PRiVaCY PoliCy
PRIVACY NOTICE FOR PROCESSING PERSONAL DATA FOR KIDDICLUBS ACTIVITIES IN ESPOO HOBBY PATH
Purpose of handling personal data is to administer registrations for activities and organising them.
DATA CONTROLLER –
KiddiClubs
FOR WHAT PURPOSE WILL PERSONAL DATA BE PROCESSED –
We use data to administer your registration and organising the activities.
ON WHAT GROUNDS WILL DATA BE PROCESSED –
Article 6(1)(a) of the General Data Protection Regulation of the European Union: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
WHAT DATA WILL BE PROCESSED –
Relevant contact details (nimi, sähköpostiosoite, puehelinnumero). Necessary background information (age, gender, language skills, palce of residence, other information relevant to the child or activity, permission to send a lesson reminder).
PUBLICITY AND CONFIDENTIALITY OF DATA:
Some of the data may be confidential.
GROUNDS FOR CONFIDENTIALITY:
Act on the Openness of Government Activities, section 24, subsection 1.
WHAT IS THE SOURCE OF THE DATA –
Personal data will be collected directly from the data subjects when they register for an activity.
WILL DATA BE DISCLOSED OR TRANSFERRED OUTSIDE KIDDICLUBS –
As a rule the data is not transferred outside of KiddiClubs. The data will be processed only regarding Espoo Hobby Path. The data may only be disclosed if legislation such as the Act on the Openness of Government Activities so requires.
WILL DATA BE PROCESSED OUTSIDE EU/EEA –
The data will be processed outside EU/EEA, but it will always be processed following the relevant rules and legistlations.
HOW LONG WILL DATA BE STORED –
Data will be stored at maximum duration of the activity and until the next September after activity has ended.
HOW WILL DATA BE PROTECTED –
Data stored in the registry are kept secure in a manner that ensures that they may only be viewed and used by KiddiClubs employees who have the right to access the data.
RIGHTS OF THE DATA SUBJECT –
How can I access my data?
You have the right to obtain from the controller a copy of the personal data that is subject to processing. The controller shall provide the data without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.
If the controller does not take action on the request of the data subject, the controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action and on the opportunity of lodging a complaint with the supervisory authority and seeking a judicial remedy.
Requests from the data subject and any resulting actions are free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested, or refuse to act on the request
When can I request rectification of my data?
You have the right to have inaccurate, incomplete, outdated or unnecessary personal data that we store either rectified or completed by us.
When can I request erasure of my data?
You have the right to have the controller erase your personal data without undue delay under certain conditions. The data subject does not have the right to erasure if the processing of data is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. In these cases, the data will only be erased after the statutory time limit.
When can I request restriction of processing of my data?
If the data concerning you is inaccurate, you have the right to request that their processing be restricted until their accuracy has been verified.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority if you feel that the processing of your personal data infringes data protection legislation. You can lodge a complaint with the Office of the Data Protection Ombudsman at www.tietosuoja.fi
