Controller of the register
Company: Kuvittajat ry
Business ID: 1886225-8
General information regarding the use of personal data
With regard to processing personal data, we comply with the General Data Protection Regulation of the EU (GDPR), which entered into force in May 2016 and is applied at the national level as of May 25, 2018. We only process such personal data whose processing is justified based on a user relationship, agreements, use of the website, legal obligations or the consent of the person.
What data is collected and stored
Our website uses various forms, such as a contact form and a quotation request form. The personal data collected through the forms is always based on the data subject’s consent (use of the forms is voluntary).
We collect the following personal data through forms:
- Email address
- Telephone number
- Date of birth and education (Online membership application form and online grant application forms).
The personal data collected through forms is only stored for as long as it is necessary for the purposes of the user relationship and producing the service. Personal data will be preserved in a member, public relations and invoicing register provided by Gruppo Software Ltd. and email addressess in MailChimp utility which covers those persons who are on our bulletin list.
In addition, we collect the following anonymized personal data with the help of analytics tools:
- Usage and browsing information for the website
- Identifying information for the device used
These data are collected for the purposes of developing our marketing. The anonymized personal data collected through analytics is stored for 26 months. The anonymized data cannot be connected to any particular person.
Rights of the Data Subject
The data subject has the right to request the controller of the register to delete the personal data concerning the data subject. The controller is obligated to delete the personal data concerning the data subject if the data subject wants to withdraw their consent or if the personal data in question is no longer necessary for the purposes of maintaining the service or user relationship. The controller is not obligated to delete personal data from the register if storage of personal data is required by legislation.
Processing and protecting personal data
Specific personal data can only be accessed by the personnel and subcontractors of the controller. The controller will ensure that the persons who have access to personal data are committed to maintain secrecy or are bound by an appropriate statutory obligation of confidentiality.
The personal data is stored in a digital format in a location secured from data trespass. Anonymized personal data may be transferred to third parties, such as analytics partners. We will not disclose specific personal data to third parties, except for legally required disclosures to authorities in exceptional cases.
All cookies used on our website are collected anonymously. Using the visitor tracking enabled by Google Analytics we can see how many people have visited the website and what pages they have browsed, but the above information is never connected with other registers, which ensures that the personal data remains anonymous.
If you want, you can prevent the use of Google Analytics cookies by modifying the settings of your browser or alternatively downloading the Google Analytics Opt-out browser add-on.