20.10.2023

Privacy policy

Helsinki Education Week

Updated 20.10.2023:

This Privacy Policy describes how we process your personal data in the Helsinki Education Week service.

1. Controller and contact details of the controller

Controller

HundrED.org Oy, Tehtaankatu 27-29 D, 00150 Helsinki

Lasse Leponiemi, Executive Producer 

info@helsinkieducationweek.com 

If you have any questions about the Helsinki Education Week privacy policy, please contact us at info@helsinkieducationweek.com. 

2. For what purposes and on what basis do we process your personal data?

To use the Helsinki Education Week service's user-specific features, you need to be logged in to the service.

The purpose of processing personal data is to enable a personalised user experience, the creation of your own events and the registration of others for events. 

Profiling and automated decision-making

The service does not use automated decision-making. As a user, you can make your own choices about the events that interest you.

3. What personal data do we process?

We only process the information necessary to register for the Helsinki Education Week.

GROUP OF REGISTRANTSEXAMPLES OF DATA CONTENT
Yle ID, Facebook, Google, Microsoft,
LinkedIn or Apple ID account holder
Name
e-mail address
profile picture

E-mail sign-in ownerName
email
password


4. Where is the data collected from?

Personal data is collected from the user's own data, or from the user's consent from the user register of another service.

5. Who do we share your personal data with?

When you register for an event, your contact details will be shared with the event organiser. Personal data will not be otherwise disclosed without the user's consent or a legal obligation.

6. In which countries can your personal data be processed?

We provide services and process personal data primarily through operators and services located in EU or EEA countries. In some cases, we may also use operators, services and servers located elsewhere to provide our services. In these cases, personal data may be transferred outside the EU or EEA countries to countries whose laws on the processing of personal data differ from the requirements of Finnish law. We carry out such transfers in a manner required by law, for example by using standard contractual clauses approved by the EU Commission, and thus ensure an adequate level of protection of personal data.

7. What rights do you have in relation to your personal data?

Data protection legislation gives you various rights in relation to the processing of your personal data. These rights are exercised centrally via the info@helsinkieducationweek.com email address. 

However, we would like to point out that these rights guaranteed by law are not completely unlimited. Requests relating to the rights of the data subject will be dealt with on a case-by-case basis, taking into account the potential impact on the processing of the notification and the safeguarding of the investigation. For example, we may not delete your data in circumstances where we are required by applicable law to retain personal data, or exercise the right to review personal data in relation to data in the notification channel in circumstances where disclosure would violate the protected right or interest of another person or jeopardise the investigation of the notification.

The right to access your data. You always have the right to obtain confirmation of whether we are processing your personal data. If we process your personal data, you always have the right of access and the right to receive a copy of that data. We may ask you to clarify your request where necessary, for example, in relation to the details of the provision of the data.

We cannot exercise your right of access in situations where disclosure would violate the protected right or interest of another person or jeopardize the investigation or follow-up of the report.

Right to rectification of your personal data. If you believe that the personal data we are processing is inaccurate, incomplete or out of date, you may request us to rectify such personal data.

The right to have your personal data deleted. In certain circumstances, you can ask us to delete personal data concerning you. However, please note that we may not be able to delete data where there is still a legitimate need to keep it, such as a specific legal obligation or other particularly compelling reason, such as an ongoing abuse investigation or documentation of an investigation.

The right to object to and restrict the processing of your personal data. You have the right to object to the processing of your personal data. However, this does not imply a general right to object to all processing of your personal data, but is limited, for example, to situations where the processing is based on legitimate interests. We have the right to continue to process your personal data notwithstanding your objection if we have a particularly compelling reason to do so. Such a reason could be, for example, to investigate a suspicion of abuse.

You also have the right to request the restriction of the processing of your personal data, for example in situations where you contest the accuracy of your personal data.

The right to lodge a complaint with a supervisory authority. If you suspect, for example, that we have processed your personal data unlawfully, you always have the right to report this to a supervisory authority. The Office of the Data Protection Ombudsman, whose contact details can be found here: https://tietosuoja.fi/etusivu, monitors the lawfulness of the processing of personal data in Finland.

8. How long do we keep your personal data?

Personal data will be stored for 24 months, after which unused user accounts and related data will be deleted from the service.

As a user, you also have the right to be forgotten. You can request to have your account deleted.

9. How do we ensure the confidentiality and security of personal data?

We collect and process personal data in accordance with data protection legislation, the guidelines issued by data protection authorities and good data management and processing practices. We process personal data in accordance with technical and organisational measures designed to ensure data security. Personal data are processed only by persons whose job requires them to process personal data.

10. Can changes be made to this privacy policy?

The processing practices described in this Privacy Statement may change and this Privacy Statement may be updated accordingly. Changes may also be based on changes in legislation. We will keep this privacy notice up to date and recommend that you consult its contents regularly.