Privacy notice

Controller: Sähköhaku. Contact: contact@sahkohaku.com.

Sähköhaku is an MCP service that helps users discover electricity contract comparison services. This notice describes the service's ordinary processing; before launch, the controller must confirm it against the Cloudflare and affiliate configuration actually in use.

Information processed

A tool request may contain user-provided annual consumption, postal code, contract type, contract end date, and current contract price values. The service processes this information to return a result and does not permanently store it in a Sähköhaku database. Do not send names, full addresses, email addresses, or other unnecessary information.

The IP address and technical connection information associated with a web request may be processed by Cloudflare to deliver and secure the service and prevent abuse. Sähköhaku does not intentionally write tool inputs, consumption, postal or price data, IP addresses, or affiliate destination URLs to application logs. Cloudflare's processing and retention depend on the service settings in use.

Purposes and legal bases

Information in a request is processed to provide the result requested by the user. Technical network information is processed to operate, secure, and protect the service from abuse. Before launch, the controller will document the GDPR legal basis for each processing activity.

Recipients and partner links

Cloudflare processes network traffic as the hosting and security provider. When a user opens a partner link, the browser navigates to that partner or affiliate network. Sähköhaku does not send consumption or contract data to the partner in the redirect. The partner's privacy notice applies to processing on its site.

Providers may process information or transfer it outside the European Economic Area. Before launch, the controller will verify the applicable agreements and transfer safeguards.

Retention

Sähköhaku does not permanently store MCP inputs or its own click events. Retention of technical network and provider logs depends on their settings and agreements; the controller will publish the applicable retention periods before launch.

Your rights

Under applicable data protection law, you may have the right to access, rectify, or erase information, restrict or object to processing, and lodge a complaint with a supervisory authority. Contact the controller above. If information is not retained or cannot be linked to you, the controller will explain this in its response.

Updates

This notice will be updated if processing changes. The publisher must add the last-updated date and confirm all providers and retention periods before production use.