Privacy Statement

Version in accordance with the EU General Data Protection Regulation (679/2016)

Registrar

Jyväskylä Entrepreneurship Society ry

Y-tunnus: 2782070-3

Address: Kympinkatu 3 C, 40320 Jyväskylä

Contact person for data protection matters

Data Protection Officer

Elisa Hautala

Email: tietosuoja@jkles.fi

Discovery Tuesday Project Manager

Asla Paakkinen

Email: asla@jkles.fi

Name of the personal register

Grounds and purpose of the processing of personal data

The legal basis for the processing of personal data is the person's consent. The registrant discloses his or her information in order to participate in the Jyväskylä Entrepreneurship Society's event Discovery Tuesday. The purpose of processing personal data is to contact the participants, form suitable groups for the event and to take allergies into account in the menu.

Regular data sources

The information entered in the personal register is obtained from the registrant himself.

You can participate in the event using the registration form on the Discovery Tuesday website.

We do not collect personal information from individuals under the age of 13. If you suspect that a person under the age of 13 has provided his or her personal data to the register, please contact the Data Protection Officer, tietosuoja@jkles.fi.

Personal data to be processed

• Name

• Contact information (phone number, email)

• Information on allergies

• Previous and current work and studying experience

Disclosure of personal data

The information is not disclosed to other parties. The information may be published only with the consent of the person.

Data is often collected through GoogleForms and GoogleDrive. Google Inc. may store data stored in accordance with its Terms of Service in a non-EU data center. The use of the service is based on the service provider's Privacy Shield certificate in accordance with section 22 of the Personal Data Act.

Protection of personal data

• Only a limited number of employees of the association have access to the information in the register

• The passwords used follow the principles of a secure password

• Manual material: Paper prints can be taken from the register and will be destroyed when the need for use expires.

• Electronic material: GoogleForms, GoogleDrive. Access to the system is restricted to those who need it to organize the event. When the need for use expires, the data is deleted from the system

Data retention period

The data will be automatically deleted from the register within a reasonable time after the end of the event.

Profiling

Your personal data may be used to form as diverse and best possible groups for the event as possible.

Rights of the registered person

Right of access to personal data

The registered person has the right to receive confirmation if personal data concerning him or her are being processed and, if so, the right to receive a copy of his or her personal data.

Right to rectify data

The registered person has the right to request that inaccurate and incorrect personal data concerning him or her will be corrected.

The registered person also has the right to complete the incomplete personal data by providing the necessary additional information.

Right to delete data

The data subject shall have the right to request the deletion of personal data concerning him or her if

a. the personal data are no longer needed for the purposes for which they were collected;

b. the data subject withdraws the consent on which the processing of personal data is based and there is no other legal basis for the processing; or

c. personal data has been processed unlawfully.

Right to restrict processing

The registered person shall have the right to restrict the processing of personal data concerning him or her if:

a. the registered person subject denies the accuracy of his or her personal data;

b. the processing is unlawful and the data subject opposes the deletion of his personal data and instead requests that their use be restricted; or

c. The register holder no longer needs personal data for the original purposes of the processing, but the data subject needs them to draw up, present or defend a legal claim.

You can restrict the processing of your contacts if necessary.

The right to transfer data from one system to another

The registered person has the right to obtain personal data concerning him or her which he or she has supplied in a structured, commonly used and machine-readable form and to transfer such data to another controller.

Right to lodge a complaint with the supervisory authority

As the national supervisory authority for personal data matters, there is a Data Protection Commissioner attached to the Ministry of Justice. You have the right to take the matter to the supervisory authority if you consider that the processing of personal data concerning you violates the relevant legislation.

Contacts

In all matters relating to the processing of personal data and the exercise of their rights, the data subject must contact the data controller by e-mail at tietosuoja@jkles.fi.