Drafted on 27 June 2018
1. Data controllers
Innovation Funding Agency Business Finland (Business ID: 0512696-4) and Business Finland Oy (Business ID: 2725690-3)
Visiting address: Porkkalankatu 1, 00180 Helsinki, Finland
Switchboard: +358 (0)29 50 55000
2. Point of contact
Please e-mail to: email@example.com
3. Name of register
Team Finland Market Opportunities, register of external users
4. Purpose of personal data processing and basis for processing
Category of data subjects
Data utilised for
Basis for processing
Individuals registered as external users of one or more of Team Finland Market Opportunities services
The information is collected to:
- allow the registered person to use one or more of features of the Services that require identification of the users
- send newsletters
- send the registered person renewal notifications and/or service notifications
- conduct customer satisfaction surveys
Public interest, contract
Processing tasks may be outsourced to third party service providers in accordance with the data protection legislation and the boundaries imposed by same. The data is not used for profiling purposes.
5. Data content of register
The following type of information regarding the data subject may be stored:
- usernames and passwords for the Services
- e-mail address
- screen name
- Twitter, Facebook or Google+ profile (optional)
- telephone number
- company or organization name and contact details (such as company address)
- links to personal sites (such as LinkedIn address)
- title or position of individuals
- information on specific interests (such as industry or market area)
- comments left by user on content
- optional background information
6. Personal data retention period
We may erase the personal data from the register latest if the user profiles have not been updated or used for a period of five years.
The erasing shall take place by means of deleting the information in its entirety, by rendering the data passive so that the data are no longer processed and access to the data is restricted, by means of encrypting or overwriting.
7. Regular sources of information
Information is submitted by the registered person himself/herself.
8. Regular disclosures of information and transfer of data outside of the EU or EEA
If you choose to provide input to the Service, such usage of the Service may be accessible to other users of the Service worldwide.
In addition, information may be shared among Service Providers, i.e. among Team Finland actors.
The data is stored within EU.
9. Principles for protecting the register
Access to management of personal data is provided only to the nominated persons and secured by username and password.
10. Automated decision-making
The information in the register shall not be utilised for decision-making entailing legal effects for the person and that is based on automated data processing, such as profiling.
11. Data subject’s right to object to the processing of personal data
The data subject shall have the right, in connection with their personal specific circumstances, to object to profiling pertaining to themselves and to other processing measures directed by the data controller at the data subject’s personal data to the extent the data processing is based upon the data processor’s legitimate interests.
12. Data subject’s right to object to direct marketing
The data subject may issue the data controller consents or prohibitions pertaining to direct marketing on a channel-specific basis, including profiling taking place for direct marketing purposes.
13. Other data subject’s rights pertaining to the processing of personal data
Data subject’s right to obtain access to the information (Right of Access)
The data subject shall have the right to inspect which data concerning them has been stored in the register. The inspection request must be submitted in accordance with the instructions set forth in this privacy statement. The right of access may be denied upon grounds stipulated in the law. As a point of departure, exercising one’s right of access in an ordinary manner is free of charge.
Data subject’s right to require the rectification or erasure of data or restriction of processing
As a registered user of the Services, the data subject is provided with tools and account settings to access, correct or modify the personal data he/she provided to the data controller and is associated with his/her account.
To the extent the data subject is able to act for themselves, the data subject shall, without any undue delay, after becoming aware of the error, or, having detected the error themselves, rectify, erase or supplement any piece of information found in the register being contrary to the purpose of the register, erroneous, unnecessary, deficient or outdated.
To the extent, the data subject is not able to rectify the information themselves, the correction request shall be submitted in accordance with section 14 of this privacy notice.
The data subject shall also have the right to require the data controller to restrict the processing of their personal data, for instance in circumstances where the data subject is awaiting the data controller’s response to their request regarding the correction or erasure of their personal data.
Data subject’s right to lodge a complaint with the supervisory authority
The data subject shall have the right to lodge a complaint with the competent supervisory authority, if the data controller has not complied with the applicable data protection regulation in its operations.
In all questions concerning the processing of personal data and situations related to the exercise of the data subject’s rights the data subject should contact the data controller. The data subject may exercise their rights by contacting firstname.lastname@example.org.