Legal
Cookie Policy
Every cookie and storage item this site can use, what it does, how long it lasts, and how to change your mind.
Version 1.0 · in force from 1 September 2026
1. The short version
This site currently loads no analytics and no advertising provider at all. The only things stored on your device are the record of your own cookie choice and, when you use a form, a security token. Everything else on the page — fonts, styles, scripts, icons — is served from this domain, so no third party is contacted when you visit.
You can check that yourself: open your browser’s developer tools, look at the Network tab and reload. Every request goes to aurantilijakiinteisto.com.
2. The law we are applying
Under Article 5(3) of the ePrivacy Directive as implemented in Finland by the Act on Electronic Communications Services (917/2014), and under the GDPR, we may store information on your device without consent only where it is strictly necessary to provide the service you asked for. Everything else requires your prior, freely given, specific and informed consent.
That is why the banner defaults to nothing being allowed, why “Reject all” is exactly as easy to press as “Accept all”, and why closing the banner is treated as a rejection rather than as agreement.
3. Strictly necessary — no consent required
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| auran.consent.v1 | Local storage (not a cookie) | Remembers the choice you made in the cookie banner, so we do not ask again on every page. | 6 months, then we ask again |
| auran_csrf | Cookie — first party, HttpOnly, SameSite=Lax, Secure | A random token that proves a form submission came from this site and not from a third party forging a request in your browser. | Session (deleted when you close the browser) |
| Rate-limit counter | Server-side only — no cookie or storage in your browser | Counts recent submissions per network address so the forms cannot be flooded. Held on our server, not on your device. | 1 hour |
Our web server also writes an access log containing your IP address and the page requested. That is a server log, not a cookie; it is covered in section 2.3 of the Privacy Policy and is kept for at most 30 days.
4. Optional categories
Analytics
Aggregate measurement of which pages get read. Not currently in use — no analytics provider is loaded on this site. If we ever add one, this page will name it, its cookies and their lifetimes before it goes live, and it will not run unless you have allowed the analytics category.
Advertising
Measuring whether an advertisement led to an enquiry — for example the Microsoft Advertising UET tag. Not currently in use — no advertising tag is loaded on this site. The consent machinery for it is nevertheless already built and running: Microsoft Consent Mode v2 and Google Consent Mode v2 signals are set to denied on first paint and are only updated if you allow the advertising category. Should we begin advertising, this section will name the tag and its cookies first.
5. Consent Mode v2
Before any tag could load, this site sets the consent signals ad_storage, ad_user_data, ad_personalization and analytics_storage to denied. They change to granted only for the categories you allow, and change back the moment you withdraw. Because no tag is present today, these signals currently reach nobody — they are in place so that the first tag we ever add is already governed by your choice.
6. Changing or withdrawing your choice
- Use the link, available in the footer of every page.
- Or clear this site’s data in your browser, which removes the stored choice and makes the banner appear again.
- Or block or delete cookies in your browser settings entirely. Blocking the strictly necessary items will stop the forms from working, but the rest of the site will still read normally.
Withdrawing consent is as easy as giving it, and takes effect immediately. It does not make past processing unlawful.
7. Questions
Write to contact@aurantilijakiinteisto.com or call +358 40 331 6751. Our full contact and register details are in the footer of every page and on our register record page.