SOLVI COOKIE POLICY

Last updated: 18 March 2026
Company: Solviapp Oy
Business ID (Y-tunnus): 3562379-3
Address: Castréninkatu 20 B 29, 00530 Helsinki, Finland
Email: [email protected]

1. Purpose

This Cookie Policy explains how Solviapp Oy ("Solvi", "we", "our", "us") uses cookies and similar technologies on our website, mobile application, and related digital services (collectively, the "Platform").

We use cookies to ensure security, reliability, and optimal performance, and to provide Users with a personalised experience. Our use of cookies is governed by the Finnish Act on Electronic Communications Services (917/2014), which implements the EU ePrivacy Directive (2002/58/EC), and by the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

2. What Are Cookies?

Cookies are small text files stored on your device when you visit a website or use an application. They allow the Platform to remember your preferences, improve user experience, and enable core functionality such as authentication, payments, and localisation.

In addition to traditional cookies, we may use similar technologies such as browser local storage, session storage, and device identifiers for equivalent purposes.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

Strictly necessary cookies are exempt from consent requirements under Section 205 of the Finnish Act on Electronic Communications Services (917/2014), implementing Article 5(3) of the EU ePrivacy Directive. They are used solely to the extent required for the operation of the Platform and cannot be disabled.

Used for:

• User login and authenticated sessions

• Booking and payment flow (Stripe Payments Europe Ltd)

• Strong electronic identification (Signicat AS, compliant with eIDAS Regulation (EU) 910/2014)

• Security, load balancing, and DDoS protection (Cloudflare Inc., DPF certified)

• Cookie consent record-keeping

Examples: _solvi_session, __stripe_mid, _cf_bm, signicat-session

3.2 Performance and Analytics Cookies

Used to understand how Users interact with the Platform and to improve usability. Data collected is aggregated and anonymised where possible.

We use:

• Google Analytics 4 (GA4) — anonymous traffic and usage metrics; IP anonymisation enabled; Google LLC is certified under the EU–US Data Privacy Framework (DPF)

• Mixpanel Inc — product analytics and user interaction events; certified under the EU–US Data Privacy Framework (DPF)

• Framer Analytics — UX and frontend performance data; processed within EU infrastructure (AWS Frankfurt)

Examples: _ga, _gid, _ga_<container-id>, _framer_analytics, mp_<token>_mixpanel

You may opt out of Google Analytics at: tools.google.com/dlpage/gaoptout

3.3 Functional Cookies

Enhance Platform functionality by remembering your preferences such as language selection, interface theme, and regional settings. These cookies do not track behaviour across third-party sites.

Examples: lang_pref, remember_me, ui_theme

3.4 Marketing and Third-Party Cookies

Used in limited cases for campaign measurement and reach optimisation.

• Meta Pixel (Meta Platforms Ireland Ltd) — ad performance tracking

• Google Ads Conversion Tracking (Google Ireland Ltd) — campaign efficiency measurement

• Mailchimp (The Rocket Science Group LLC, DPF certified) — optional newsletter signup analytics

• HubSpot (HubSpot Ireland Ltd) — optional marketing communication analytics

All marketing cookies are disabled by default and are activated only upon your explicit consent. Where these services transfer data outside the EU or EEA, transfers are carried out under Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework (DPF).

4. Data Hosting and Storage

Solviapp Oy uses the following infrastructure for data storage and content delivery:

• Primary data infrastructure: User data, booking records, and platform databases are hosted on Hetzner Online GmbH servers located in Finland (Tuusula Data Centre). This facility is GDPR-compliant and ISO/IEC 27001 certified.

• Frontend hosting: Solvi's website and static resources are served via Framer B.V. using AWS Europe infrastructure (Frankfurt, Germany). Framer does not store personal data or identifiable user information; it delivers static content only.

• Security and CDN layer: Cloudflare Inc. (United States) provides DDoS protection and content delivery. Cloudflare is certified under the EU–US Data Privacy Framework (DPF) and processes data under Standard Contractual Clauses (SCCs).

All personal data and booking records are stored within the EU. Where data is processed by partners outside the EU or EEA — including Cloudflare, Mixpanel, and Mailchimp — such transfers are carried out under appropriate legal mechanisms as described in Section 3 and in the Privacy Policy.

5. Cooperation Partners and Data Processors

Solviapp Oy works only with GDPR-compliant partners. All partners operate under signed Data Processing Agreements (DPAs) in accordance with GDPR Articles 28–32.

6. Managing Your Cookie Preferences

You can choose to:

• Accept all cookies

• Reject non-essential cookies

• Customise settings by category

You may change your preferences at any time using the Cookie Settings option at the bottom of the site or within the in-app privacy menu. Rejecting non-essential cookies is as straightforward as accepting them, in accordance with Finnish Traficom guidance and Tietosuojavaltuutettu requirements.

Strictly necessary cookies cannot be disabled as they are required for core Platform functionality.

You may also manage cookies through your browser settings, though this does not constitute valid consent or withdrawal of consent for the purposes of this Policy.

7. Retention Periods

8. Legal Basis for Using Cookies

You may withdraw your consent at any time via Cookie Settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

9. Updates to This Policy

Solviapp Oy may update this Cookie Policy from time to time to reflect changes in technology, legal requirements, or Platform functionality.

If changes materially affect your rights or cookie preferences, you will be notified in advance and asked to reconfirm your consent where required.

The latest version of this Policy is always available at www.solvi.fi/cookies.

10. Contact

For any questions or concerns relating to this Cookie Policy:

Solviapp Oy
Castréninkatu 20 B 29, 00530 Helsinki, Finland
Email: [email protected]
Phone: +358 50 321 7766
Business ID: 3562379-3

11. Summary

By clicking "Accept All Cookies", you consent to the use of all non-essential cookie categories as described in this Policy.

If you choose to reject non-essential cookies, only Strictly Necessary Cookies will remain active.

You may modify or withdraw your consent at any time via Cookie Settings.

Solviapp Oy contractually requires all partners — including Signicat, Stripe, Framer, Cloudflare, and Hetzner to process personal data only for legitimate, clearly defined purposes in accordance with GDPR and applicable data protection law.