data is anonymised. You can request deletion at any time ([email protected]) — we delete within 30 days.
7. Your Rights
You have the right to: • Access your data • Request rectification or erasure • Withdraw your consent • Object to processing • Lodge a complaint with the Data Protection Ombudsman (tietosuoja.fi) Requests: [email protected] — we respond within 30 days.
8. Data Security
We protect personal data with appropriate technical and organisational measures. The server and the database are located in the EU, and access to the data is restricted to authorised persons only. Some of the technical services we use may also process data outside the EU and the EEA. Section 4 explains this in more detail.
9. Cookies
Our website uses cookies to improve the experience and analyse traffic (Google Analytics, only with consent). You can manage cookies via the cookie banner and your browser settings.
GDPR / EU General Data Protection Regulation compliant.