Privacy Statement

Member Register

1. Register Controller

Finnsafe ry
Purpuripolku 7-9 E
00420 Helsinki

Contact details for registry and data protection matters:

Finnsafe ry
Tiina Lius
Purpuripolku 7-9 E
00420 Helsinki

09 507 1410
toimisto@finnsafe.net

2. Registered Persons

The register processes the information of the association's members.

3. Basis and Purpose of Keeping the Register

Basis for keeping the register:

• maintenance of information related to association activities, members' contact information, professional information, and service product-related information

Processing of personal data and purpose of using the register:

• the register's information is used for managing and maintaining up-to-date information of members, communication, billing, and other professional activities of the association

4. Personal Data Stored in the Register

the register includes the following information:

• name, date of birth, address, email, phone number, employer information
• billing information
• education, occupational health and safety action
• activities in the association, degrees, awards
• service products

5. Regular Sources of Information

Member information is regularly obtained:

• from the member themselves via an online form
• members can maintain their own information with their passwords

6. Regular Disclosures of Information

The register controller and main user process personal data. In addition, each member can update their own information. The processing of personal data can also be partially outsourced to a third party, for instance for member mailings and accounting operations, wherein these companies commit to complying with current data protection legislation and act appropriately.

Information is not disclosed for marketing purposes outside of the association.

7. Transfer of Data Outside the EU

Personal data is not transferred outside the European Union or the European Economic Area.

8. Retention Period of Personal Data

Personal data is retained in the register as long as the registrant is a member of the association.

9. Protection of Personal Data and Data Security

The information of the association's members is stored in the association's member register. The register is stored in a cloud service system and access to information is limited by passwords. Personal data is retained in the member register as long as the registrant is a member of the association. Following the termination of membership, personal data is primarily retained for 12 months. All manual material is stored in a locked space.

Register data is protected from external use. The association's computer used is protected. The association's email program stores the email addresses of incoming and outgoing messages. Information sent via contact forms on the association's website is transmitted to the association's email through an https-protected connection. The email server's data security is managed by a reliable domestic service provider.

10. Rights of the Registrant

The registrant primarily has the right to inspect their personal data stored in the personal register, at any time:

• to obtain information about the processing of their personal data
• to access their data and inspect their personal data processed by the association
• to require correction of inaccurate and erroneous personal data and completion of the data
• to demand deletion of their personal data
• to withdraw their consent and oppose the processing of their personal data insofar as the processing of personal data is based on the registrant's consent;
• to oppose the processing of their personal data on grounds related to their particular personal situation insofar as the basis of data processing is the association's legitimate interest;
• to obtain their personal data in electronic form and transfer said data to another register controller, provided that the registrant has themselves provided this personal data to the association. The association processes these personal data based on the registrant's consent and the processing is done automatically;
• to demand restriction of processing of their personal data.

The registrant must submit a request to implement the aforementioned right according to this privacy statement's Register Controller and contact person section one (1). The association may ask the registrant to clarify their request in writing and verify the registrant's identity before processing the request. The association may refuse to implement the request based on grounds stipulated in applicable law.

Every registrant has the right to make a complaint to the relevant supervisory authority or the supervisory authority of the European Union member state where the registrant's residence or workplace is located, if the registrant believes that their personal data has not been processed in compliance with applicable data protection legislation.

11. Contacts

Requests concerning the exercise of the registrant's rights, questions about this privacy statement, and other contacts should be made to the register administrator's email at toimisto@finnsafe.net

The registrant can also contact personally or in writing at the following address:

Finnsafe ry
Purpuripolku 7-9 E
00420 Helsinki

12. Changes to This Privacy Statement

This privacy statement can be updated, for example, due to changes in legislation. This privacy statement was last updated on August 13, 2020.