Website cookies
Cookies are small text files that browsers save on visitors’ devices. Cookies are used to keep the language selection of a user when they navigate between pages, for example.
The tietosuoja.fi website uses cookies that are essential for the functions of the website. These essential cookies ensure that the website works as intended technically and they are not used for any other purposes. The website connection is always a secure connection (https).
The service providers are the Government ICT Centre Valtori and its contract partners HiQ (publishing system), Cloudfare, Inc. (content management system), and Amazon Web Services, Inc. (servers).
This date has been updated on 9 January 2026 to clarify the description of cookies.
Essential cookies used on the website
COOKIE_SUPPORT
A publishing system (Liferay) cookie that stores the information whether the user’s browser allows cookies. The cookie expires in one year.
GUEST_LANGUAGE_ID
A publishing system cookie that stores information on which language the user selects. The cookie saves this information for the user’s next visit to the website. The cookie expires in one year.
JSESSIONID
A publishing system cookie that is used to link the user to their sessions, meaning the individual visit on the website. The cookie expires when the user leaves the website.
LFR_SESSION_STATE_10161
A publishing system cookie that is used to link the user to the session and session management. The cookie expires when the user leaves the website.
AWSALB, AWSALBCORS
Cookies required for the server that improve the user experience by balancing the server load and ensure that users’ sessions are not disconnected. These cookies also help link users to their visits on the website. The cookies expire after a week.
__CF_BM, _CFUVID, CF_CLEARANCE
Cookies required for the server that are used to mitigate malicious traffic and automated traffic from bots as well as to detect and prevent cyberattacks. The cookies expire after 30 minutes or after the user leaves the website.
Essential cookies used for the secure messaging and secure form services
TMP
A cookie of the Government ICT Centre Valtori’s secure messaging service that checks that the user’s browser supports the cookies required for the secure messaging service. The cookie expires when the user leaves the website.
lang, LANG
Cookies of the Government ICT Centre Valtori’s secure messaging service that set the language for the service. The cookies expire after one month.
Random name cookies
Cookies of the Government ICT Centre Valtori’s secure messaging service that are used to create a session for the user. The cookies expire after the user leaves the site and they are deleted when the user closes their browser. In addition to these, the website uses cookies that are used to link the email message to the specific browser used by the user. At the latest, the cookies expire when the oldest message linked to the user’s browser is closed.
Technical log files of the website and data traffic
Technical log files are created on the telecommunications connections and use of the website. These are used for the provision of the online service and for ensuring information security. The information collected in the log files can be linked to individuals, as they contain information such as the IP address used and timestamps. The logged information is only used to enable the provision of the service through the telecommunications network and to investigate errors and information security incidents.
Processing personal data in connection with the provision of the online service and ensuring information security is necessary to comply with the legal obligations of the Office of the Data Protection Ombudsman in accordance with the General Data Protection Regulation.
Social media cookies
There are links to two social media platforms, X and LinkedIn on our website. Our website does not set cookies when displaying links to our social media channels when you browse our website. By clicking on the LinkedIn or X link on our website, you will be redirected to the platform in question, which has its own cookie and privacy policies.