Privacy Policy for DNB FINLAND

Personal Data Register of DNB Finland ry’s List of Members

This Privacy Notice is based on the EU's General Data Protection Regulation (2016/679, “GDPR”), namely the obligation to inform the Data Subjects (GDPR Articles 12–14), the Data Controller's obligation to maintain a record of processing activities under its responsibility (GDPR Article 30), as well as the obligations set out in the Finnish Data Protection Act (1050/2018) supplementing the GDPR.

  1. Data Controller

Name: DNB Finland ry Contact info: info@dnbfinland.org Person responsible for the content of register: Petteri Maukonen, Member of the Board, petteri@dnbfinland.org

  1. Purpose and legal basis of processing Personal Data

The purpose of the processing of Personal Data in this register is to collect and maintain a list of DNB Finland ry’s members and to create a mailing list aimed for the members for the purposes of marketing and communicating about DNB Finland ry’s upcoming events, activities and operations and to conduct surveys and to get feedback.

Legal basis of processing is consent obtained from the Data Subject through registration form while the Data Subject applies for membership. Registration form is filled in Holvi while paying the membership fee.

Personal Data is not used for automated decision making or profiling.

  1. Collected Personal Data and Data Subject Groups

Personal Data register contains the following information: - First name - Last name - E-mail address - Membership fee payment information

Personal Data is obtained from the Data Subject.

The Data Subject categories are members of DNB Finland ry.

  1. Storing of Personal Data and retention times

Personal Data is stored in DNB Finland ry’s Google Workspace. All Personal Data of the Data Subject will be erased when the Data Subject’s membership ends.

  1. Data Recipients and Data Transfers outside EU/EEA

Personal Data is being used solely on purposes stated above. Collected Personal Data shall be disclosed to DNB Finland ry’s board responsible for memberships.

Personal Data may be disclosed to a relevant service provider, and be disclosed primarily in a format that does not allow the information to be connected to an identifiable person.

We may disclose Personal Data to third parties where access to or processing Personal Data is necessary: - to comply with applicable legislation and/or court order, or - to detect, prevent or otherwise address technical or security issues or malpractice.

Personal Data may be transferred outside EU/EEA in order to provide necessary IT services in DNB Finland ry’s data storing platform. DNB Finland uses Google Workspace as a data storing platform. Google Workspace is a cloud based workspace tool, which is owned by Google LLC, to which the European Commission has issued a decision on an adequate level of protection for personal data. Only the necessary data are transferred and the transfer is carried out in accordance with data protection legislation and within the restrictions placed by it.

  1. Rights of the Data Subject

The Data Subject has the right to receive confirmation from the Data Controller of whether their Personal Data are being processed. Furthermore, the Data Subjects have the right of access to their Personal Data and the right to inspect their Personal Data stored in the register and to receive copies of them, right to correct the Personal Data and restrict processing, right to get their Personal Data erased and right to not be subjected to a personal data breach. The Data Subject has the right to withdraw their consent for processing of Personal Data at any time.

Under the GDPR, the Data Controller must respond to requests by the Data Subjects to exercise their rights within one month of receiving such a request.

Data Subjects can exercise their rights by contacting info@dnbfinland.org.

  1. Right to complain to Data Protection Ombudsman

Every Data Subject has the right to lodge a complaint with a supervisory authority if the Data Subject considers that the processing of their Personal Data infringes the applicable data protection regulations. The national supervisory authority in Finland is the Office of the Data Protection Ombudsman.

Contact details: Office of the Data Protection Ombudsman Street address: Lintulahdenkuja 4, 00530 Helsinki, Finland Postal address: PO Box 800 FI-00531 Helsinki Telephone (switchboard): + 358 29 56 66700 Fax: + 358 9 56 66735 Email: tietosuoja@om.fi

Merchant info
DNB FINLAND