Privacy Statement

Electronic newsletter

1. Registrar

Jyväskylä Cultural House Support Association
executive director Vilja Ruokolainen
info@villarana.fi
+358 44 245 3010
Seminaarinkatu 13, 40100 Jyväskylä

2. Register name

Customer data register of Jyväskylä kultuttuitalo tukiyhdistys ry

3. Purpose of collected data

Implementation of e-mail communication between Villa Rana and other communities operating in the premises of Kulttuuritalo Villa Rana. Joining the register is voluntary and maintenance is based on the data subject's consent.

Data protection and data processing: EU General Data Protection Regulation (2016/679) Data Protection Act (from 1 January 2019)

4. What information we collect

The register can contain information about customers according to the following grouping:
• Name
• Address
• Telephone number
• Email address
• Additional information
• Language
•Country

5. Data retention periods

Data can be deleted at the Customer's request or due to the end of the customer relationship.

6. Data sources of personal data

The information is obtained from the registrant himself. No regular releases of data from other sources.

7. Disclosure of information

Personal data will not be disclosed to third parties other than within the limits permitted or required by applicable legislation. Information is not transferred to third countries or outside the EU/EEA area.

8. Data protection principles

We limit access to personal data only to authorized persons who have a legitimate need to process the personal data in question. The information security of the register and the confidentiality, integrity and usability of personal data are ensured by appropriate technical and organizational measures.

9. RIGHTS OF THE REGISTRANT

The request must be made in writing to the controller's contact person.

9.1 The registered person's right of inspection (Article 15)

A person in the register has the right to check what information about him is in the register. In addition, the data subject has the right to receive the personal data concerning him, which he has provided to the controller, in a structured, commonly used and machine-readable format.

9.2 The right to demand correction of information (Article 16)

The registered person has the right to demand that the controller correct inaccurate and incorrect personal data concerning the registered person without undue delay. Change proposals are made in writing to the controller.

9.3 The right to lodge a complaint with the supervisory authority (Article 77)

If the data subject considers that the processing of personal data concerning him violates the applicable data protection regulations or the exercise of rights is refused, the customer will be given a written answer on the reason for the refusal. The customer has the right to refer the matter to the data protection authorized officer at the address: Office of the Data Protection Authorized Officer, PO Box 800, 00531 Helsinki. More detailed instructions for filing a complaint can be found on the website of the data protection authorized office https://tietosuoja.fi/etusivu.

9.4 The right to receive information about a data security breach (Article 34)

The registered person has the right to receive information from the controller without undue delay, when a security breach of personal data is likely to cause a high risk to the rights and freedoms of natural persons,

9.5 Other rights related to the processing of personal data (Articles 17-22)

Withdrawal of processing based on consent. The registered person has the right to withdraw the consent he has given, at any time without affecting the legality of the processing carried out on the basis of consent before this. The right to be forgotten.