EU General Data Protection Regulation (679\/2016), Article 12<\/em> This privacy notice describes how we process personal data. You have the right to the protection of personal data. We process personal data only on the basis of legal grounds and in a transparent manner. We comply with the provisions and principles of the European Union’s General Data Protection Regulation (GDPR) and national data protection legislation.<\/p>\n 1.\u00a0 \u00a0 Controller<\/strong><\/p>\n EastCham Finland kauppakamariyhdistys ry 2.\u00a0 \u00a0 Person in charge of register-related matters<\/strong><\/p>\n Petri Kekki 3.\u00a0 \u00a0 Used personal data registers<\/strong><\/p>\n 4.\u00a0 \u00a0 Purpose of the processing of personal data and legal basis for the processing of personal data<\/strong><\/p>\n Management of the activities, memberships and customer relationships of the association, marketing of the services of the Chamber of Commerce and the implementation of the employer obligations of the association.<\/p>\n The legal bases for the processing of personal data are consent, agreements related to customer relationships and their preparation\/implementation, legitimate interest and statutory obligations.<\/p>\n Data subjects are always asked for a separate specific consent for the use of personal data collected in connection with filling in the forms (membership application, registration forms) for the processing purposes stated in the association\u2019s privacy statement.<\/p>\n 5.\u00a0 \u00a0 Data content of the personal data registers<\/strong><\/p>\n Personally identifiable information:<\/p>\n Information on the marketing content used by the person (usage data):<\/p>\n Data derived from usage data through the use of analytics (derived data):<\/p>\n 6.\u00a0 \u00a0 Regular data sources<\/strong><\/p>\n The information has been obtained from the data subjects themselves, from their employer or on the basis of the association\u2019s own activities.<\/p>\n 7.\u00a0 \u00a0 Regular disclosure of information<\/strong><\/p>\n The member register is sold for the purposes permitted by the data protection regulation (e.g. direct advertising and marketing, market research) only to the member companies of EastCham Finland.<\/p>\n Personal data may be disclosed to various partners of the association\/participants of events in accordance with the EU General Data Protection Regulation.<\/p>\n 8.\u00a0 \u00a0 Transfer of personal data outside the EU\/EEA<\/strong><\/p>\n The data may be transferred to offices located in the target countries of the association for the purposes described in section 4, except for personal identity codes, when the legal grounds for processing provided for in the EU General Data Protection Regulation apply.<\/p>\n The processing of personal data may take place in offices located in the target countries of the association, but the storage of personal data always takes place on a server located in Finland.<\/p>\n 9.\u00a0 \u00a0 Principles of protection of the association\u2019s personal data registers<\/strong><\/p>\n Customer and member data is stored in Finland in the CRM customer management system. With regard to the personnel\u2019s personal data and registers pertaining to terms of employment, the personal data register of the members of the association\u2019s Board of Directors and the temporary personal data registers for participants in Team Finland trips, the association has implemented appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, disclosure, misuse, alteration, destruction or unauthorized access.<\/p>\n The association stores personal data in paper and digital format. Paper materials are stored in locked premises that can only be accessed by designated persons authorized to access them as part of their duties. The digital materials are stored on a server that is maintained in a locked facility accessible only to designated persons and persons authorized to access it as part of their duties. Access to personal data stored in the system is only granted to designated persons who need it to perform their duties. The environments are protected by the appropriate firewalls and technical protection methods.<\/p>\n Employees of the Chamber of Commerce have unrestricted access to the member\/customer register database. Employees have access to other personal registers only to the extent that their duties require it.<\/p>\n For Team Finland trips, a trip-specific, temporary personal data register is created, which is then destroyed after the trip has taken place.<\/p>\n 10.\u00a0 \u00a0 Retention period of personal data<\/strong><\/p>\n The data collected in the register is stored only for the period of time and extent necessary for the original or compatible purposes for which the personal data was collected. The legal basis for the data in the register and the need for processing are reviewed at least every five (5) years. The personal data in accordance with the privacy statement are retained for as long as the controller uses the data for customer relationship management and marketing purposes. However, personal data is always stored in the association\u2019s databases for the required legal period.\u00a0 Personal data are <\/span>\u00a0is \u00a0always stored at least for the duration of the agreement\/legitimate interest pertaining to the data subject.<\/p>\n The usage data for targeted direct marketing-related email messages and the usage data for the contents of the company\u2019s website are automatically erased 18 months after use.<\/p>\n The association assesses the need for data retention in accordance with its internal Code of Conduct. In addition, EastCham Finland takes all reasonable measures to ensure that personal data that are inaccurate, erroneous or outdated with regard to the purposes of the processing are erased or rectified without delay.<\/p>\n 11.\u00a0 \u00a0 Rights of the data subjects<\/strong><\/p>\n To the extent permitted by law, the data subject has the right to inspect their personal data stored in the association\u2019s personal data register. The request must be submitted in writing (including by email) to the contact person mentioned in section 2. Under this privacy notice, you will also find a form where the data subject can enter their email address and request access to the data collected in the Vine database at the level required by law. An email will be sent to the recipient with links to access the personal data collected about them.<\/p>\n The association\u2019s information systems do not include automated decision-making\/profiling.<\/p>\n To the extent permitted by law, the data subject has the right to demand the rectification or erasure of incorrect, unnecessary, incomplete or outdated personal data.<\/p>\n A person has the right to the erasure of his\/her data (\u201cright to be forgotten\u201d). The request must be submitted in writing (including by email) to the contact person mentioned in section 2.<\/p>\n The data subject has the right to request the association to erase the personal data concerning the data subject without undue delay, provided that<\/p>\n 12.\u00a0 \u00a0 Amendments to the privacy statement<\/strong><\/p>\n We are constantly developing our operations and, therefore, reserve the right to amend the privacy statement by notifying of it in our services. The amendments may be based on changes in legislation. We recommend that you regularly review the content of the privacy statement.<\/p>\n EU General Data Protection Regulation (679\/2016), Article 12 Date of completion: 18 May 2018 This privacy notice describes how we process personal data. You have the right to the protection of personal data. We process personal data only on the basis of legal grounds and in a transparent manner. We comply with the provisions and…<\/p>\n","protected":false},"author":10730,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[],"class_list":["post-90522","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\n
\nDate of completion: 18 May 2018<\/em><\/p>\n
\nEtel\u00e4ranta 10, FI-00130 Helsinki
\nhelsinki@eastcham.fi
\nfirstname.lastname@eastcham.fi<\/p>\n
\nEtel\u00e4ranta 10, FI-00130 Helsinki
\n+358 50 555 2047
\npetri.kekki@eastcham.fi<\/p>\n\n
\n
\n
\n
\n
\n