Privacy at a glance+
We use your data only for clearly defined purposes: responding to enquiries, organising events, newsletters, campaign communications, appointment bookings, the signature service, payments and website development.
We do not sell your personal data to third parties.
We mainly collect information that you provide yourself, for example through forms, newsletter subscriptions, event registrations, appointment bookings, the chatbot or the signature service.
The website also collects technical information such as IP addresses, cookies, log data and analytics. This information is used to operate, secure and improve the website.
Newsletters, campaign messages and non-essential cookies are based on your consent. You may withdraw your consent at any time.
We use trusted service providers, including Brevo, Tally, Stripe, Matomo, Cloudflare, Supabase, Auth0, Twilio, Resend and ElevenLabs. Some services may process data outside the EU/EEA.
We retain data only for as long as it is needed. For example, newsletter information is retained for the duration of the subscription, event information generally for a limited period after the event, and accounting-related information for the period required by law.
You have the right to access your personal data, request its correction or deletion, object to processing and withdraw your consent.
For privacy matters, you can contact:
[email protected]
Privacy Notice+
Huugo Wahalahti
Updated: 10 May 2026
This Privacy Notice explains how Huugo Wahalahti processes personal data on his personal websites, campaign websites and digital services, as well as in related communications, events, signature, appointment booking, contact and campaign activities.
Where applicable, this Notice applies, among other things, to the following websites and services:
huugowahalahti.fi
ehdolla.huugowahalahti.fi
sign.huugowahalahti.fi
kuvat.huugowahalahti.fi
and other online services, forms, campaign websites and digital services managed by Huugo Wahalahti.
The aim is to explain the processing of personal data openly, understandably and practically.
- Data controller
Data controller:
Huugo Wahalahti
Privacy-related enquiries:
[email protected]
You may contact the address above with any questions concerning the processing of personal data, privacy, data subject rights or this Notice.
- What is personal data?
Personal data means any information from which a person can be identified directly or indirectly. Such information may include, for example, a name, email address, telephone number, IP address, online identifiers, message content, event registration information, payment transaction information or user account information.
Not all information is collected from every user. The information processed depends on which service you use and what information you choose to provide.
- Whose data is processed?
This Notice may apply, for example, to the following groups of people:
website visitors
users of contact forms
newsletter subscribers
recipients of campaign communications
people registering for events
people participating in paid events or services
users of the appointment booking system
users of the Sign electronic signature service
users of the chatbot or AI assistant
volunteers, supporters and partners participating in a campaign, events or other activities
people who have created a user account
users who interact with the website through social media embeds.
- What personal data is processed?
The personal data processed may include the following.
Contact details: name, email address, telephone number, organisation, role or other contact information provided by the user.
Content of enquiries: messages, form responses, subject matter, requests, feedback, questions and other information provided by the user.
Newsletter and communications data: newsletter subscription, consent records, message opening and click data, unsubscribe data, interests and communication preferences.
Event data: registration details, participant information, special requests, possible organisation, event participation history, event-related communications and, where necessary, payment information.
Campaign data: campaign-related enquiries, volunteer registrations, interests, supporter communications, event participation and campaign-related information provided by the user.
Payment data: payment transaction identifiers, payment status, amount, time, possible receipts and billing details. The payment service provider Stripe processes the actual card details.
User account data: username, email address, login data, account usage logs, access rights and possible profile data.
Appointment data: name, contact details, booked time, subject of the meeting, possible additional information, appointment-related communications and technical logs.
Sign electronic signature service data: signatory’s name, email address, time of the signing event, document-related metadata, technical signature logs, IP address and information needed to verify the signing process.
Chatbot and AI assistant data: messages typed or spoken by the user, conversation content, possible contact details, log data, technical identifiers and information necessary for the quality, security and operation of the service.
Call and text message data: messages associated with customer service and campaign telephone numbers, call or text message metadata, telephone numbers, message content where applicable and possible log data.
Technical data: IP address, browser, device, operating system, actions taken on the website, referring address (referrer), cookies, session identifiers, log data, error messages and technical information related to security.
Analytics data: page usage, visit numbers, traffic sources, choices made by the user on the website and other data collected through Matomo for website development.
Social media embed data: if a user opens or uses Instagram, X, YouTube, Twitch, LinkedIn or Threads embeds on the website, those service providers may process the user’s data in accordance with their own practices.
Gravatar data: if Gravatar is used, for example in connection with comments or a profile picture, the service may process an identifier based on the email address and related information.
- For what purposes is personal data processed?
Personal data is processed for the following purposes:
Data is processed to provide websites and services. This includes, for example, the technical operation of the website, maintaining user accounts, security, login functions, displaying services and preventing misuse.
Data is processed to respond to enquiries. If you send a message through a form, by email, in the chatbot or by another means, the information is used to respond to your message and handle the matter.
Data is used for communications, newsletters and campaign communications. This may include emails, text messages, event invitations, campaign updates, volunteer-related messages or other communications that a person has subscribed to or for which another appropriate legal basis exists.
Data is used to organise events. Information may be processed to manage registrations, communicate with participants, ensure event safety, process payments and carry out the event in practice.
Data is used to process payments. Payment transactions are handled through Stripe, and payment-related information is processed to receive payments, issue receipts, handle possible complaints and fulfil legal obligations.
Data is used to provide appointment bookings. This may include checking availability, confirming appointments, sending reminders and communicating about the meeting.
Data is used to provide the Sign electronic signature service. Information is processed to deliver documents, manage the signing process, identify signatories at a technical level, verify signing events and ensure service security.
Data is used to provide the AI assistant and chatbot. Information may be processed to answer user questions, enable the service to operate, improve quality, ensure security and prevent misuse.
Data is processed for analytics and website development. Matomo Analytics may be used to monitor how the website is used so that its content, usability and technical operation can be improved.
Data is processed for security, the prevention of misuse and the management of legal claims. This may include retaining logs, investigating errors, protecting systems, preventing harassment and responding to legal claims.
- Legal bases for processing personal data
Depending on the circumstances, the processing of personal data is based on one or more of the following legal bases.
Consent
Consent is used, for example, for newsletter subscriptions, campaign communications, electronic direct marketing, non-essential cookies, certain analytics and marketing functions, and situations in which a user voluntarily provides information for a specific purpose.
Performance of a contract or steps taken before entering into a contract
This legal basis may be used, for example, when a user books an appointment, uses a paid service, registers for an event, uses the Sign service or requests a specific service.
Legitimate interests
Legitimate interests may provide a basis for, among other things, website security, service development, responding to enquiries, preventing misuse, technical maintenance, managing customer and stakeholder relationships, and reasonable communications based on an existing relationship.
Legal obligation
This legal basis is used, for example, for processing related to accounting, payments, taxation, obligations towards public authorities and possible statutory retention requirements.
Establishment, exercise or defence of legal claims
This legal basis may be used if information is needed to handle disputes, complaints, misuse, breaches of contract or other legal claims.
- Special categories of personal data
The websites and services do not, as a rule, seek to collect data belonging to special categories of personal data, such as health information, religious beliefs, political opinions or other sensitive information.
Because some websites and services relate to campaign activities, civic engagement, elections, parish elections, events or values-based activities, information voluntarily provided by a user may in some situations reveal political views, religious beliefs or other data belonging to special categories of personal data.
Such data is processed only when necessary for handling the matter in question and when there is a legal basis under the GDPR. Processing is primarily based on the user’s voluntary contact, explicit consent or the fact that the information is necessary to handle a matter requested by the user.
Users are asked to avoid sending sensitive information unless it is necessary for handling the matter.
- Sources of personal data
Personal data is mainly obtained from the user. Information may be obtained, for example, through forms, emails, newsletter subscriptions, event registrations, payment transactions, appointment bookings, the Sign service, the chatbot, telephone calls, text messages or user accounts.
In addition, information may be generated automatically when the websites and services are used. Such information includes technical logs, cookies, IP addresses, analytics data and technical usage information.
In connection with events, information may also be received from other organisers if the event is organised jointly and the participant has been informed of the transfer of data.
- Systems and service providers used
The following services and systems may be used in the processing of personal data:
Cloudflare: website protection, acceleration, DNS, security and traffic management.
Brevo: CRM, newsletters, campaign communications, bulk messaging and contact database.
Stripe: receiving payments and processing payment transactions.
Tally.so: forms, enquiries and event registrations.
ElevenLabs: chatbot, AI assistant and other AI features.
Supabase: the technical backend and database for the Sign service.
Adobe Portfolio: image bank at kuvat.huugowahalahti.fi.
Twilio: customer service numbers, campaign or campaign team numbers, text messages and bulk text messaging.
Resend: sending emails and bulk messages.
WordPress: website content management and user accounts.
Auth0: user identification and login.
Matomo Analytics: website analytics.
Linker, Complianz, Content Control and other WordPress plugins: technical website functions, cookie management, access rights and content management.
Instagram, X, YouTube, Twitch and Threads: social media embeds.
Gravatar: icons and identifiers associated with user profiles or comments.
Service providers process data either as processors on behalf of the controller or, in some situations, as independent controllers in accordance with their own privacy notices.
- Disclosure of data
Personal data may be disclosed or transferred to the following parties only to the extent necessary:
technical service providers and system suppliers
communications and email services
payment service providers
co-organisers of events
parties involved in the practical implementation of a campaign or event
statutory public authorities
parties involved in accounting, payments or legal matters
service providers involved in security, investigating misuse or maintaining services.
In connection with event registrations, information may be transferred automatically to other organisers if the event is organised jointly and the transfer is necessary for carrying out the event.
Personal data is not sold to third parties.
- Transfers of data outside the EU or EEA
Some service providers may process personal data outside the EU or EEA, particularly in the United States. These may include international cloud, communications, payment, analytics, AI and social media services.
Transfers are carried out in accordance with applicable data protection law. Transfers may be based, for example, on an adequacy decision by the European Commission, the EU Standard Contractual Clauses or other safeguards under the GDPR. The EU–US Data Privacy Framework enables personal data to be transferred to participating organisations in the United States without separate additional safeguards.
Each service provider’s own privacy notice and transfer mechanisms may provide further details on how data is processed and protected.
- Data retention periods
Personal data is retained only for as long as necessary for the purposes described in this Notice, unless a longer retention period is required by law.
Contact forms and messages: for a maximum of 24 months from the most recent contact, unless handling the matter, a legitimate interest or a legal claim requires longer retention.
CRM and stakeholder data in Brevo: for as long as the person remains an active contact, newsletter subscriber, campaign supporter, event participant or other stakeholder. Inactive contact details are reviewed and generally deleted or anonymised within 24–36 months of the most recent meaningful contact.
Newsletter and communications lists: until the person unsubscribes or opts out of communications. Information about the opt-out may be retained on a suppression list for as long as necessary to ensure that messages are not sent contrary to the person’s objection.
Event registrations: generally for 12 months after the event. If the event involves payments, agreements, safety matters, complaints or accounting obligations, the information may be retained for longer.
Payment and accounting information: for the period required by applicable accounting and tax legislation. Accounting documents and records relating to transactions are generally retained for at least six years from the end of the year in which the financial period ended.
Appointment information: generally for 24 months from the booking or most recent contact, unless longer retention is necessary, for example, because of a contract, legitimate interest or legal claim.
Sign electronic signature service data: depending on the nature of the document, for as long as required to verify the document, maintain the validity of the agreement, handle legal claims or comply with statutory retention obligations. Ordinary signature log data may be retained, for example, for six years unless the nature of the document requires longer retention.
User account data: for as long as the user account remains active. After account deletion, necessary technical, contractual or security information may be retained on a limited basis for up to 24 months, unless the law or a legal claim requires longer retention.
Chatbot and AI assistant conversations: generally for no more than 6–12 months for quality, security, misuse prevention and service development, unless a user request, customer service matter or legal claim requires longer retention.
Call and text message data: information related to calls and messages is generally retained for no more than 6–12 months, unless handling the matter, security, accounting, a contract or a legal claim requires longer retention.
Technical log data: generally for 3–12 months for security, troubleshooting and misuse prevention. Log data related to serious security incidents may be retained for longer.
Analytics data: Matomo analytics data is generally retained for 14–26 months, after which it is deleted or anonymised, unless longer retention is justified for website development or statistical comparison.
Consent records: information relating to the granting, amendment and withdrawal of consent may be retained for as long as necessary to demonstrate consent and fulfil legal obligations.
- Cookies and analytics
The website uses cookies and similar technologies. Cookies are small text files stored on the user’s device. They are used, for example, for the technical operation of the website, remembering cookie preferences, maintaining user accounts, analytics, displaying embedded content and developing the service.
Essential cookies are used to enable the website to function. They may be used without separate consent when they are necessary to provide a service requested by the user.
Non-essential cookies, such as analytics, marketing and social media cookies, are used only with the user’s consent where required by law.
Users can manage cookie preferences through the website’s cookie banner or cookie settings. Users may also block or delete cookies in their browser settings. Blocking cookies may affect how the website functions.
- Social media embeds
The website may use embeds from Instagram, X, YouTube, Twitch, Threads, LinkedIn or other social media services.
When a user opens or uses such an embed, the service provider may collect information about the user’s device, IP address, browser, login status and interaction with the embed. The processing of data by these services is governed by their own privacy practices.
Where possible, the website aims to ensure that social media embeds load only after the user has given consent or made an active choice.
- AI assistant and chatbot
The website may use chatbot and AI assistant functions provided by ElevenLabs or other service providers.
When a user interacts with the chatbot or AI assistant, the content of the conversation may be processed to generate a response, provide customer service, ensure service security, prevent misuse and develop the service.
Users should not enter sensitive personal data into the chatbot, such as health information, personal identity codes, payment card details, religious beliefs, political opinions or other particularly sensitive information, unless it is necessary for handling the matter.
The AI assistant does not make legal or similarly significant decisions about users automatically. If the AI assistant is used for appointment bookings or routing enquiries, the controller retains ultimate responsibility for the use of the service and the processing of data.
Where necessary, a data protection impact assessment may be carried out in relation to AI functions, particularly if the processing involves new technology, large-scale processing or special categories of personal data. The purpose of the assessment is to identify and manage risks associated with the processing of personal data.
- Sign electronic signature service
The Sign service is used for the electronic signing of documents and management of the signing process.
The service may process the signatory’s name, email address, time of signature, document identifiers, technical logs, IP address and other information necessary to verify the signing event.
Documents to be signed may contain personal data. The parties to the document are responsible for ensuring that they do not add unnecessary or unlawful personal data to documents.
Sign service data is processed to deliver the document, verify the signature, demonstrate an agreement or other legal act, ensure service security and handle possible legal claims.
- Payments
Payments are processed through Stripe. Stripe may process information necessary to complete the payment, such as payment transaction identifiers, payment status, payment method, partial card identifiers, billing information and technical payment data.
Actual payment card details are not stored in Huugo Wahalahti’s systems; they are processed by the payment service provider.
Payment information is retained for as long as necessary for the payment, accounting, complaints, refunds, misuse prevention or legal obligations.
- Data security
Personal data is protected through appropriate technical and organisational measures. These may include restricting access rights, strong passwords, two-factor authentication, encrypted connections, collection of log data, backups, careful selection of service providers, access management and monitoring of security incidents.
Personal data is accessible only to people and service providers who need to process it for their duties or to provide the service.
Complete security cannot be guaranteed in any online service, but appropriate safeguards proportionate to the risk are used to protect data.
- Automated decision-making and profiling
Personal data is not used for automated decision-making that would have legal or similarly significant effects on the user.
Light grouping or segmentation may be used in communications and the CRM system, for example, based on whether a person is a newsletter subscriber, event registrant, campaign supporter, volunteer or person making an enquiry. Such grouping is used to target and manage communications, not to make significant decisions about the user.
- Rights of the data subject
Under applicable data protection law, you have the right to:
receive information about the processing of your personal data
request access to your personal data
request correction of inaccurate or incomplete data
request deletion of data
request restriction of processing
object to the processing of personal data in certain situations
withdraw consent where processing is based on consent
request the transfer of data from one system to another where applicable
lodge a complaint with a supervisory authority.
You may exercise your rights by contacting:
Additional information may be requested to verify your identity. Requests are generally answered within one month. If a request is complex or there are several requests, the response period may be extended within the limits permitted by law.
Data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of personal data infringes data protection law.
In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
- Withdrawal of consent and ending communications
Where the processing of personal data is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The current version is published on the website. Significant changes may be announced separately where necessary due to the nature of the processing.
Terms of Use+
Updated: 10 May 2026
These Terms of Use apply to Huugo Wahalahti’s websites, campaign websites, digital services, forms, appointment booking, the Sign electronic signature service, chatbot and AI functions, and other content and services provided through the websites.
By using the website or services, you accept these Terms of Use where applicable. If you do not accept the terms, you must stop using the website or service.
- Nature of the service
The websites and services may include personal communications, campaign communications, event information, civic content, blog posts, images, forms, newsletters, appointment booking functions, paid or free events, electronic signature solutions and AI-based assistant functions.
Some content is general information. Some content may relate to a campaign, elections, parish elections, civic engagement or personal views. Views expressed on the website do not necessarily represent the position of any organisation, employer, partner, elected or appointed body, or other third party unless expressly stated otherwise.
- User responsibilities
Users are responsible for ensuring that the information they provide is accurate, up to date and lawful. Users must not use the website or services in a way that violates the law, the rights of others, security, privacy or the normal operation of the service.
Users must not submit harmful code, automated spam, disruptive communications, false reports, another person’s data without authorisation, or content that infringes the rights of others through the website or services.
Users are responsible for the information they submit through forms, the chatbot, email, the Sign service, appointment booking or other channels. Sensitive or unnecessary personal data should not be submitted unless it is necessary for handling the matter.
- User accounts
Some services may use user accounts or login functions through WordPress, Auth0 or another authentication solution. Users are responsible for keeping their login credentials confidential and ensuring that their account is not misused.
The service administrator may restrict, suspend or delete a user account if the account is misused, service security is compromised or the use violates these terms.
- Forms, registrations and enquiries
The website may use forms for enquiries, event registrations, newsletters, campaign communications, feedback, appointment booking or other purposes.
Information provided through a form is used for the purpose for which the user provided it. A more detailed description of the processing of personal data is available in the Privacy Notice.
In connection with events, user information may be shared with other event organisers if this is necessary for carrying out the event and the user has been informed of it during registration or in the Privacy Notice.
- Payments, events and cancellations
The website may offer paid events, services, products or other functions requiring payment. Payments are processed through a payment service provider such as Stripe.
Payments, cancellations, refunds and event changes are subject to the terms stated in connection with the event or service in question. If no separate terms have been stated, possible refunds and changes are assessed case by case.
These Terms of Use do not restrict consumers’ statutory rights. Consumer protection may also apply to digital content and services, and according to the Finnish Competition and Consumer Authority, the rules may also apply where the consumer does not pay money but instead provides personal data, for example for marketing purposes.
- Sign electronic signature service
The Sign service may be used for the electronic signing of documents and management of the signing process.
Users are responsible for ensuring that they have the right to sign the document in question and that the document’s content is accurate, lawful and fit for purpose. The Sign service itself does not assess the content of the document, the authority of the parties or the legal effects of the agreement.
Not all documents are necessarily suitable for signing with a simple electronic signature. In some situations, strong electronic identification, a formal legal requirement, witnesses, dealings with a public authority or another special procedure may be required. Users should, where necessary, confirm the legal suitability of the document with an expert.
- AI functions
The websites and services may use AI assistants, chatbots or other artificial intelligence functions. Answers generated by AI are general in nature and may not be complete, error-free or up to date.
AI does not provide legal, medical, financial or other professional advice. Users should assess responses critically and verify information elsewhere where necessary.
AI functions must not be used for unlawful purposes, harassment, unnecessary processing of sensitive data, circumventing security or misuse of the service.
- Third-party services
The websites may use third-party services, such as analytics, form, payment, login, cloud, communications, AI or social media embedding services.
Third-party services are governed by their own terms of use and privacy practices. The website administrator is not responsible for the content, availability, security or operation of a third-party service to the extent that the service is controlled by that third party.
- Intellectual property rights
The website’s texts, images, videos, graphics, logos, identifiers, design, campaign materials, documents and other content are the property of Huugo Wahalahti or other rights holders unless otherwise stated.
Content may be used only within the limits permitted by law, such as for private use, under the right of quotation or in another separately authorised manner. Content must not be used misleadingly, commercially, offensively, in a politically distorting manner or in violation of copyright without permission.
- Availability of the service
The website and services are maintained with due care, but uninterrupted, error-free or continuous availability cannot be guaranteed. Interruptions may occur, for example, because of maintenance, technical problems, security reasons, service provider disruptions or force majeure.
The service may be changed, updated, restricted or discontinued in whole or in part.
- Limitation of liability
The website content is provided as is. Although efforts are made to keep the content accurate and up to date, complete accuracy cannot be guaranteed.
To the extent permitted by law, the website administrator is not liable for indirect damage, errors of interpretation, decisions made by users based on website content, or damage caused by third-party services.
Nothing in these terms limits rights based on mandatory legislation.
- Changes to the terms
These Terms of Use may be updated if the website’s operation, services, legislation or technical solutions change. The current version is published on the website.
- Applicable law
These Terms of Use are governed by Finnish law unless mandatory legislation provides otherwise.
Any disputes will primarily be resolved through negotiation.
Cookie Policy+
Huugo Wahalahti
Updated: 10 May 2026
This Cookie Policy explains how cookies and similar technologies are used on Huugo Wahalahti’s websites.
- What are cookies?
Cookies are small text files stored on a user’s device while using a website. Cookies allow a website, for example, to remember user choices, keep users logged in, secure the operation of the website, collect analytics and display embedded content.
In addition to cookies, similar technologies may be used, such as local storage, tracking pixels, session identifiers and other online identifiers.
- What types of cookies are used on the website?
The website may use the following types of cookies.
Essential cookies
These are required for the technical operation of the website and services. They may relate, for example, to security, the operation of forms, login, remembering cookie preferences, load management or providing a service requested by the user.
Analytics cookies
These are used to measure and improve website use. The website uses Matomo Analytics. Analytics can help understand, for example, which pages are used, how users navigate the website and how website content can be improved.
Functional cookies
These may remember user choices, such as settings, form status or user interface selections.
Social media and embed cookies
These may be created when the website displays, or the user opens, embeds from Instagram, X, YouTube, Twitch, LinkedIn or Threads, for example.
Marketing and communications cookies
These may be used if campaign, communications or advertising functions requiring the user’s consent are introduced on the website.
- What are cookies used for?
Cookies may be used for the following purposes:
the technical operation of the website
security and prevention of misuse
login and user accounts
the operation of forms and services
remembering cookie preferences
analytics and website development
displaying social media embeds
measuring the performance of campaigns and communications
improving the user experience.
- Consent to cookies
Essential cookies may be used without separate consent because they are necessary for the operation of the website or a service requested by the user.
Non-essential cookies are used only with the user’s consent where consent is required by law. Users can give, change or withdraw their consent through the website’s cookie settings.
Users can also manage cookies through their browser settings. Blocking cookies may, however, affect how the website functions.
- Third-party cookies
The website may use third-party services that may set cookies or process user data. These services may include, for example:
Cloudflare
Matomo
Brevo
Tally.so
Stripe
ElevenLabs
Supabase
Adobe Portfolio
Twilio
Resend
Auth0
Instagram
X
YouTube
Twitch
Threads
LinkedIn
Gravatar
The privacy practices of the relevant service providers also apply to third-party cookies and data processing.
- Cookie retention periods
Cookie retention periods vary according to their purpose. Some cookies are session cookies and are deleted when the browser is closed. Other cookies remain for longer, for example, to remember user preferences.
Retention periods are kept as short as possible in relation to their purpose. The cookie settings may provide more detailed information about the cookies in use, their purposes and their retention periods.
- Changing cookie settings
You can change your cookie preferences through the website’s cookie settings. You can also delete or block cookies through your browser settings.
If you delete cookies from your browser, the website may ask you to make your cookie choices again on your next visit.
Disclaimer+
This website and its related services are Huugo Wahalahti’s personal online services for communications, campaigning and civic engagement. The websites and services are maintained by Huugo Wahalahti and people assisting him, such as personal assistants, advisers, campaign volunteers, coordinators responsible for campaign areas, campaign managers and other people involved in practical implementation.
Content published on the websites is intended for general information, communication and interaction. It does not constitute legal, financial, medical, technical or other professional advice unless expressly stated otherwise. Where necessary, users should independently ensure that the information available to them is current and suitable for their own circumstances.
Huugo Wahalahti and the people involved in maintaining the websites aim to ensure that information published on the websites is accurate, current and appropriate. Nevertheless, the websites may contain errors, omissions, technical disruptions, outdated information or ambiguous expressions. Website content may be changed, supplemented or removed without separate notice.
Views, statements and opinions expressed on the websites are generally those of Huugo Wahalahti or the person or entity identified in connection with the content. They do not necessarily represent the official position of any association, campaign group, partner, employer, elected or appointed body, or other organisation unless this is expressly and clearly stated.
Content published on campaign websites relates to electoral, campaign and advocacy activities. Volunteers, coordinators, managers and other assisting individuals may participate in carrying out a campaign. Although campaign communications are reviewed carefully, individual publications, event details, schedules, links or materials may change during the campaign.
The websites may contain links to external websites, services, social media platforms, payment services, forms, event pages or other third-party services. Huugo Wahalahti and the people involved in maintaining the websites are not responsible for the content, operation, security, privacy, availability or possible changes of external services. Users should review the terms and privacy practices of those services.
The websites may use technical integrations, AI-based functions, chatbots, form services, payment services, analytics, social media embeds and other digital solutions. These services may experience disruptions, delays, incorrect responses or interruptions. AI-generated responses and automated functions are assistive and do not replace human judgement, official decision-making or expert assessment.
To the extent permitted by law, Huugo Wahalahti and the people involved in maintaining the websites are not liable for damage, loss, costs or inconvenience caused by use of the websites, service interruptions, technical errors, external services, outdated information, users’ own interpretations or users acting on the basis of general information published on the websites. This disclaimer does not, however, restrict rights based on mandatory legislation.
Privacy-related matters are governed by the separate Privacy Notice and Cookie Policy. If users provide information through forms, event registrations, newsletters, appointment bookings, signature services, the chatbot or other services, the processing of that information is described in more detail in the Privacy Notice.
Use of the websites is at the user’s own risk. By using a website, the user accepts that the website content, technical solutions and services are provided as they are available at any given time.
Questions concerning privacy, website content or this disclaimer may be sent to:
[email protected]
[email protected]
Accessibility Statement+
Updated: 10 May 2026
This Accessibility Statement applies, where relevant, to Huugo Wahalahti’s websites and related digital services.
The websites aim to be as clear, understandable and accessible as possible for different users, regardless of their device, functional ability, age, language skills or digital skills.
Although not all websites necessarily fall directly within the scope of the Finnish Act on the Provision of Digital Services, accessibility is regarded as an important part of good online communication, equality and respect for users. The purpose of the Act on the Provision of Digital Services is to promote the availability, quality, security and accessibility of digital services.
Accessibility status
The accessibility of the websites is being developed continuously. The aim is, where possible, to follow the key principles of the Web Content Accessibility Guidelines (WCAG): perceivability, operability, understandability and robustness.
The websites are designed so that content is readable, navigation is logical, links are understandable, text contrast is sufficient, the website can be used on screens of different sizes and essential content is available without visual special effects.
Current assessment of accessibility status:
The service partially meets the accessibility objectives.
Non-accessible content
The websites may still have accessibility shortcomings. Possible shortcomings may include:
older PDF files or image files without complete text alternatives
social media embeds whose accessibility depends on third-party services
videos or live broadcasts without captions
images whose alternative text is missing or insufficiently descriptive
forms that are not fully accessible in every situation
campaign materials or visual graphics not primarily produced in accordance with accessibility standards
third-party services such as payment services, social media embeds, form services or login solutions.
Efforts are made to address shortcomings as part of the continuous development of the websites.
Third-party content
The websites may use external services such as Instagram, X, YouTube, Twitch, LinkedIn, Threads, Tally, Stripe, Auth0, ElevenLabs, Adobe Portfolio and other technical solutions.
The accessibility of these services is not entirely under the direct control of the website administrator. If you notice a problem in a third-party service, you may still report it so that the problem can be worked around or an alternative way of handling the matter can be offered where necessary.
Providing accessibility feedback
If you notice an accessibility problem on the website, you can report it by email:
[email protected]
or alternatively: [email protected]
In your feedback, it is helpful to state which page the problem occurred on, what you were trying to do, which device and browser you were using, and what kind of problem you encountered.
We aim to respond to feedback within a reasonable time. If you need content in an accessible format, you may request it by email.
Preparation of this Statement
This Statement is based on the website administrator’s own assessment. It is updated when the websites are developed, new services are added or new information about accessibility becomes available.
Further information on the processing of sensitive data+
Most of the information processed on the website is ordinary contact, registration or communications data: names, email addresses, telephone numbers, form responses and event-related information. As a rule, we do not seek to collect particularly sensitive information such as health data, religious beliefs, political opinions or similar personal data.
It is nevertheless important to recognise that not all websites are completely neutral environments. Some of these websites and services relate to campaigns, elections, civic engagement, events or values-based activities. In such a context, even an enquiry, registration or the content of a message may sometimes reveal something about a person’s views, values, religious background or political interests.
For example, registering to join an election campaign team, sending a campaign-related message or participating in a values-based event may in some situations reveal information that data protection law considers to require special protection. This does not mean that such information is intended to be collected more widely than necessary. On the contrary, such information is processed with particular care and only when necessary for handling the matter.
In practice, this means that if you contact us about a particular matter, register for an event or provide information through a form, the information is used for the purpose for which you provided it. If handling the matter does not require sensitive information, it will not be requested and you do not need to provide it.
We therefore ask that you do not submit unnecessary sensitive information through forms, by email, in the chatbot or through other channels. For example, health information, personal identity codes, religious beliefs, political opinions or other special categories of personal data should not be shared unless they are necessary for the matter in question.
If such information is nevertheless received, for example in a message sent by a user, it is processed in a limited and confidential manner and only on an appropriate legal basis. The purpose is to protect the user, not to build an unnecessarily extensive profile of them.
Use of artificial intelligence on the website and in the services+
This website and related services may use AI-based functions. These may include, for example, a chatbot, digital assistant, automated response functions, telephone assistant, text-processing tools or other user-facing AI features.
AI is used primarily to make it easier to contact us, improve the usability of the service, support appointment bookings, answer user questions and develop the website’s operation. AI does not replace people in matters requiring individual judgement, legal assessment, an official decision or other responsible decision-making.
Answers provided by an AI assistant may be useful, but they may also contain errors, omissions or outdated information. Responses should not be regarded as legal, financial, medical, spiritual, political or other professional advice. Users are responsible for how they use answers provided by AI.
External service providers, such as ElevenLabs or other technical services, may be used for AI functions. Messages provided by users, conversation content, technical logs and other information necessary for use of the service may be processed to generate responses, ensure the service functions, improve quality, prevent misuse and maintain security.
Users should not enter unnecessary sensitive information into the AI assistant. Such information includes, for example, health data, personal identity codes, payment card details, religious beliefs, political opinions, passwords, private contractual information or other particularly personal information unless providing it is necessary for handling the specific matter.
If the AI assistant is connected to appointment bookings, events, enquiries or campaign communications, information provided by the user may be used to handle the request in question. The processing of data is explained in more detail in the Privacy Notice.
AI is used as a supporting tool. Ultimate responsibility for the website content, provision of services and processing of personal data rests with the controller or the service organiser identified in each case.
Media and copyright information+
Media, images and copyright
The content of this website, including texts, images, videos, graphics, logos, visual elements, campaign materials, identifiers, documents, presentations and other material, is protected by copyright unless otherwise stated.
Rights to the material belong to Huugo Wahalahti or the rights holder identified in each case. All rights are reserved unless a different licence or right of use is expressly stated in connection with an individual item.
Permitted use
Website content may be read, shared as a link and used for private, non-commercial purposes. Public quotation is permitted in accordance with good practice where the source is clearly identified and the quotation is not used misleadingly.
The media may use public information published on the website for ordinary journalistic purposes within the limits permitted by good journalistic practice and copyright law. The use of images, logos, graphics and campaign materials in publications nevertheless requires separate permission unless the use clearly falls within a statutory right of quotation or reporting.
Prohibited use
Website material must not be copied, modified, sold, republished, used in advertising, used in a misleading context or associated with a context that distorts its original purpose.
In particular, campaign materials, images, logos, signatures, identifiers or portraits must not be used in a way that falsely suggests support, cooperation, endorsement, a political connection, a commercial relationship or another affiliation.
Website content must not be used for hostile, defamatory, harassing, discriminatory or unlawful purposes, or for purposes that endanger a person’s safety.
Use of images
Images published on the website may not be used without permission unless it is expressly stated in connection with the image that it may be downloaded, for example, for media use.
If you need images, logos, portraits, campaign materials or other material for media, partnership or communications purposes, please contact:
As an accredited media representative, you can find the campaign team members’ contact details after logging in at huugowahalahti.fi/esikunta.
Sharing on social media
Links to the website may be shared on social media. Sharing must not, however, create a false impression that Huugo Wahalahti supports, approves of or is involved in an activity, campaign, product, service or message unless such a connection has been separately agreed.
Third-party material
The websites may contain images, embeds, videos, social media content or other material whose rights belong to third parties. The terms and licences of the relevant rights holder apply to the use of such material.
Reporting errors
If you notice material on the website whose rights, source attribution or use are unclear, you may report the matter by email: