Lustokatu 7, 20380 Turku
tel. 02 412 3500
info@linnasmaki.fi
PRIVACY STATEMENT 7 October 2019
Register statement in accordance with the Personal Data Act 5.12.2018/1050
Registrar
Turku Christian College, 0915313-4
Turku Christian College Foundation sr
Lustokatu 7
20380 Turku
Tel. +358 2 4123 500
info@linnasmaki.fi
The entity managing the register
Turku Christian College
Turku Christian College Foundation sr
Lustokatu 7
20380 Turku
Tel. +358 2 4123 500
info@linnasmaki.fi
Registry name
Turku Christian College's customer register. Purpose and legal basis of personal data processing. The purpose of processing personal data is the management and maintenance of the customer relationship between the company and the business customer, as well as marketing. The information in the register is used for the company's own direct marketing, unless the customer has prohibited direct marketing. Purchase and transaction data and location data processed in the register can also be used for profiling and to target marketing measures and customer communications that are of interest to the registrant. Information is also processed in connection with sending the newsletter and participating in events and other marketing measures. The data is processed to guarantee the legitimate interest of the controller. If the data subject does not fill in the information requested in the contact form, the data controller cannot accept the data subject's contact form and cannot commit to the relevant agreement between the data controller and the data subject.
Personal data retention period
Personal data will be stored as long as required by the measures related to the contact form filled out by the registrant. The storage period depends on the collected data, e.g. according to the Accounting Act, invoicing information must be kept for six years. We only keep the information from the contact form with the consent of the registrant.
Description of the group of registered users and information content
The register contains personal information about the company's business customers. The form information entered by the registrant himself may include e.g. email address, phone number or address.
Regular sources of information
The information provided by the contact person and the database of the customer information system and invoicing.
Regular data transfers
As a general rule, personal data is not disclosed outside the organization. The personal data required for accounting is handed over to the accounting office used by Turku Christian College. However, personal data can be disclosed on the basis of the contract between the customer and Turku Christian College, the customer relationship between the customer and Turku Christian College or valid legislation, e.g. to the authorities. Data is not transferred outside the EU or EEA.
Principles of registry protection
Information is stored technically protected. Physical access to data is prevented by means of access control and other security measures. Access to data requires sufficient rights and multi-step identification. Unauthorized access is also prevented e.g. with firewalls and technical protection. Only the data controller and specially designated technical persons can access the register data. Only named persons have the right to process and maintain the data in the register. Users are bound by a duty of confidentiality. The registry data is securely backed up and can be restored if necessary.
Rights of the registrant
- The registered person has the right to check the personal information stored in the register and to receive copies of it. The inspection request must be made in writing and addressed to the entity responsible for registry matters (see section Entity managing the Registry).
- The entity managing the register corrects, deletes or completes personal information in the register that is incorrect, unnecessary, incomplete or outdated in terms of the purpose of the processing on its own initiative or at the request of the registered person. The registered person must contact in writing the entity responsible for the registry affairs of the registrar in order to correct the information (see section The entity managing the registry).
- To the extent that the processing of personal data is based on the data subject's consent, the data subject has the right to withdraw consent at any time. Withdrawal of consent does not affect the legality of data processing carried out before this.
- The registered person has the right to file a complaint about the processing of personal data to the supervisory authority.
Book
a room
Conveniently online
Call
us
+358 2 412 3500
Find
us
Lustokatu 7, 20380 Turku
Sales
service
+358 2 412 3501