Privacy policy statement
We are committed to respecting individual and data protection. We process personal data responsibly in accordance with the Personal Data Act.
Controller
Pidä Saaristo Siistinä – Håll Skärgården Ren ry (Keep the Archipelago Tidy Association), Linnankatu 16, 20100 Turku, p. 02 274 5500, info@pssry.fi
Contact for register enquiries
Linda Fagerström, Linnankatu 16, 20100 Turku, p. 02 274 5500, info@pssry.fi
Purpose of personal data processing
The Association’s purpose for processing personal data is to manage member and stakeholder relationships and other comparable relationships, such as donors, and to realise their related obligations and duties, as well as to maintain communications and carry out marketing directed at members and stakeholders. Contact and membership data is collected for the purpose of handling membership matters, communications and invoicing. The data can be used to compile statistics, in which individual members cannot be identified.
The data in the member register is processed using an electronic member register service (CRM Service Oy) and is stored on the service provider’s servers for this purpose. When registering for events, personal data is processed using the Lyyti service.
Collection of personal data and regular sources of information
Keep the Archipelago Tidy Association collects personal data in the following instances:
- when you are using our website
- when you are ordering our newsletter and other materials
- when you are making a donation to the Association
- when you are sending the Association feedback or otherwise contacting the Association by e-mail, feedback form or letter
- when you are responding to an Association survey
- when you are registering and participating in Association events, campaigns, volunteer activities, competitions and lotteries
The Association’s personal data register contains the following information:
- full name and contact information (e.g., postal address, e-mail address, phone number and country)
- individualisation data (e.g., gender and year of birth, voluntary)
We collect information that is necessary to manage our member and stakeholder relationships. Such information includes the relevant communication method, waterway area, membership number, native language, newsletter subscription, donation and payment information, bank account information and other necessary information for dealings with the Association.
The information recorded in the personal register is provided directly by the person and/or is collected from their membership application form or through another communication channel.
If you provide information concerning someone other than yourself, you affirm that you have the right to provide such information.
Storage of personal data
The information collected in the personal data database will only be stored for as long as it can be considered necessary for the purposes specified for the processing of personal data. The Association defines the data retention periods and removal practices and ensures the removal of outdated and unnecessary data.
Disclosure of information
Data stored in the register is not regularly disclosed to any party outside the Association, including outside the EU or EEA.
We may disclose personal data to third parties who process personal data on our behalf on the basis of our mandate. These third parties may not use personal data for any purpose other than the provision of a service we have mutually agreed on, such as the sending of membership-related mail. When using subcontractors, we ensure that the processing of data is carried out in accordance with our privacy policy statement.
Principles for the protection and processing of personal data
The Association complies with good data management practices as well as the due diligence and protection obligations imposed by legislation.
Personal data is kept confidential and users of the member register are bound by the obligation of confidentiality. The electronic member register is located on a secure server protected by designated usernames. The Association and CRM Service Oy ensure that data security is maintained to the best of their ability.
In addition, the Association restricts the scope of personal data processing so that the data can only be accessed by employees of the Association and its partners who are required to process personal data as part of their duties.
Rights of registered persons
Registered persons have the right to access any information concerning themselves that has been stored in the Association’s member register. Registered persons have the right to request the removal of any personal information from the register. At the request of the registered person, we will correct, delete or complete incorrect, unnecessary, incomplete or outdated personal data. A request to access the data must be submitted in writing to the person responsible for register matters.