Privacy notice
Updated .
Controller: Sähköhaku. Contact: contact@sahkohaku.com.
Comparison inputs
Home type, size and heating are used by the browser to estimate consumption. Sähköhaku processes annual consumption, postal code and filters to return offers. Optional current-price calculations process consumption, energy price and monthly fee. The website's contract end date stays in your browser; an MCP request may also include the current contract type and end date.
The postal code is sent to the Energy Authority's price interface. Consumption and current prices are not sent to partners. A shared search URL may contain postal code, consumption, home settings and filters; it excludes current prices and contract end date. Such URLs may remain in your browser history and be seen by people you share them with.
Purpose and legal basis
Inputs are processed to provide the comparison and calculation service you request (GDPR Article 6(1)(b)). Security and abuse prevention are based on legitimate interests, Article 6(1)(f): operating a secure, reliable service. Data is minimised; request limiting uses an HMAC-derived rate-limit key rather than a stored raw IP address.
Usage metrics and cookies
Sähköhaku does not use its own tracking cookie, user account or persistent visitor identifier. The browser may send a search-started, successful, empty, failed or link-click event to our own interface. The log message contains only the event type and an optional partner ID. It excludes postal code, consumption, prices, full URLs and IP addresses. These event counts help assess search reliability and link use without creating visitor profiles.
Service providers and external links
Cloudflare delivers the site and interface and processes technical connection data, including IP addresses, for delivery and security. The Energy Authority receives the postal code and server network data with price requests. See its service description.
Opening a product or sponsored link takes your browser to a supplier, comparison service or affiliate network. Their own privacy notices and cookies apply there. Sähköhaku does not append your comparison inputs to an affiliate destination.
Cloudflare operates internationally and processing may occur outside the EEA. Its Data Processing Addendum describes processor obligations and international-transfer safeguards; its own processing is covered by its privacy policy.
Retention
Comparison inputs and current-price inputs are not stored in our own permanent database. Supplier product data is cached in server memory for up to 15 minutes before refreshing. This cache excludes current contract prices and visitor identifiers. Rate-limit keys are used for a one-minute counting period.
Usage-event and error-type messages are stored in Cloudflare Workers Logs for 3 or 7 days depending on the Free/Paid plan, up to 7 days under the current service model. Automatic Worker invocation logs are disabled in the configuration to avoid adding search URL parameters to these logs. Other Cloudflare technical and security processing follows its own terms and service settings.
Your rights
You may request access, correction, deletion or restriction of personal-data processing and object to processing based on legitimate interests. Portability may apply to automated processing based on a contract. These rights depend on the processing and whether data can be linked to you. Contact us using the address above. You can complain to Finland's Data Protection Ombudsman.