Privacy Statement
1. Controller
Jyväskylän kulttuuritalon tukiyhdistys ry
Executive manager Vilja Ruokolainen
info@villarana.fi
+358 44 245 3010
Seminaarinkatu 13, 40100 Jyväskylä
2. Register name
Jyväskylän kulttuuritalon tukiyhdistys ry, customer repository
3. Purpose and lawful basis for personal data processing
Villa Rana and other organisations operating in the Villa Rana House of Culture. Joining the register is voluntary, and personal data in the register are maintained based on the consent of the data subject.
Privacy and data processing: EU General Data Protection Regulation (2016/679) Data Protection Act (in force as of 1 January 2019)
4. Purpose of processing personal data
The register may contain the following data:
Name
Address
Telephone
Email address
Additional information
Country
5. Data retention periods
Data may be deleted at the Customer’s request or after the termination of the customer relationship.
6. Sources of personal data
Personal data is obtained from data subjects themselves. No regular disclosures of data from other sources.
7. Regular disclosure of data
The controller of the register will not disclose the customer data to any third parties unless it is required by the Finnish authorities. We do not transfer personal data to third countries outside the EU or EEA.
8. Principles of data protection
We restrict access to personal data strictly to authorized persons with a legitimate need to process the personal data in question. The security of the register and the confidentiality, integrity and availability of personal data are ensured by appropriate technical and organisational safeguards.
9. RIGHTS OF DATA SUBJECTS
Requests to exercise your rights as the data subject must be made in writing to the controller’s contact person.
9.1 Right of access to personal data (Article 15)
Data subjects have the right to access and inspect their personal data in the register. Data subjects also have the right to receive the personal data they have provided to the controller in a structured, commonly used and machine-readable format.
9.2 Right to rectification and erasure (Article 16)
Data subjects have the right to require that the controller rectify, without undue delay, any inaccurate and incorrect personal data of the data subject. Requests for rectification must be made in writing to the controller.
9.3 Right to lodge a complaint with the supervisory authority (Article 77)
If the data subject believes that their personal data is processed in violation of data protection regulations or the controller refuses to exercise a requested right, the customer is given a written response on the grounds for the refusal. The customer has the right to refer the matter to the Data Protection Ombudsman at: Office of the Data Protection Ombudsman, PO Box 800, FI-00531 Helsinki, FINLAND. Detailed instructions on how to lodge a complaint are found on the website of the Office of the Data Protection Ombudsman at https://tietosuoja.fi/en/home.
9.4 Right to be notified of a data breach (Article 34)
Data subjects have the right to be notified by the controller without undue delay when a personal data breach is likely to pose a high risk to the rights and freedoms of individuals.
9.5 Other rights related to personal data processing (Articles 17– 22)
Right to withdraw consent. Data subjects have the right to withdraw their consent to processing at any time without affecting the lawfulness of processing based on consent before its withdrawal. Right to be forgotten.