Last updated: November 1, 2026

This is a privacy policy that is required by the EU General Data Protection Regulation (GDPR). Note that our cookie policy is also a part of this privacy policy.

Table of Contents

The Holder of the Collected Data

Petri Kainulainen
Anteronkierto 11 B 17
71800 Siilinjärvi
Finland

The Person in Charge of the Collected Data

Petri Kainulainen
Anteronkierto 11 B 17
71800 Siilinjärvi
Finland
Email Address: petri@petrikainulainen.net

The Data Sources of the Collected Data

The collected data is either received directly from the user or determined from the data given by the user. The exact data sources of the collected data are described in the following sections.

The Data Collected by the petrikainulainen.net Website

This section describes the data that is collected by the petrikainulainen.net website. If you want to take a look at a specific subsection of this section, you can use the following links:

Access Log

We use the Apache HTTP server that logs all requests processed by the server. These requests are written to a so called access log. The access log contains the following data:

  • The timestamp of the HTTP request
  • The IP address of the client
  • The value of the User-Agent HTTP request header
  • The value of the Referer HTTP request header
  • The requested resource
  • The request method
  • The used HTTP protocol
  • The returned HTTP status code
  • The size of the returned HTTP response

The collected data is extracted mainly from the incoming HTTP request. Also, before the Apache HTTP server returns the response to the client, it will extract the returned HTTP status code and the size of the returned response, and write this information to the access log.

We collect this data because we have a legitimate interest to prevent abuse.

We store old access logs for one month.

Regular Transfer of Data

This section identifies the information that is transferred to third parties. If you want to take a look at a specific subsection of this section, you can use the following links:

Email List

We have an email list that allows us to keep in touch with the regular readers of this blog. We use an email marketing tool called Drip for this purpose.

Drip collects the following data:

  • The email address of the subscriber.
  • The time zone of the subscriber.
  • The method that was used to subscribe to the newsletter.
  • The tags which are used to segment subscribers to different groups. For example, when a user subscribes our email newsletter they can specify what kind of emails they want to get. These email preferences are saved by using tags. Also, if the person has purchased my Test With Spring course, they will have tags which identify them as a person who has purchased this course.
  • A list of emails sent to the subscriber.
  • A list of emails which were opened by the subscriber.
  • A list of emails which contained a link that was clicked by the subscriber.
  • A list of trigger links clicked by the subscriber.
  • A list of subscribed email campaigns.
  • Notes about the customer.

Drip collects its data by using these data sources:

  • The subscriber. The email address and email preferences (tags) are provided by the subscriber. Also, when a subscriber opens our email or clicks a link found from our email, Drip updates the open and click statistics of the email in question.
  • Drip. A list of emails sent to the subscriber is updated by Drip when we send a new email to the subscribers of our newsletter.
  • An administrator. When a person subscribes our newsletter and they have purchased my Test With Spring course, an administrator will add the correct tags to the subscriber.

We use the collected data for four different purposes:

First, we send useful content to our subscribers. This means that every time when we publish a new blog post, we send an email to our subscribers.

Second, we send relevant marketing emails to our subscribers. These emails market either our own products or the products of our business partners.

Third, we segment our subscribers to different groups because this allows us to send relevant information to our subscribers. For example, if the subscriber has told us that they want to get only testing related information, we won’t send them an email when we release a blog post that doesn’t talk about testing.

Fourth, we use the open and click rates for improving our communication. We want to provide useful information to our readers and these two statistics help us to achieve this goal.

We collect this data because the subscriber has given us their consent to do so. When a person subscribes our email newsletter, they have to confirm their subscription by clicking the confirm link found from the confirmation email.

This data is stored as long as the subscriber is subscribed to the newsletter. When a subscriber cancels their subscription, we store this data for 30 days before it is deleted permanently.

More Information:

Transfer of Data Outside the EU or EEA

The following data is transferred outside the EU or EEA:

  • The data collected by Drip. Note that Drip is a U.S. company and the data that is collected by it is processed in the United States or any other country in which Drip or its subsidiaries, affiliates or service providers maintain facilities.

The Principles of Protecting the Collected Data

This section describes the principles which we use to protect the data that is collected by us.

The petrikainulainen.net Website

The data that is collected by the petrikainulainen.net website is protected by following these rules:

  • All communication between a web browser and the petrikainulainen.net website uses HTTPS.
  • The petrikainulainen.net website uses a malware scanner that performs regular malware scans.
  • The web server is located in Finland at locked and guarded premises. Only authorized personnel are allowed to access these premises and the information stored on these servers.

Manual Processing

When we process the collected data manually, we follow these principles:

  • We minimize the number of persons who can access the collected data. At the moment only one person (Petri Kainulainen) can access it.
  • We use two factor authentication every time when it’s supported by the service that collects the data described in this privacy notice.
  • All communication between the administrator and a remote system happens by using HTTPS.

Individual Rights

You have the right to access your personal data that has been collected by us. You can obtain a copy of your personal data by sending a signed letter to the person who is in charge of the collected data. This letter must contain the information that allows us to identify you. You can obtain your personal data free of charge once per year. Your request is processed within 30 days of receiving your letter.

You have the right to rectify incorrect data or complete incomplete data. If you want to exercise this right, you have to contact the person who is in charge of the collected data. Your request is processed within 30 days.

You have the right to have your personal data erased. You can have your personal data erased by sending a signed letter to the person who is in charge of the collected data. This letter must contain the information that allows us to identify you. Your request is processed within 30 days of receiving your letter. Note that if you want to erase the data collected by Drip, you don’t have to send us a signed letter. You can simply unsubscribe our newsletter and your data will be erased.

You have the right to restrict the processing of your personal data. If you want to restrict us from processing your personal data, you have to send a signed letter to the person who is in charge of the collected data. This letter must contain the information that allows us to identify you. Your request is processed within 30 days of receiving your letter.

You have the right to data portability. This means that you can obtain the collected data in a machine readable format. You can obtain a copy of your personal data in a machine readable format by sending a signed letter to the person who is in charge of the collected data. This letter must contain the information that allows us to identify you. Your request is processed within 30 days of receiving your letter.

You have the right to object to the data processing based on legitimate interest, direct marketing, and data processing for purposes of scientific/historical research and statistics. If you want to exercise this right, you have to contact the person who is in charge of the collected data. Your request is processed within 30 days.

Also, if you think that we are processing your personal data in a way that breaks the law, you have the right to file a complaint to the office of the data protection ombudsman.