01 Who we are
STUHI (StartUpHigh) is a youth-led, non-profit innovation community based in Helsinki, Finland. It is run by Nuorten startup- ja innovaatioyhdistys ry (Business ID 3613004-2), a registered non-profit association that owns and operates this website (stuhi.org) and is the data controller for the personal data described here. You can reach us by email at team@stuhi.org , or by post at Abrahaminkatu 1, 00180 Helsinki, Finland.
02 What we collect
We hold as little about you as we can. Depending on how you interact with us, this may include:
- Contact details such as your name and email when you sign up for updates, register for an event, or write to us.
- What you tell us when you apply to join STUHI or take part in a programme, for example your school, your interests, and anything else you choose to share.
- What you submit through our volunteer and open-role forms, such as the role you're interested in and a short background.
- Practical details needed to run an event, like a dietary note you choose to share.
- The content of messages you send us, so we can reply and keep track of the conversation.
- Basic, aggregate statistics about how the site is used, if we have analytics enabled (see “Cookies and analytics” below).
03 Why we use it, and our legal basis
We use it to send the updates you asked for, to run our events, and to reply when you write to us, nothing more. Under the GDPR our legal basis is your consent, or our legitimate interest in keeping the community running. Change your mind any time and we will stop.
04 Sharing
We never sell your data. We share it only with the service providers that help us run STUHI, and only as far as each one needs to do its job. These currently include Luma, which we use to manage event registrations; Google Forms, which we use to collect applications and volunteer or open-role submissions; and our email provider, which we use to send updates and reply to you. Cloudflare helps us protect application forms from automated spam. Those providers process your data on our behalf under their own privacy terms. We may also disclose data where the law genuinely requires it.
05 How long we keep it
We keep personal data only as long as we need it for the purpose we collected it, or as the law requires, and then we delete it. As a rule of thumb: event registration details are kept for the event and a short period afterwards; applications and volunteer or open-role submissions are kept while we consider them and for a reasonable time after, in case a role reopens; and newsletter contact details are kept until you unsubscribe. If you ask us to delete your data sooner, we will (see “Your rights”).
06 Your rights
The GDPR puts you in charge: you can ask to see your data, fix it, delete it, limit how we use it, or get a portable copy. Email team@stuhi.org and we will sort it. You can also complain to the Finnish Data Protection Ombudsman.
07 Cookies and analytics
The site itself uses only the cookies it needs to work, and we keep tracking to a minimum. We don't use cookies to build advertising profiles. If we run a privacy-friendly analytics tool, it tells us only aggregate things like which pages are popular, not who you are. Application forms may use Cloudflare Turnstile to check whether a submission is automated. Some pages embed third-party services, such as our Luma events calendar, which may set their own cookies when you interact with them; those are governed by the provider's own policy. Where the law requires consent for non-essential cookies, we'll ask before setting them.
08 Changes
We may revise this from time to time; the date below always shows the current version.
09 Contact
Questions? team@stuhi.org .